Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
File:                     FNEUZbrci_3-hbWKrm_H3MNtkUs.mft (raw, json)
Hash identifier:          hWzWLJjh9c8BvpIA53YXQW5ucZTaB6el66FYhS7HLVI=
Subject key identifier:   B6:D0:74:68:7D:81:55:E0:6E:77:85:CC:16:DB:5C:C6:C9:4A:42:43
Authority key identifier: 14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
Certificate issuer:       /CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Certificate serial:       019E1CEB60AC7B4F8D6C9616F0C04163F54F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
Manifest number:          E4
Signing time:             Tue 12 May 2026 16:00:48 +0000
Manifest this update:     Tue 12 May 2026 16:00:48 +0000
Manifest next update:     Wed 13 May 2026 16:00:48 +0000
Files and hashes:         1: FNEUZbrci_3-hbWKrm_H3MNtkUs.crl (hash: ao/iS6pf9jOXrnZQ0YPDu0FFS0fnGMZKUC229bra788=)
                          2: qH7c24JmkVBMYbJmi0p4XVjkvrA.roa (hash: +CSYNI9p5H8qPtanDM1P4+I8bU0tiGoJi7imMK4J3uA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:60:ac:7b:4f:8d:6c:96:16:f0:c0:41:63:f5:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
        Validity
            Not Before: May 12 16:00:48 2026 GMT
            Not After : May 13 16:00:48 2026 GMT
        Subject: CN=b6d074687d8155e06e7785cc16db5cc6c94a4243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:70:ca:41:eb:cb:c4:94:98:17:ca:d5:d4:
                    38:26:e1:57:10:d9:f6:46:08:c7:67:e7:2f:f3:91:
                    00:f5:89:ef:42:38:5f:fd:ce:89:08:6f:d1:02:50:
                    f7:8a:60:69:d8:d3:cb:43:db:ab:56:1b:71:60:b8:
                    f6:bc:76:b3:09:ef:f9:1c:ee:8d:10:44:72:e0:86:
                    4c:95:c2:d3:8f:ac:5f:c6:df:77:d5:94:b9:e3:e2:
                    6c:d7:d6:5f:41:9f:0c:4b:05:bf:3b:dc:a4:72:e3:
                    39:e4:f6:ee:3e:05:7b:dc:6a:18:71:1e:0b:8e:8d:
                    ed:c3:37:68:83:38:72:0b:7b:f7:bc:87:76:a8:3b:
                    c1:7b:af:26:b7:4e:ee:83:35:97:5c:5f:5c:17:aa:
                    b6:ad:e0:40:91:02:6f:0c:b4:73:91:49:da:09:06:
                    b2:12:99:00:c9:66:ab:71:ce:fa:e4:00:71:10:2c:
                    df:44:85:a6:f1:ee:c0:bb:07:6e:1f:e2:60:0b:b4:
                    92:8b:a8:63:0b:7e:20:ce:d3:4a:c7:46:f7:b3:dc:
                    23:6e:25:f8:f1:47:51:72:f0:8f:b3:ab:03:8f:e4:
                    a1:7d:ca:89:85:db:e2:48:16:09:bd:a9:6b:a6:4e:
                    a3:e9:e8:33:ff:2d:43:86:18:58:d4:bc:cb:bb:da:
                    e9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D0:74:68:7D:81:55:E0:6E:77:85:CC:16:DB:5C:C6:C9:4A:42:43
            X509v3 Authority Key Identifier:
                keyid:14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d3:e3:f9:22:fd:b1:ac:8f:92:43:13:47:40:ab:17:20:04:
         8f:26:47:fc:1c:69:9c:0b:aa:43:8a:78:67:14:d9:be:40:63:
         d9:ac:93:04:d0:7a:43:6a:de:74:38:4e:82:dc:4e:a8:c7:eb:
         e8:5b:43:f2:d1:26:da:df:4f:10:d4:33:ca:68:e2:b3:b9:d5:
         ce:cc:40:99:99:30:77:0e:10:2b:7e:95:80:dd:78:73:e7:bf:
         8c:1c:e7:ff:87:d0:d8:24:2f:ff:7d:f5:90:63:2a:3b:d5:0b:
         e0:54:8a:f8:ce:75:e6:b7:13:b6:37:5a:93:28:43:0f:8f:83:
         15:40:f4:ed:ac:eb:92:5b:86:77:49:d8:d6:5e:ed:ca:7c:93:
         3e:f8:f4:23:3f:a5:49:56:1c:64:a7:87:d2:a0:d2:d9:5c:6c:
         2a:f0:e4:3a:c7:42:90:12:72:db:54:c1:41:d9:f1:13:fd:82:
         3c:0e:25:09:34:3b:d1:29:fa:7a:88:89:82:4c:42:c2:74:fa:
         ea:c1:2a:31:7e:7b:8d:a1:ac:4b:28:50:51:59:a4:84:92:17:
         99:0d:18:2a:1b:2c:ac:cb:ce:d4:0c:18:67:7a:97:1a:df:3a:
         c5:a1:54:33:d5:bf:52:78:bd:8e:0b:c9:c2:bf:15:7e:3a:7f:
         73:d2:34:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:35 2026 by rpki-client