Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft
File:                     FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft (raw, json)
Hash identifier:          JB5U/QCW8BO2qdqMphZsIG/p0Myu9P8O17JVKN7c5a4=
Subject key identifier:   96:37:72:4A:4B:46:CC:36:21:1F:2F:C7:55:5B:72:87:F4:5A:C0:AD
Authority key identifier: 15:30:74:D7:FA:28:A4:3E:40:77:8F:F4:56:2F:53:4F:C3:8E:1F:B0
Certificate issuer:       /CN=153074d7fa28a43e40778ff4562f534fc38e1fb0
Certificate serial:       019D98188D04EBD62C05110EA39A40845166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft
Manifest number:          07BA
Signing time:             Thu 16 Apr 2026 21:00:38 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:38 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:38 +0000
Files and hashes:         1: FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl (hash: 331kdkHfms+knepaH6pi2a/sZ6U9bSW9iGxdATfUVnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:8d:04:eb:d6:2c:05:11:0e:a3:9a:40:84:51:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153074d7fa28a43e40778ff4562f534fc38e1fb0
        Validity
            Not Before: Apr 16 21:00:38 2026 GMT
            Not After : Apr 17 21:00:38 2026 GMT
        Subject: CN=9637724a4b46cc36211f2fc7555b7287f45ac0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:97:fa:7f:29:eb:9a:0e:67:14:b9:7b:d4:
                    2b:78:80:04:6c:6d:3d:02:41:2b:9d:ff:ea:c9:2d:
                    35:34:67:4a:ba:53:99:63:19:54:7a:fa:c4:cf:eb:
                    da:82:75:0c:3b:03:d0:7a:31:2e:10:7e:c6:17:3a:
                    aa:ff:26:f8:8f:fe:e9:4f:04:1f:fc:8a:fa:3d:1e:
                    f3:04:8b:48:40:2a:dd:6c:4c:2f:31:3b:79:e0:6e:
                    fa:e0:61:2f:ec:90:48:56:b6:a7:7b:4c:e1:e9:e2:
                    08:3f:58:fc:71:cb:04:ff:1e:42:0e:51:27:6c:64:
                    a9:30:c9:60:b1:a2:18:14:4a:d1:80:c3:3b:2f:27:
                    70:67:54:5f:46:04:49:58:8a:1d:dc:bb:97:72:5e:
                    e9:8d:cb:bf:94:dd:23:f6:1d:94:00:14:37:4e:e2:
                    52:61:da:4e:ce:17:31:a4:65:b5:fb:c5:03:b9:6c:
                    ff:eb:cd:7a:46:6a:cf:02:88:34:1a:d4:dc:c6:9d:
                    1e:1c:4f:d6:d1:3c:e1:de:93:a9:05:2a:d5:1e:b9:
                    2f:38:d2:2d:6c:b2:0a:a3:bb:08:72:f4:b2:fb:ce:
                    9d:87:9d:51:f8:85:2f:08:bb:68:88:cd:19:f8:2d:
                    b3:9b:05:e3:51:91:99:fb:d9:0b:8a:59:fb:29:4d:
                    ec:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:37:72:4A:4B:46:CC:36:21:1F:2F:C7:55:5B:72:87:F4:5A:C0:AD
            X509v3 Authority Key Identifier:
                keyid:15:30:74:D7:FA:28:A4:3E:40:77:8F:F4:56:2F:53:4F:C3:8E:1F:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:a5:a4:33:f6:bf:fa:96:16:e4:0b:dd:55:30:34:a5:51:47:
         5c:a3:ff:92:90:08:98:3c:b8:e8:1a:7f:47:cb:5e:db:ee:0b:
         95:06:de:57:23:61:8d:b1:5a:8d:2d:d8:fc:ed:59:7f:35:35:
         f5:53:74:a4:3c:43:2f:44:ff:4e:84:85:b9:b8:13:99:27:4a:
         4c:0f:39:16:bb:d6:e9:c8:f2:ae:82:fd:8f:36:9b:5e:00:80:
         60:b6:5a:a9:b4:ab:32:a6:94:b0:86:a8:9f:8e:1f:23:87:8a:
         72:c2:42:6e:6b:51:6e:ad:89:cf:53:7e:3e:90:92:df:8c:f8:
         f9:be:47:e4:e2:7c:b7:32:56:36:5b:1c:a8:ea:f6:83:f3:d6:
         97:19:f2:b7:eb:50:bb:e7:b6:5c:93:e2:b0:ca:42:d0:9f:97:
         bd:5a:d3:b3:64:59:b4:0d:31:4a:2a:20:63:a9:57:3c:ef:47:
         20:34:c6:db:99:4a:58:37:aa:3b:2c:6d:eb:aa:c8:de:12:da:
         e6:31:a5:95:f3:01:bf:f0:1f:de:7f:4b:96:fb:fc:7a:b6:04:
         10:a5:b3:1c:49:26:f4:93:b8:54:d4:0c:b2:e1:3f:d7:69:33:
         68:6b:a0:d2:ab:f3:e7:47:d3:e3:9e:86:04:79:12:42:a0:f0:
         b8:ca:08:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:13 2026 by rpki-client