Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
File:                     fUFb7iIlhfLRqvv_unlQMaRRKcc.mft (raw, json)
Hash identifier:          tP/XvzmrdNd+Cj9CVbY+u8utVlgr73TzdrPzEF++1EQ=
Subject key identifier:   09:8F:4A:3D:43:63:4A:44:AE:9E:16:04:2E:01:78:66:10:F9:CB:C8
Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
Certificate issuer:       /CN=7d415bee222585f2d1aafbffba795031a45129c7
Certificate serial:       019E1C0FFC611E9067E808A93E3843D6DCF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
Manifest number:          020C
Signing time:             Tue 12 May 2026 12:01:10 +0000
Manifest this update:     Tue 12 May 2026 12:01:10 +0000
Manifest next update:     Wed 13 May 2026 12:01:10 +0000
Files and hashes:         1: EpAV40Ub4Qhm2LrtJvF107eivE0.roa (hash: yMZ2WZA3sacKoy7tu2K5tKAGLGICOq7tZTEgNmenhaU=)
                          2: az7D72m3aRzcMGuqVgsus2HYPJI.asa (hash: UYH2LQP6yhA1ucYPAXvinazn/8R7Ym8Hnb5ZSwGQQiU=)
                          3: fUFb7iIlhfLRqvv_unlQMaRRKcc.crl (hash: 6RIJmJ292Z+obgSCxU4psbDkwEPr+CWtOGdz40jJp7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:fc:61:1e:90:67:e8:08:a9:3e:38:43:d6:dc:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7
        Validity
            Not Before: May 12 12:01:10 2026 GMT
            Not After : May 13 12:01:10 2026 GMT
        Subject: CN=098f4a3d43634a44ae9e16042e01786610f9cbc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:48:a5:5b:29:9d:fd:7d:52:f8:c3:5a:3a:
                    26:ed:46:e8:d7:99:3d:39:ae:cb:ff:25:47:57:a7:
                    47:b6:16:e5:69:bd:7f:e6:98:b3:35:f0:51:d4:28:
                    77:58:04:26:29:55:a0:73:4b:86:5d:32:8d:81:b8:
                    64:3d:f2:d6:47:7d:7e:3e:d8:35:e4:f8:c7:29:16:
                    77:1e:5c:dc:6b:40:9d:15:81:7e:5e:6d:a0:12:39:
                    ab:64:ec:ea:2e:a2:cf:97:61:12:27:26:94:c4:fc:
                    16:b8:9f:fd:85:0d:ac:4b:0c:b2:bb:7b:32:94:b7:
                    9b:5e:ab:74:ee:2f:36:a1:8d:4e:63:c9:a9:90:13:
                    08:c8:97:3a:ce:66:32:70:9d:34:7d:62:b3:f7:e8:
                    43:26:58:7e:a5:bc:b0:71:2c:06:5e:e5:3b:c6:58:
                    37:09:21:26:a2:bf:77:b9:a8:09:ec:b8:19:e9:b9:
                    4a:3e:c7:eb:b4:ba:6a:24:ae:15:a8:28:43:a9:4c:
                    96:46:05:34:7a:3c:88:d1:e4:b3:5b:2f:c0:06:bc:
                    d9:5f:85:d9:b7:9e:09:37:47:c3:ec:f5:cb:d7:a9:
                    8f:55:c8:60:74:d7:fe:bb:21:96:ac:2a:fc:5b:02:
                    a0:10:de:2e:ea:b7:bc:6b:93:2e:e5:c1:1c:6f:e9:
                    21:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8F:4A:3D:43:63:4A:44:AE:9E:16:04:2E:01:78:66:10:F9:CB:C8
            X509v3 Authority Key Identifier:
                keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:55:bc:54:12:1e:dc:63:f8:6c:7a:0a:01:9f:65:10:ef:b6:
         05:40:b8:bd:d4:e1:c8:48:6a:82:7a:91:9e:e0:22:dc:46:c4:
         f0:e2:35:3a:12:34:83:13:5c:1d:10:0d:0b:cd:4a:6f:f5:c5:
         b2:bd:4d:4f:b3:92:fa:b9:2c:4a:4c:3a:0d:df:bf:4d:58:a8:
         73:01:69:85:43:ce:2d:ec:7c:21:c7:f9:77:73:e4:ae:66:55:
         a4:13:ac:e3:57:13:42:f9:51:a3:16:d3:33:9c:21:3c:5f:7b:
         ad:0d:4e:73:72:2d:5e:54:fe:47:94:f9:57:9a:43:c3:51:56:
         0c:1e:ea:a4:6b:be:86:55:06:88:b8:b3:73:8b:f2:a9:4e:aa:
         b1:26:37:9f:18:e9:2c:c5:e8:d5:59:7a:d7:45:1b:f6:92:dc:
         8a:b5:2e:38:b8:5e:9c:75:e1:56:a1:6d:63:4f:81:8f:11:3e:
         36:64:f0:ab:79:95:47:2d:0b:0b:4c:72:55:e0:73:02:56:9d:
         3a:45:c8:b8:48:ca:de:9b:19:1e:b8:a5:61:55:49:c1:7e:35:
         40:d2:46:f2:fb:bc:17:dc:f2:0e:5b:06:4c:7c:08:f2:e3:b2:
         0a:7b:45:00:40:73:14:f8:3c:23:64:48:4c:39:22:d4:6a:97:
         fb:77:e4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:38 2026 by rpki-client