Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          EEs44KsZtEXCZZalAnL9X++f6y2c3Iqn3lcQV7ds/vo=
Subject key identifier:   FF:C4:58:A6:4B:D2:A0:2F:66:8F:38:8E:F4:F5:45:3B:11:52:D4:EC
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       019F946D5E0F198CCF94832B80AF50E9C0FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          06AF
Signing time:             Fri 24 Jul 2026 14:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:23 +0000
Files and hashes:         1: btFTz2r_BesZJN2u_oCmJMOAwZk.roa (hash: 0LBuX7o2jR543EQsgYTaLGtgZY2hOEDSxDyt/nU6qa0=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: cPxjkDphVguKdMJNLuUmZyd19fHAVW/jJLBqAlxDD5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:5e:0f:19:8c:cf:94:83:2b:80:af:50:e9:c0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: Jul 24 14:00:23 2026 GMT
            Not After : Jul 25 14:00:23 2026 GMT
        Subject: CN=ffc458a64bd2a02f668f388ef4f5453b1152d4ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5b:d0:64:80:11:3b:ca:fc:05:00:33:dc:b9:
                    1e:b4:f8:a2:2e:b3:bd:24:14:14:b3:c2:9c:85:45:
                    29:a1:b7:5c:be:d1:ca:f3:b0:1c:e1:9f:c6:29:1a:
                    ae:25:60:93:9f:91:74:c5:29:a4:33:3a:4f:21:1c:
                    cd:28:07:68:67:f6:23:5c:8c:a6:0d:8b:dd:c8:64:
                    58:52:ba:9f:9c:56:72:60:a1:ff:a3:3a:59:9e:50:
                    e2:c0:27:2b:8d:ad:d8:50:b8:2a:62:0f:9f:2b:83:
                    02:54:fd:c3:a1:99:f1:50:b4:5f:93:f0:11:b4:21:
                    a8:fe:8b:a8:4f:d8:a3:67:06:97:1c:81:27:fb:ee:
                    58:df:9f:3a:c7:d5:62:60:20:20:88:a4:9d:3e:a9:
                    95:d9:f6:b6:c1:98:a2:01:0d:e0:21:7a:50:6e:e4:
                    39:7e:24:30:f5:c9:0f:1b:48:99:fa:8b:ae:3e:78:
                    93:95:7c:7c:36:3d:ed:69:26:a4:60:51:81:3a:7e:
                    3c:95:97:1a:55:1f:a4:87:8d:02:0e:cc:92:14:f3:
                    b0:c5:f1:fc:68:ee:5b:e7:2c:a1:39:53:9c:45:f4:
                    f4:5d:2a:9a:9b:dd:44:a3:15:98:c0:c1:03:c5:38:
                    bb:6f:cd:c1:8b:96:8c:09:6d:b5:2e:04:fe:be:6e:
                    cd:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C4:58:A6:4B:D2:A0:2F:66:8F:38:8E:F4:F5:45:3B:11:52:D4:EC
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:f4:d8:df:af:47:cb:09:33:ae:67:2a:4b:b0:22:b6:27:d3:
         ae:24:f9:e5:25:15:19:6c:7c:bd:eb:c4:75:f5:56:d7:dc:9c:
         e7:2c:4b:fb:bf:28:86:f5:2a:e4:0a:01:d0:65:0b:5f:51:b6:
         b2:1d:a4:9c:a9:74:07:3d:f9:eb:51:eb:74:47:92:9c:ff:6c:
         21:ae:e4:3f:48:dd:c7:bb:b1:92:c7:b6:49:e3:e7:e3:e4:9d:
         09:4f:08:42:bb:15:c6:1e:3b:ec:b4:57:b6:ad:7f:e1:e6:ab:
         18:61:4f:81:df:a4:58:35:53:99:90:04:bf:08:74:bc:f9:a8:
         17:9e:e5:73:f3:33:53:69:fb:7e:50:38:a9:c7:fe:a4:ba:ee:
         23:d1:e5:83:97:2c:c7:99:f4:6f:98:18:23:23:06:71:62:c0:
         1c:a9:89:f5:1f:74:c8:d2:b2:83:54:12:07:bf:bc:4c:2e:c7:
         dd:94:4e:24:94:5b:95:c4:7f:ef:7f:1d:a7:e0:42:c1:7e:59:
         e8:72:84:22:aa:2e:77:0b:2a:b6:0a:a6:fc:aa:82:94:39:43:
         d5:23:0e:07:53:9e:d8:e6:d0:de:5f:77:85:a2:f0:65:f0:ce:
         9a:b0:71:f2:c7:d7:fa:d6:f8:2b:67:3e:0f:8e:82:2b:2b:8e:
         3d:da:a0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:58:23 2026 by rpki-client