Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File:                     FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier:          1wPMfJBaZxhswVhcY7qXCVMKFm97Cpy6EZ/pnhOV5r0=
Subject key identifier:   3A:08:FF:4F:B7:FD:58:35:99:F6:5B:CF:4C:C7:D1:34:FA:E9:FA:98
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer:       /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial:       019F93C9896411BF2B1719E9B790EF6E001E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 11:01:26 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:26 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:26 +0000
Files and hashes:         1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: LYsLGwWfNmyk9wEh0CLWUOWtg5w/5Pj1x7YNk4eApNg=)
                          2: lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa (hash: V1SxHQwjwN4AmdXg8rhG9lnM2vuDDx2mOA2my+gG8OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:89:64:11:bf:2b:17:19:e9:b7:90:ef:6e:00:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
        Validity
            Not Before: Jul 24 11:01:26 2026 GMT
            Not After : Jul 25 11:01:26 2026 GMT
        Subject: CN=3a08ff4fb7fd583599f65bcf4cc7d134fae9fa98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3d:22:92:48:64:ee:73:64:6d:7b:c5:01:69:
                    1a:cd:42:4e:42:25:19:38:19:dd:a1:57:b7:cf:71:
                    9a:7a:3d:c4:9f:cd:a8:64:3e:ea:4c:89:fc:28:4a:
                    ea:ab:e8:96:88:ec:aa:99:79:62:b5:7a:3a:73:d2:
                    a6:d6:d4:4d:8e:8e:ca:0c:da:2e:4a:67:57:3b:d3:
                    0b:af:e2:bb:85:c1:66:dc:45:20:6c:d1:98:e3:f7:
                    fc:b8:cd:8f:3b:2d:c9:54:cf:5c:82:fb:61:90:9a:
                    39:b5:65:ca:28:d5:68:fa:34:f7:29:ca:7c:85:4c:
                    51:0d:7e:e9:c0:ae:9a:17:98:cf:f7:b9:35:d7:7b:
                    b5:99:89:2d:2b:72:f6:0b:44:77:6e:04:27:a5:a0:
                    48:e5:69:09:d2:35:d5:57:c4:68:86:bf:10:64:36:
                    07:08:d3:8a:dd:03:a7:8e:d4:88:08:7a:cd:0d:3c:
                    1f:e8:ce:c5:9e:5c:ad:18:57:87:4b:ac:f5:bf:2e:
                    23:a9:bf:6c:eb:9b:5e:e1:28:f8:fa:cc:78:bb:75:
                    40:ed:20:2c:c4:26:44:98:46:be:14:df:eb:c4:0b:
                    ac:f8:7f:ab:40:ce:17:ef:70:cf:0c:f5:06:b6:6a:
                    3d:eb:a6:3c:8b:18:e0:07:d9:56:a4:5a:04:a6:ec:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:08:FF:4F:B7:FD:58:35:99:F6:5B:CF:4C:C7:D1:34:FA:E9:FA:98
            X509v3 Authority Key Identifier:
                keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:bf:3f:02:a1:88:23:4b:94:07:c1:f6:07:34:be:aa:fa:26:
         07:03:e9:65:ca:29:ab:84:2b:94:48:ab:4d:38:51:b9:e1:35:
         a4:5a:e1:6e:4c:37:fc:b6:85:d5:b8:1e:25:7c:84:48:e8:13:
         f9:01:f4:3e:fc:28:00:ae:c6:6a:2e:1a:6e:23:c8:9c:c8:d7:
         47:a9:10:b6:9f:83:97:7f:25:2d:bf:24:fb:46:14:7f:48:b2:
         b6:4b:53:4a:ec:ba:ec:c3:af:20:8d:9c:e1:8d:c3:15:c1:f6:
         f8:c1:27:2f:7e:5b:43:5e:b1:e5:d1:e1:1e:40:7c:21:c9:92:
         ac:b7:5f:5b:65:ae:c9:36:0b:87:da:bf:f0:e6:c2:36:5c:71:
         35:17:46:03:2e:ec:b6:17:04:ff:d1:cd:a8:fa:55:63:85:f2:
         f1:a7:b5:8b:47:5c:e6:0f:30:6a:35:30:6b:89:b7:ed:d6:cd:
         5c:cc:c6:79:90:16:ee:0f:77:1b:e8:27:6f:f4:1c:38:2d:31:
         d3:f1:77:2e:de:6c:53:39:77:d6:8d:90:bd:a1:11:b3:79:dd:
         c8:61:ca:fb:a6:b1:20:f4:3c:88:2e:f0:20:62:8b:d4:1b:1a:
         43:25:27:e3:6c:e5:6c:58:07:11:90:e4:07:a8:66:0c:bc:ce:
         e9:eb:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:30:18 2026 by rpki-client