Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
File:                     FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json)
Hash identifier:          M79n2wwpx4Av1iUqoSqGANK9lT2A09AeUIkv6lPE6+A=
Subject key identifier:   BF:5B:AB:16:7A:29:97:31:12:5C:51:23:09:CD:30:CC:58:CD:6C:2C
Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C
Certificate issuer:       /CN=14e282cf616284b58f85ec43e54c90bf9594e49c
Certificate serial:       019DA3AEBD1542EEBFC484951BAD3EBBA4FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
Manifest number:          1832
Signing time:             Sun 19 Apr 2026 03:00:31 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:31 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:31 +0000
Files and hashes:         1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: 1Fsz2SPPGwA+qFRYxIX56os1Tm6N26hIViYq6MYuNi0=)
                          2: ic08Zy2tp5ErO4fCUtcLYzoJ7HA.roa (hash: rUWPt9ieqVy+Gp/oD9EsBpO1X47eqDC+02qK6K5SPS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:bd:15:42:ee:bf:c4:84:95:1b:ad:3e:bb:a4:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c
        Validity
            Not Before: Apr 19 03:00:31 2026 GMT
            Not After : Apr 20 03:00:31 2026 GMT
        Subject: CN=bf5bab167a299731125c512309cd30cc58cd6c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:a4:8b:0f:32:5b:38:15:85:24:80:2a:57:
                    9f:a1:b1:e9:9d:4e:4a:d2:df:77:5e:52:5a:a1:47:
                    57:96:21:aa:d8:db:46:8e:2d:ac:af:6c:40:69:eb:
                    05:6b:01:4b:39:e1:39:2a:ac:59:12:ee:80:a0:4d:
                    b7:c0:9f:e3:c9:1f:ae:7f:98:af:65:e8:e0:68:a5:
                    ee:c9:d6:fa:72:de:d7:50:03:0f:0a:21:e6:1b:e8:
                    22:ff:89:2a:17:ed:38:01:25:ca:e9:69:81:e5:2d:
                    ea:da:b1:21:a6:a9:98:f0:e5:5e:df:3a:23:77:36:
                    f5:2b:fc:b5:25:b6:52:3b:c8:ce:a8:6e:bc:88:a8:
                    45:c8:d7:27:ee:c1:f2:f8:25:e1:98:03:8f:80:98:
                    7e:87:84:6b:61:82:9f:ba:1b:af:fd:23:48:e3:fe:
                    18:a4:d2:30:9a:43:c5:17:9c:bf:1c:3a:4b:23:58:
                    6c:46:e7:21:cc:3c:e4:a5:5e:73:07:46:5a:ec:eb:
                    0d:6b:e7:21:59:25:f8:f3:f5:d4:d7:dc:54:f9:24:
                    24:e9:25:2c:cd:17:00:d5:ff:ee:4a:bb:e9:53:f8:
                    d2:05:00:1a:91:ae:f3:54:6e:a2:90:12:9e:8c:d9:
                    79:62:2f:42:e0:64:d9:fc:e9:3f:a4:b6:e7:60:c4:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5B:AB:16:7A:29:97:31:12:5C:51:23:09:CD:30:CC:58:CD:6C:2C
            X509v3 Authority Key Identifier:
                keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:a6:49:b6:d9:0b:62:1d:d5:65:15:e3:f2:4c:88:77:93:01:
         d1:45:37:db:2e:83:4a:49:d6:15:cb:fe:19:66:7e:8b:91:b9:
         48:58:03:7e:0d:12:8f:18:db:97:a0:d4:72:7f:c9:62:1a:6c:
         33:b1:7f:98:f8:1d:e3:ba:6f:9a:b5:8a:43:6e:b6:90:61:e3:
         28:60:cc:9c:e3:79:df:35:58:c9:02:2c:02:d2:d9:ad:0f:8d:
         52:e3:ed:83:56:53:b8:c7:d5:c6:fa:29:06:6e:40:8b:09:94:
         6b:d7:65:c6:4e:b0:83:0a:ce:75:22:d7:22:03:aa:04:fc:92:
         ea:2d:c9:19:55:8a:c8:a4:bd:02:bb:5b:85:7c:ef:d0:22:2d:
         7f:9e:47:c2:0c:67:c3:c8:fe:55:16:61:b1:5d:d9:50:67:81:
         01:07:2b:85:1e:b5:b9:d4:eb:aa:2b:93:f8:44:b6:da:11:f3:
         15:e2:af:48:43:b3:68:98:fe:fb:a7:c2:17:b8:2c:5b:6f:1c:
         c3:6d:a2:a2:ad:19:3f:64:85:d3:89:a5:12:03:f9:fb:17:f5:
         93:0e:20:9a:02:78:70:56:c1:8b:f0:56:a8:24:f2:33:a8:40:
         aa:f3:c6:47:c3:d0:5a:28:45:bd:d6:07:8f:23:67:3d:6f:2d:
         37:e3:38:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:49:29 2026 by rpki-client