Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File:                     FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier:          X7iPP2BeVV9nSam7/Hh2V9g0BqgpSZp3DO1p5uOJmg4=
Subject key identifier:   0E:34:1E:7A:DC:07:D5:51:FE:CB:6F:6F:4E:85:F8:FB:83:D9:13:FA
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer:       /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial:       019FAB2CA7842DC101AA89CA7F9724D774C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number:          193F
Signing time:             Wed 29 Jul 2026 00:00:57 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:57 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:57 +0000
Files and hashes:         1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: Cg1+bv/hZV37O/TJincGv1YmWhMNbqd5rJfe0ezWL9w=)
                          2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:a7:84:2d:c1:01:aa:89:ca:7f:97:24:d7:74:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
        Validity
            Not Before: Jul 29 00:00:57 2026 GMT
            Not After : Jul 30 00:00:57 2026 GMT
        Subject: CN=0e341e7adc07d551fecb6f6f4e85f8fb83d913fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:d7:73:82:29:af:10:83:1b:ef:87:df:06:
                    66:73:05:0b:20:41:e1:03:d4:05:08:27:98:f2:2f:
                    3f:a4:4e:c7:bb:3f:a1:cd:b1:4c:24:f6:1d:7e:cc:
                    8b:cb:56:1b:f3:46:37:d5:d5:03:4d:bf:3c:89:e5:
                    6c:45:c3:3b:d3:02:31:ff:5f:21:f1:06:48:3f:2e:
                    e9:5d:d0:13:60:99:c9:74:90:47:62:67:8c:ff:99:
                    a5:82:61:1f:38:37:34:99:b3:6a:4b:47:ff:75:8a:
                    d8:fc:57:1d:2f:7c:a8:8c:d9:1c:2e:2a:d0:86:8d:
                    93:88:88:49:2d:54:27:f5:54:c8:65:9a:42:ae:bc:
                    84:cc:45:99:6b:67:5f:50:3d:2b:e9:4c:52:5b:21:
                    77:ab:bb:41:0b:e5:2a:a9:27:23:49:b1:45:ce:38:
                    76:06:5a:46:3f:ff:78:90:c7:d0:79:99:9d:c3:27:
                    d6:c3:a8:58:cd:2d:14:77:f3:36:68:60:17:98:18:
                    76:b6:a4:01:50:c2:e6:cb:55:9f:fa:13:21:7b:29:
                    ca:d2:c3:70:72:40:5d:ee:b3:eb:ec:e3:b1:21:0a:
                    3b:f7:08:13:2d:b6:50:a4:9f:48:d2:fb:51:c1:20:
                    57:ae:6c:2a:47:35:42:3c:49:14:42:54:bc:a8:e6:
                    72:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:34:1E:7A:DC:07:D5:51:FE:CB:6F:6F:4E:85:F8:FB:83:D9:13:FA
            X509v3 Authority Key Identifier:
                keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a7:89:7e:ca:84:6d:d3:0e:6c:51:30:79:77:da:3a:5d:ea:
         0f:19:cc:93:3e:02:86:5b:04:92:50:ff:92:1c:80:28:7f:09:
         bb:ab:6d:95:29:fe:1f:18:f3:3d:6b:07:61:56:05:41:fd:56:
         28:30:b9:95:bf:99:cb:4d:5a:2b:17:ab:66:57:56:01:cb:89:
         4c:87:b6:73:27:c7:5b:9c:cb:15:2e:02:8c:d9:d7:41:0e:da:
         72:0f:1c:b9:b0:19:04:3c:a4:7e:df:ef:67:8c:66:62:6b:3a:
         2c:da:b2:ba:a9:58:d3:8c:a1:6b:9f:1f:f8:6c:7d:1c:f5:5c:
         32:59:bb:d9:21:62:ff:d6:c4:01:b6:0c:df:ca:c6:9c:bf:f8:
         d0:94:56:2d:0b:d9:7a:bb:b2:25:69:69:5e:98:d8:36:21:42:
         38:b6:99:8e:04:21:51:d8:0f:ff:87:e8:bd:57:ec:2a:83:0d:
         ce:fb:80:ec:8b:f2:35:c7:33:96:44:71:f0:2d:81:2b:2b:c9:
         46:8a:26:1c:29:7a:b9:68:cf:19:0f:af:24:45:83:aa:c5:b6:
         28:1e:09:b0:ef:95:03:b5:20:1d:1f:a6:38:39:9e:9d:cb:be:
         60:55:7f:4a:ce:43:1f:da:f1:ba:f0:5e:bd:50:81:83:1b:7d:
         5f:b7:02:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:09 2026 by rpki-client