Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
File:                     FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json)
Hash identifier:          lrPAzbaEdWiuE2rYvOdvtY0Ti0RB7gg7ygVbaSUGHOc=
Subject key identifier:   56:09:8B:12:A6:DA:87:BF:E0:30:50:06:54:38:1E:63:7A:9E:37:8A
Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF
Certificate issuer:       /CN=14da869ba03374a192c8e3bdce950a90027adcaf
Certificate serial:       019E1F478D5FC8D5B468E0582F2D370DA955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
Manifest number:          106A
Signing time:             Wed 13 May 2026 03:00:43 +0000
Manifest this update:     Wed 13 May 2026 03:00:43 +0000
Manifest next update:     Thu 14 May 2026 03:00:43 +0000
Files and hashes:         1: 45BMgCuqB7Qqmdq4IfySW95860Q.roa (hash: /3yVgENUMMM3hvYZVMX2EJz9expmMzP+geHM5UtLC0g=)
                          2: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: mE8QxkLlnS5cgibePl+3PvPvjnqB3efAm7ldu3X7lwo=)
                          3: RWQ71z2DZSS9r_C7kS5T8uzb9QA.roa (hash: gaz/WwXIMVoLlKWboyvLKp3LOZlOzuqEFf6XY+CWPxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:8d:5f:c8:d5:b4:68:e0:58:2f:2d:37:0d:a9:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf
        Validity
            Not Before: May 13 03:00:43 2026 GMT
            Not After : May 14 03:00:43 2026 GMT
        Subject: CN=56098b12a6da87bfe030500654381e637a9e378a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:36:e0:08:94:7b:79:83:49:f4:33:18:74:d0:
                    45:47:f0:c8:e9:e9:d2:43:b9:49:a0:87:ae:28:01:
                    36:7a:3c:4e:9c:f1:8e:f5:9f:98:17:0b:7f:54:d1:
                    41:68:03:ed:88:c1:5f:fe:be:13:5f:51:7f:36:b6:
                    86:69:6e:8f:86:16:7c:aa:ee:6c:be:69:78:b0:ee:
                    e2:7e:ad:ac:36:be:ac:14:2d:36:4d:30:f0:bf:5e:
                    b4:2b:56:37:e1:05:ef:63:05:51:9a:0f:0a:d7:30:
                    e1:28:3a:2e:ff:65:5f:f0:b9:b2:a7:62:f1:48:f8:
                    14:c6:0f:50:ba:90:28:e5:f9:46:fc:ee:a5:7e:b5:
                    5c:12:54:2f:88:2a:0d:26:e1:9a:02:07:8e:fd:57:
                    1b:9b:5d:f9:30:8e:c1:e2:4d:c2:90:ee:00:43:49:
                    1a:76:59:66:3f:c2:ef:24:24:45:9a:9b:7c:ba:75:
                    b3:aa:d0:43:1f:66:c5:3f:98:08:26:65:08:9e:c8:
                    78:22:80:ee:a1:09:89:71:bf:c9:f0:23:6d:9c:d3:
                    b5:54:d1:de:92:49:f7:ff:24:9e:dc:9a:aa:72:c7:
                    fb:87:e9:5d:11:3a:df:ef:53:0c:eb:18:5a:98:c3:
                    a8:1e:15:67:32:d4:55:ce:0d:15:a4:8a:af:ec:02:
                    0b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:09:8B:12:A6:DA:87:BF:E0:30:50:06:54:38:1E:63:7A:9E:37:8A
            X509v3 Authority Key Identifier:
                keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:66:b1:13:29:99:4a:f0:49:ef:d3:f6:17:af:86:97:89:61:
         e8:1a:e9:8a:b5:e3:56:b6:bd:9b:3c:45:a4:45:f8:96:ac:89:
         86:a9:50:f0:34:a0:f9:a3:08:89:e0:8f:9b:eb:a1:06:90:4b:
         3e:f3:a6:f4:a4:6e:41:ff:66:8d:10:ef:a9:f9:36:2e:31:89:
         eb:c7:11:82:f5:2c:8c:d4:8f:9b:a1:df:53:f4:59:c9:db:aa:
         12:2e:ae:ef:67:ef:4b:71:e0:99:33:7e:fd:3e:d6:64:48:63:
         98:64:ba:77:a7:9b:08:02:5e:d2:10:64:37:60:c1:23:b6:56:
         f4:f9:91:bd:90:ca:16:29:ff:2c:18:da:bd:1f:fd:de:e9:f4:
         8d:7e:1a:42:93:ae:25:00:dc:8f:62:7a:d8:73:a5:b9:9b:db:
         ff:33:d3:c7:cf:be:2f:2e:59:9c:fd:07:44:b0:77:b5:d3:e1:
         9f:bb:94:45:08:cd:c8:c2:ae:13:0a:f9:46:c4:f7:88:20:32:
         db:95:27:d9:bb:b9:55:e6:4e:52:ae:86:ac:09:cb:c7:02:db:
         93:70:3b:a2:cc:21:fa:25:e8:42:90:4b:eb:95:30:85:1f:8b:
         1d:cf:34:6f:fb:02:ed:3a:10:76:45:6c:ab:4a:e1:36:30:bf:
         f1:36:80:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:30:02 2026 by rpki-client