Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
File:                     FW8E_FyodTFasLhUtkUGsJyZjpo.mft (raw, json)
Hash identifier:          Wl1oXMZudbt0d3CKO8lUW0LkZntjiZfiVD1TUcrfbVE=
Subject key identifier:   7A:34:60:2F:B9:C0:A0:8D:72:0B:31:2C:4F:72:3C:1B:03:F7:2C:56
Authority key identifier: 15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A
Certificate issuer:       /CN=156f04fc5ca875315ab0b854b64506b09c998e9a
Certificate serial:       019EE88E3FCE62CC3A5C3F5BC65A0F23FAFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
Manifest number:          196E
Signing time:             Sun 21 Jun 2026 05:01:36 +0000
Manifest this update:     Sun 21 Jun 2026 05:01:36 +0000
Manifest next update:     Mon 22 Jun 2026 05:01:36 +0000
Files and hashes:         1: B4cjW010Zm8FXtNv-3s2C-U1eDo.roa (hash: d0ILe5715y8lBsM7jJKFWLnSTqykB9yP4A1a+KHXASg=)
                          2: FW8E_FyodTFasLhUtkUGsJyZjpo.crl (hash: Ea2dly3plLbpzFZFfXrMT1dIeFW92/TUL0vX5DHPyc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:8e:3f:ce:62:cc:3a:5c:3f:5b:c6:5a:0f:23:fa:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156f04fc5ca875315ab0b854b64506b09c998e9a
        Validity
            Not Before: Jun 21 05:01:36 2026 GMT
            Not After : Jun 22 05:01:36 2026 GMT
        Subject: CN=7a34602fb9c0a08d720b312c4f723c1b03f72c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3c:bd:4b:1c:1e:89:82:a1:7b:d9:7d:b2:e3:
                    ac:55:e4:24:be:65:e0:4c:b8:aa:f3:f0:26:34:08:
                    c0:63:86:73:51:15:ef:0a:48:fa:38:36:5f:0f:d7:
                    01:10:6c:4e:96:5e:c2:0b:d0:49:8d:00:9e:96:50:
                    59:a2:f7:c9:7e:99:a9:0e:e7:14:f7:ef:48:5d:75:
                    06:7c:3f:0d:5c:ab:51:3c:36:6c:be:6a:f5:ec:95:
                    73:0c:e6:e0:d2:96:39:98:21:d6:c7:a3:df:1f:19:
                    82:24:9a:54:d5:53:af:5a:5f:23:b7:18:af:9a:63:
                    3a:d5:00:f8:b2:c3:cc:fa:64:8f:3f:9c:13:b3:e6:
                    a6:ae:dd:5c:ba:3e:75:de:81:17:da:b3:17:b1:0b:
                    85:5d:05:44:9f:d4:a8:44:22:fc:a8:2e:3a:15:d8:
                    2f:35:36:ae:f9:a1:87:75:ce:92:2a:d2:fe:c7:89:
                    69:6c:3c:cd:78:f0:b2:9b:5c:a7:aa:53:60:c8:86:
                    11:07:eb:1e:24:76:1e:70:e3:59:cd:69:d8:44:61:
                    ae:6e:1e:9a:bd:0d:1b:d6:75:2f:d3:a0:11:6f:4f:
                    c6:52:f5:f6:5a:e1:23:87:2b:f1:e8:4f:76:a3:e0:
                    05:63:4e:34:aa:e4:6d:aa:33:c2:f7:4e:f0:64:37:
                    bf:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:34:60:2F:B9:C0:A0:8D:72:0B:31:2C:4F:72:3C:1B:03:F7:2C:56
            X509v3 Authority Key Identifier:
                keyid:15:6F:04:FC:5C:A8:75:31:5A:B0:B8:54:B6:45:06:B0:9C:99:8E:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW8E_FyodTFasLhUtkUGsJyZjpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/f710ce-440f-405f-ac50-aa942994fc60/1/FW8E_FyodTFasLhUtkUGsJyZjpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:1d:d3:03:2a:80:49:44:62:f0:94:ec:25:14:40:be:45:bd:
         c7:a7:93:55:c0:6c:56:ea:17:ed:a9:13:2c:ce:30:2c:d0:e8:
         2c:e4:95:cf:be:0a:5c:7a:3e:7d:e9:92:37:5c:df:80:18:16:
         cb:93:5a:32:06:06:f1:92:3a:dd:ec:a6:e0:9a:96:eb:8a:4f:
         13:2e:42:1c:c4:21:b8:a5:d4:93:6e:17:08:32:ac:61:6e:91:
         c4:dc:68:25:57:75:3d:40:92:84:f0:d2:d1:20:cb:f5:59:15:
         86:c2:9c:8f:54:07:5b:e3:69:ba:72:85:36:b7:57:e8:35:fe:
         56:c4:d7:1a:8b:80:a3:1b:d1:ac:68:e7:d2:5d:40:86:83:7f:
         b5:93:4e:6e:d8:23:43:03:0e:56:e4:22:8f:d1:80:44:82:99:
         b6:e1:e1:db:51:5c:68:9f:c3:8b:1f:71:67:53:33:cd:6a:92:
         b2:4e:c5:d5:fc:37:34:2e:57:6d:bf:ff:d4:79:59:73:08:a2:
         08:23:76:52:2a:09:8a:38:24:e2:75:68:31:0e:19:97:17:ad:
         82:04:c8:99:e9:6d:03:7a:97:75:55:76:80:61:90:3d:b5:c2:
         30:c4:f4:73:a3:f5:9d:c7:7e:75:b1:46:b0:2d:55:ef:ae:46:
         5c:92:24:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:25:25 2026 by rpki-client