Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File:                     FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier:          goJz3RlO41YO9Qrb0PWSvy+jSikpKFLOurMvRtUw98Q=
Subject key identifier:   AA:DC:20:35:08:51:18:60:BB:41:D3:83:22:60:70:6E:B5:35:D5:42
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       019EBF9126C1E14B8979587C7B1EA5D19623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number:          1961
Signing time:             Sat 13 Jun 2026 06:00:21 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:21 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:21 +0000
Files and hashes:         1: 24wWacTxTKeBWvKFGo-5GNyB8dE.roa (hash: NCrqjTsRyG9h5K6XaUABqOpJegvTm0IyWhFRdr9x/Sk=)
                          2: 8eUjrNm6imMBEiASLOUuqltQoVs.roa (hash: ZfpOTqbTAn2CuRX0LoEyNNAQ5rM0VLzFBNYb2IBiGIE=)
                          3: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: em6G74R18UUFnlS0E9DvwRJJ+RqgUWWKc/aKMenA+v0=)
                          4: FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa (hash: glk6t/DUYkuI6x781kKCmhQHELR1hKXbP1AbR2kHTMc=)
                          5: NdxMow94TNhxlzIzMI_r48W5M8A.roa (hash: 1nuZTI+erTKNkNC0wnIV7yjz0eGXOFGrHb4Av8qGq00=)
                          6: OpTwdj69eMigXueWV1BOB2dxLbA.roa (hash: 2kgLJoiz6VCqwiPbikEb5+NrvRferle8wU/FOd3hfZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:26:c1:e1:4b:89:79:58:7c:7b:1e:a5:d1:96:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Jun 13 06:00:21 2026 GMT
            Not After : Jun 14 06:00:21 2026 GMT
        Subject: CN=aadc203508511860bb41d3832260706eb535d542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:9d:2f:62:13:4e:cf:d7:1e:d0:45:64:cc:
                    73:f3:ba:1c:f7:9d:53:e9:a9:8d:3b:82:2b:e3:70:
                    16:18:21:07:1b:44:7b:59:56:0f:31:05:52:34:7d:
                    c4:07:26:59:1c:34:9d:90:c4:27:18:80:78:cf:53:
                    c6:84:9d:f8:0e:42:38:55:67:d0:95:db:71:91:7c:
                    b8:02:b4:01:42:ce:9d:b0:af:41:28:dc:6e:51:62:
                    1a:c5:d4:20:ce:7a:8d:79:bc:a9:fa:d7:4d:53:9c:
                    f9:ee:16:12:dd:88:59:8d:2b:79:eb:d9:67:7a:ca:
                    ac:b9:69:c8:40:68:0f:cf:c5:42:fa:5b:c8:9b:6f:
                    0e:4f:7c:9a:43:c4:84:f7:b7:f2:21:06:5b:f5:ee:
                    5c:bb:2b:a0:20:63:be:1e:8a:cb:ea:5d:bc:39:20:
                    2c:2b:88:02:dd:2d:fb:fd:1d:d6:d5:3b:72:54:cc:
                    91:5e:2c:b8:5d:c6:66:73:b4:9a:a6:79:dd:fb:3d:
                    0a:39:ad:c6:6f:a5:09:db:52:1c:0d:fc:f1:4f:e4:
                    87:3c:da:30:bb:0c:d1:27:33:5f:5e:c3:fb:0e:49:
                    ab:fc:71:67:65:71:be:7a:27:a8:89:99:8d:ff:c9:
                    2a:a0:ea:1a:29:ca:bf:7b:60:c9:70:b1:4c:cc:a4:
                    43:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:DC:20:35:08:51:18:60:BB:41:D3:83:22:60:70:6E:B5:35:D5:42
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c4:b5:04:04:60:4d:ec:6b:52:57:5b:14:83:ff:91:b2:53:
         6c:26:b8:a7:03:8f:03:d6:45:c5:15:e8:fa:3c:cd:98:6f:d1:
         ce:a9:34:06:2f:fb:c7:27:00:a9:63:0c:6f:a3:07:1b:a8:3e:
         4e:d0:58:ee:9c:cc:75:4c:1b:2c:b4:28:a0:bc:ca:c3:71:c1:
         d5:7a:e5:e6:f1:db:26:79:96:92:11:29:d4:5c:ac:b9:1b:e5:
         d9:67:4f:55:4d:25:3d:d8:a0:17:2d:97:9c:d9:19:0e:58:e4:
         9a:7b:af:18:36:ba:5d:cb:ff:7c:44:2d:47:8b:2e:3c:3d:3c:
         6a:a2:d2:55:21:01:bc:d3:6d:c4:17:05:31:0e:34:2c:79:9d:
         7e:b1:f9:5b:fd:02:29:50:05:71:46:30:c5:0f:46:da:8b:da:
         d2:24:50:3a:40:53:76:56:c5:23:00:8e:1d:84:82:ee:b2:55:
         c4:e4:ba:38:99:91:ea:f6:db:9b:3a:c3:7d:53:f7:cc:65:88:
         75:b4:dc:d7:0e:af:9b:fd:d2:21:4d:19:15:48:37:1e:1e:cc:
         59:63:1e:53:62:5e:47:9b:a0:13:ae:2a:8f:a2:a8:64:37:bf:
         8e:6f:25:b2:02:c1:19:ec:f9:04:36:f5:d4:fa:f2:20:e9:06:
         4c:69:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:44:26 2026 by rpki-client