Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft
File:                     FClngBLZAqCTDjRcEuCVNWoC4A0.mft (raw, json)
Hash identifier:          5qJjdLucjosA03OK5/J6XHCi+I592d6VyAoMJJWAF5w=
Subject key identifier:   4E:70:90:C8:9C:A7:EB:D9:25:D4:50:35:80:ED:71:40:46:88:57:C1
Authority key identifier: 14:29:67:80:12:D9:02:A0:93:0E:34:5C:12:E0:95:35:6A:02:E0:0D
Certificate issuer:       /CN=1429678012d902a0930e345c12e095356a02e00d
Certificate serial:       019F95B7DA8B45CB25674A0AB3852DEAB739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FClngBLZAqCTDjRcEuCVNWoC4A0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft
Manifest number:          90
Signing time:             Fri 24 Jul 2026 20:01:21 +0000
Manifest this update:     Fri 24 Jul 2026 20:01:21 +0000
Manifest next update:     Sat 25 Jul 2026 20:01:21 +0000
Files and hashes:         1: B6Z0xcok0iiRihknudVJheKo3Os.asa (hash: bIM6WYFOdNzyb9nsyhBNXD2CIFhvQMqptK0lGeaX93M=)
                          2: FClngBLZAqCTDjRcEuCVNWoC4A0.crl (hash: fcIgiHqeckqRH+sHezmdvfwMdTrmh6s7IYehlOOWPRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FClngBLZAqCTDjRcEuCVNWoC4A0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:da:8b:45:cb:25:67:4a:0a:b3:85:2d:ea:b7:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1429678012d902a0930e345c12e095356a02e00d
        Validity
            Not Before: Jul 24 20:01:21 2026 GMT
            Not After : Jul 25 20:01:21 2026 GMT
        Subject: CN=4e7090c89ca7ebd925d4503580ed7140468857c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ad:50:50:59:ab:d6:1f:b0:7f:88:0a:47:e9:
                    db:28:c7:76:d5:8d:62:60:48:64:3b:63:fb:d2:93:
                    d1:fe:2a:5b:88:cc:39:cf:8d:27:bc:0a:85:2f:85:
                    ae:70:28:74:98:04:6e:42:50:ab:fd:b2:d9:52:ed:
                    30:46:9a:ea:f5:9d:4e:5f:be:1b:a4:fd:17:21:21:
                    aa:a1:ec:85:40:55:9f:e2:12:9c:c8:5a:66:3c:4e:
                    5a:e1:69:e8:05:fc:f9:7b:d5:1c:40:97:02:d6:77:
                    bc:51:3d:73:23:ef:be:0a:38:be:9c:8a:21:41:d2:
                    58:d8:57:a2:31:b5:4f:79:b2:cb:e2:d9:e3:7a:c3:
                    df:22:94:e3:92:fd:ad:ac:63:5c:f9:a8:4e:ef:2d:
                    0b:1e:0c:bd:72:46:d3:b6:81:ac:1f:03:76:ab:42:
                    fb:95:23:07:38:7a:a9:db:67:8d:1d:47:e7:76:c5:
                    c7:d8:6e:73:83:91:d1:52:39:72:fe:a2:1e:f4:6d:
                    ba:2e:df:20:9d:b5:b7:60:57:53:5d:ea:6b:24:13:
                    c1:1c:02:d1:d9:21:66:3e:96:81:e2:be:a9:f2:53:
                    56:86:65:2e:de:4d:86:4f:e7:88:3f:f6:b3:66:58:
                    dd:2f:0c:42:75:c9:d9:82:02:36:98:99:8b:36:69:
                    4b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:70:90:C8:9C:A7:EB:D9:25:D4:50:35:80:ED:71:40:46:88:57:C1
            X509v3 Authority Key Identifier:
