Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
File:                     FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft (raw, json)
Hash identifier:          fCvaLOHRT4D5/YTLaYgpHQdhnNpITgfrJ40DwZBnrOQ=
Subject key identifier:   03:A5:90:74:74:F0:16:5A:FC:3E:BD:2E:24:D6:A5:6D:AB:26:00:4C
Authority key identifier: 15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE
Certificate issuer:       /CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
Certificate serial:       019F9391C5AC381E79CDCD884276E606D0DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
Manifest number:          19C5
Signing time:             Fri 24 Jul 2026 10:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:31 +0000
Files and hashes:         1: FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl (hash: Wkb/CGOs79nmdJwZlO0Li/ikwqbOenlCTv+UW1giXqY=)
                          2: gwu-BJ3nFsQR4A2sjavYqIImEU4.roa (hash: SzyZF8veJPj3xDoLq44v4XCelHoO3kDWlC5lKDw8f44=)
                          3: hXykEKACOboZCO5aeEWdMYeE0Lc.roa (hash: 7DfJrK0FEAGJWDjTUJ6JpGF4NCoaruD7Zg59w8fqoFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:c5:ac:38:1e:79:cd:cd:88:42:76:e6:06:d0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1533cd2d1f6dcf1eec97e86943c4e53b0c88eaae
        Validity
            Not Before: Jul 24 10:00:31 2026 GMT
            Not After : Jul 25 10:00:31 2026 GMT
        Subject: CN=03a5907474f0165afc3ebd2e24d6a56dab26004c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:20:81:d1:99:f6:5e:d3:7c:a3:cc:cc:a7:
                    60:8c:12:08:5b:70:d7:9d:05:0b:ca:89:36:d8:4a:
                    81:26:ff:66:28:1d:b5:4f:dd:d2:35:13:08:89:48:
                    79:0e:db:8a:e1:ff:c3:c0:59:c5:fe:84:ec:a1:e9:
                    14:74:33:9c:6c:b9:3c:98:8f:e8:54:4a:d5:a4:d8:
                    81:1b:e2:80:89:62:d2:c2:4c:9a:08:bc:e3:38:19:
                    a0:57:e9:19:06:98:36:60:1b:8d:cc:ff:0c:f3:01:
                    90:99:9e:d9:da:1b:b0:8e:31:13:b8:cb:8a:75:ab:
                    ef:34:87:4e:67:e9:68:96:4c:01:70:8e:59:22:af:
                    77:29:fa:2f:ca:3f:a1:7f:09:34:6f:5a:90:a5:39:
                    b2:48:ee:17:b9:45:c3:e5:86:70:d2:2e:80:a6:79:
                    f8:f1:03:05:b5:81:98:50:3e:9e:6e:ae:53:76:2d:
                    c0:39:6c:58:d5:c0:69:21:95:f5:e0:f8:fd:92:e8:
                    a7:c0:3b:ec:7d:66:73:5d:e9:81:1c:e4:3a:8d:05:
                    9f:d1:8f:6d:d7:7c:a1:30:d7:4f:b8:c1:f8:08:2d:
                    69:df:e9:78:85:88:e7:2b:e5:38:7c:2e:1c:08:c4:
                    a4:29:28:cb:25:7b:08:4e:dc:01:10:d6:00:d7:79:
                    95:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:90:74:74:F0:16:5A:FC:3E:BD:2E:24:D6:A5:6D:AB:26:00:4C
            X509v3 Authority Key Identifier:
                keyid:15:33:CD:2D:1F:6D:CF:1E:EC:97:E8:69:43:C4:E5:3B:0C:88:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/565191-d981-41e5-961c-9fe55b171683/1/FTPNLR9tzx7sl-hpQ8TlOwyI6q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a0:45:f2:93:14:d5:79:55:78:93:a8:47:d9:b0:b9:2d:26:
         f6:b0:14:fb:65:17:c8:10:15:2c:2e:dd:44:63:93:76:0d:09:
         c3:83:f0:2b:87:97:3c:d0:ad:e1:3e:b7:36:a7:b4:5c:5e:32:
         42:b5:92:7b:c0:eb:9f:e5:24:d1:26:8c:8f:d4:79:26:a5:6a:
         ef:b0:09:cc:c3:45:1a:00:91:28:7e:f7:40:cd:87:20:a3:0c:
         0c:27:5b:3a:26:5e:b3:89:c2:7b:05:0c:f1:ef:3b:cb:9f:a9:
         ad:3c:2c:6a:74:b3:40:70:03:4d:15:4c:ad:8e:3b:52:f4:f2:
         e5:dc:2e:9b:8d:00:2c:4c:a7:97:ae:19:37:2d:2c:2f:2b:7f:
         94:2a:34:79:20:e7:cd:77:b8:9f:d5:33:14:06:fc:c5:3b:04:
         65:d5:2a:ab:c3:20:c3:25:06:db:0e:31:f5:27:84:a0:6d:76:
         2c:82:03:34:db:6a:4a:8b:05:31:32:50:65:45:9d:5a:9a:ea:
         f5:f1:e1:2b:6e:cb:c6:1d:40:11:9a:66:28:29:52:25:42:ae:
         d5:5f:13:44:a3:26:60:c0:47:58:64:0f:0d:2e:17:8b:c7:1a:
         e9:4c:93:9e:6e:65:d8:c2:55:2b:c0:d8:df:d2:d5:82:30:b0:
         23:b6:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:49:12 2026 by rpki-client