Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File:                     FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier:          IQRgADZCEoj5AIaglAZ4ZfJn/u+9zujLqWOybFXuDiA=
Subject key identifier:   C5:E9:2D:F1:AE:0E:7C:32:72:DF:7C:FB:24:56:32:58:F7:E0:86:2E
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       019D99999481D6A83F373D73D309F824A0BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number:          18C7
Signing time:             Fri 17 Apr 2026 04:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:12 +0000
Files and hashes:         1: 8eUjrNm6imMBEiASLOUuqltQoVs.roa (hash: ZfpOTqbTAn2CuRX0LoEyNNAQ5rM0VLzFBNYb2IBiGIE=)
                          2: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: ziwWUFI1LstZKciDlTPs/WG7hX+ymQg5gY7E0YSDOVI=)
                          3: FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa (hash: glk6t/DUYkuI6x781kKCmhQHELR1hKXbP1AbR2kHTMc=)
                          4: OpTwdj69eMigXueWV1BOB2dxLbA.roa (hash: 2kgLJoiz6VCqwiPbikEb5+NrvRferle8wU/FOd3hfZM=)
                          5: XdEB96U82mHFGVm_nS4xtciGIkQ.roa (hash: hdzlPow2QIj+p15z7CdLi4KjuG4H8crIwMXk1C1mtMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:94:81:d6:a8:3f:37:3d:73:d3:09:f8:24:a0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Apr 17 04:01:12 2026 GMT
            Not After : Apr 18 04:01:12 2026 GMT
        Subject: CN=c5e92df1ae0e7c3272df7cfb24563258f7e0862e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:69:ef:65:69:e8:b1:13:9d:25:13:57:33:
                    f3:e9:2a:3a:d8:3c:33:c4:5c:ae:ea:90:10:db:2d:
                    5b:43:a4:11:b5:cd:fe:18:88:35:8c:fc:1c:0e:68:
                    c1:0c:52:6b:c8:4f:91:f1:4b:8f:5d:c0:5f:67:48:
                    30:e2:2f:9d:04:88:cc:03:31:19:bc:a0:17:17:e1:
                    26:56:c0:89:00:41:9f:c7:4d:59:72:31:bd:5d:c7:
                    f9:85:93:11:e1:ee:e5:99:41:d5:1a:79:fa:07:c2:
                    5b:5e:5c:fe:ca:3d:ca:5c:e6:b0:7b:d6:89:46:47:
                    3d:f6:22:e7:f6:73:9f:1b:21:80:f9:15:a2:43:51:
                    71:ae:2e:67:1e:6c:31:c7:cc:d4:bc:fc:4b:ed:0e:
                    f4:c5:d8:4e:06:ef:75:b1:b8:0a:5d:c2:25:fd:e9:
                    00:b1:f3:a8:d9:36:9d:f0:87:e8:3f:61:00:f2:ed:
                    d5:0d:bf:e2:23:70:9f:53:99:03:88:e8:9b:e4:d5:
                    50:9f:89:f2:b5:da:75:82:c7:fd:6e:30:01:91:c7:
                    7d:2c:32:67:ce:d4:cf:fe:f0:d3:72:4a:08:df:46:
                    57:28:fe:42:b1:b2:47:b1:6a:50:cb:d3:5d:d6:da:
                    9a:14:ed:0d:dd:63:ee:e0:5c:e9:60:2e:1f:51:95:
                    ef:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:2D:F1:AE:0E:7C:32:72:DF:7C:FB:24:56:32:58:F7:E0:86:2E
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3d:cb:72:7b:68:39:18:da:91:4e:80:c6:a9:8c:a9:69:e6:
         8a:dd:6c:e5:8c:b8:b6:df:d4:d2:12:ed:75:8e:2f:61:9b:f6:
         49:c8:20:6c:12:bb:22:0d:87:a0:e9:18:bf:60:69:36:dd:19:
         a9:1a:53:44:17:b1:bf:35:e6:23:02:48:10:fa:5c:77:3c:b7:
         ef:a4:81:a5:2b:20:93:42:b9:d8:f8:40:cf:e7:15:27:fc:48:
         53:22:09:c5:ca:76:fa:26:f0:3e:23:98:eb:7d:ea:fe:e7:3f:
         28:18:4a:9c:85:e6:6b:3a:71:8a:e0:eb:1b:1e:65:42:a4:77:
         5a:d3:d5:75:5b:f4:22:ea:17:df:0f:98:a1:a0:f3:09:2f:1a:
         45:6a:44:32:08:62:54:c0:b2:a2:5c:1e:ba:a4:73:aa:c5:1c:
         26:56:b9:8b:76:e3:9e:ca:de:18:6c:c0:fa:f8:a1:f8:95:11:
         79:f2:10:8e:07:39:fb:9c:a4:08:5d:6d:4e:43:97:57:16:36:
         da:f0:9c:a3:b2:ff:19:15:08:cb:13:f1:88:1e:75:6c:bc:29:
         43:d1:aa:af:83:1c:19:92:f2:91:ab:f6:d2:56:a9:e0:cd:19:
         6b:c7:68:a9:15:6a:ca:b4:3b:d2:43:1c:a8:7f:0c:4c:c1:c9:
         91:f9:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:22 2026 by rpki-client