                keyid:14:29:67:80:12:D9:02:A0:93:0E:34:5C:12:E0:95:35:6A:02:E0:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FClngBLZAqCTDjRcEuCVNWoC4A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/27bf53-8c0d-4bf2-ae98-702e40160279/1/FClngBLZAqCTDjRcEuCVNWoC4A0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b5:89:2b:43:b6:99:5b:ff:0b:fc:3d:ca:aa:22:70:8f:87:
         2d:29:22:e7:d7:78:81:12:3e:cc:f7:15:99:d5:53:f4:48:25:
         db:db:a6:bb:94:cc:af:43:78:69:5b:f5:a2:75:f4:16:8e:af:
         26:89:1a:4f:7c:12:db:dc:64:17:3e:f8:c7:9a:fe:c1:7b:99:
         a7:62:f0:a4:d3:27:e1:02:92:84:dc:24:0a:b5:25:d3:c6:7f:
         c2:de:10:6d:37:49:2a:72:8a:dd:65:eb:1a:b1:07:b7:22:85:
         6e:31:2d:52:79:b3:4c:77:9d:d6:9a:ce:af:7f:f0:f6:d0:17:
         e3:a4:f6:a7:20:b6:3f:d3:7c:fc:bb:f6:77:d6:94:4f:78:c8:
         db:9c:f8:e2:de:dd:d9:77:db:cd:96:fe:c1:49:3a:0b:d2:6f:
         15:7a:78:97:84:5c:9c:8f:f1:b6:79:d5:c1:50:7f:24:6c:9e:
         cd:f4:16:49:82:12:c2:01:ce:8b:f4:fa:12:0d:53:7b:90:2f:
         56:42:f8:25:af:1d:0b:5e:57:e6:0f:79:0b:ee:6b:d7:22:74:
         6f:fb:9f:2e:0e:3e:4a:be:a7:56:32:00:7b:5d:03:66:53:f6:
         25:73:08:0b:d9:b2:36:a1:ea:2e:c5:45:52:90:d1:b6:f3:e6:
         4e:cb:33:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Vt9qLRcslZ0oKs4Ut6rc5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0Mjk2NzgwMTJkOTAyYTA5MzBlMzQ1YzEyZTA5NTM1NmEw
MmUwMGQwHhcNMjYwNzI0MjAwMTIxWhcNMjYwNzI1MjAwMTIxWjAzMTEwLwYDVQQD
Eyg0ZTcwOTBjODljYTdlYmQ5MjVkNDUwMzU4MGVkNzE0MDQ2ODg1N2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva1QUFmr1h+wf4gKR+nbKMd21Y1i
YEhkO2P70pPR/ipbiMw5z40nvAqFL4WucCh0mARuQlCr/bLZUu0wRprq9Z1OX74b
pP0XISGqoeyFQFWf4hKcyFpmPE5a4WnoBfz5e9UcQJcC1ne8UT1zI+++Cji+nIoh
QdJY2FeiMbVPebLL4tnjesPfIpTjkv2trGNc+ahO7y0LHgy9ckbTtoGsHwN2q0L7
lSMHOHqp22eNHUfndsXH2G5zg5HRUjly/qIe9G26Lt8gnbW3YFdTXeprJBPBHALR
2SFmPpaB4r6p8lNWhmUu3k2GT+eIP/azZljdLwxCdcnZggI2mJmLNmlLjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5wkMicp+vZJdRQNYDtcUBGiFfBMB8GA1UdIwQY
MBaAFBQpZ4AS2QKgkw40XBLglTVqAuANMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkNsbmdCTFpBcUNURGpSY0V1Q1ZOV29DNEEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8yN2JmNTMtOGMwZC00YmYyLWFlOTgt
NzAyZTQwMTYwMjc5LzEvRkNsbmdCTFpBcUNURGpSY0V1Q1ZOV29DNEEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8yN2JmNTMtOGMwZC00YmYyLWFlOTgtNzAyZTQwMTYwMjc5
LzEvRkNsbmdCTFpBcUNURGpSY0V1Q1ZOV29DNEEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAebWJK0O2
mVv/C/w9yqoicI+HLSki59d4gRI+zPcVmdVT9Egl29umu5TMr0N4aVv1onX0Fo6v
JokaT3wS29xkFz74x5r+wXuZp2LwpNMn4QKShNwkCrUl08Z/wt4QbTdJKnKK3WXr
GrEHtyKFbjEtUnmzTHed1prOr3/w9tAX46T2pyC2P9N8/Lv2d9aUT3jI25z44t7d
2XfbzZb+wUk6C9JvFXp4l4RcnI/xtnnVwVB/JGyezfQWSYISwgHOi/T6Eg1Te5Av
VkL4Ja8dC15X5g95C+5r1yJ0b/ufLg4+Sr6nVjIAe10DZlP2JXMIC9myNqHqLsVF
UpDRtvPmTsszEQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:56 2026 by rpki-client