Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
File:                     FO-9HV4axzX28jUJzyoOtKH5tOk.mft (raw, json)
Hash identifier:          2xZAVhYuIvMzwMh1LpcOt9+sXb4R1m07g7Bi9HqTJ80=
Subject key identifier:   77:C3:28:83:8E:8A:55:35:E0:33:9B:4A:32:D0:BC:A1:10:B0:DD:2D
Authority key identifier: 14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9
Certificate issuer:       /CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
Certificate serial:       019E1F7EB984A7B014893D34AB2D1D7A69E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
Manifest number:          1896
Signing time:             Wed 13 May 2026 04:00:59 +0000
Manifest this update:     Wed 13 May 2026 04:00:59 +0000
Manifest next update:     Thu 14 May 2026 04:00:59 +0000
Files and hashes:         1: FO-9HV4axzX28jUJzyoOtKH5tOk.crl (hash: ZklAFdfO9vEbX/tVLjXpC0LZDkBozRCbllN9T4nbv1I=)
                          2: i34QcCXHBTz4i7dARxhxMvU6cMI.roa (hash: cLmYe2PhCggVytEcDwfmBz/hTRq+Jq4kQ9LDTbCEPVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:b9:84:a7:b0:14:89:3d:34:ab:2d:1d:7a:69:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14efbd1d5e1ac735f6f23509cf2a0eb4a1f9b4e9
        Validity
            Not Before: May 13 04:00:59 2026 GMT
            Not After : May 14 04:00:59 2026 GMT
        Subject: CN=77c328838e8a5535e0339b4a32d0bca110b0dd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:54:ad:d0:31:e4:08:23:39:d2:69:f1:0e:
                    24:cc:04:f6:13:d8:7d:ee:ff:b1:2a:44:d0:fb:52:
                    86:5e:91:19:3a:49:79:c6:c2:9a:b9:65:43:45:d2:
                    af:8e:32:e6:11:87:9b:fb:98:42:48:bb:a9:23:e0:
                    53:e9:82:36:93:c3:30:6e:eb:ca:40:fc:94:0f:b1:
                    8f:53:90:e4:5c:52:06:05:ae:be:48:52:4d:ec:b3:
                    c5:f1:ab:64:a2:82:1b:83:ce:ff:94:1f:7c:f3:d8:
                    ec:ed:0b:ac:0a:29:b2:25:59:85:3a:27:15:e3:fe:
                    4f:ff:a5:e6:27:3f:61:b0:74:1e:fe:bc:f1:2b:c8:
                    8b:bf:32:e5:0d:ca:9a:bd:5c:a7:59:02:71:b3:6e:
                    5b:8e:fb:a2:12:fe:10:d1:4f:07:7a:bc:84:e4:e8:
                    6e:f2:ea:e7:99:1c:7e:55:fe:5c:d4:1b:a5:76:65:
                    e5:8c:cd:bc:b9:41:bc:8a:e9:68:e3:5b:eb:6d:0b:
                    84:9d:fb:b0:a7:48:a2:10:3f:9d:9c:15:fb:88:29:
                    89:44:9a:92:98:b9:d9:74:22:cb:c5:0a:d7:b4:7b:
                    09:1b:80:4b:32:86:0c:7f:8d:0e:da:22:3c:bb:85:
                    f4:ef:94:63:c9:dd:cc:49:12:27:72:af:0f:31:07:
                    10:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C3:28:83:8E:8A:55:35:E0:33:9B:4A:32:D0:BC:A1:10:B0:DD:2D
            X509v3 Authority Key Identifier:
                keyid:14:EF:BD:1D:5E:1A:C7:35:F6:F2:35:09:CF:2A:0E:B4:A1:F9:B4:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FO-9HV4axzX28jUJzyoOtKH5tOk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/38ec76-e6a9-4327-b322-50f1a8585f09/1/FO-9HV4axzX28jUJzyoOtKH5tOk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:46:03:7f:cb:57:64:50:6e:8c:e2:09:c2:73:06:17:75:1c:
         16:df:77:69:da:07:cc:cd:70:c4:e9:e2:d9:fd:69:d6:5f:47:
         1b:e6:89:13:41:78:b4:1b:b3:ba:6d:26:a3:c2:8e:d7:de:02:
         f8:ac:d3:4b:ff:32:15:c4:3d:b3:12:cf:3c:1d:99:85:52:6b:
         1d:95:76:54:a2:56:aa:0e:bd:e0:d9:5e:5f:39:c9:a9:aa:19:
         72:04:e9:ce:09:f2:77:39:e5:fe:fc:5d:24:69:d6:e2:dc:98:
         96:02:cd:81:2a:6b:55:f0:01:d7:2d:79:94:84:52:5b:24:1b:
         7b:dd:9e:cf:14:c1:1e:bc:02:b0:50:31:af:75:81:cb:8e:e1:
         4f:83:7c:84:7d:68:28:95:6b:bc:3d:a1:71:7e:70:10:d5:d8:
         e5:0d:e4:2b:ca:9a:3d:00:f5:fe:fe:15:fb:27:13:a1:b5:bd:
         7f:c5:d2:93:0e:02:9e:46:cb:f9:67:2d:b2:21:25:8b:b7:32:
         ad:4c:c5:2c:6d:8e:df:5a:e9:fe:f4:81:7a:7e:79:6e:1d:6e:
         80:43:07:00:35:4a:10:e0:72:32:a0:d3:05:c4:eb:05:ae:2c:
         ec:64:08:a4:87:bd:52:21:bf:c0:96:a2:16:a4:ce:51:4c:dd:
         20:35:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:29:09 2026 by rpki-client