Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File:                     FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier:          sOt4Lu2wgZC9hq1OqDQZswU6zH+B+l93aYuQNKjzX/Y=
Subject key identifier:   47:44:79:BD:2F:57:6A:D6:A1:7E:E0:69:9B:41:32:7C:DC:59:78:91
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer:       /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial:       019F905A36570D2EE6F26FB5D0B17A40484A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number:          1957
Signing time:             Thu 23 Jul 2026 19:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:59 +0000
Files and hashes:         1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: 3DvNSuY5QRSUn6ciVRjx9kSHxVmfsoPqnE8XG0+eoLc=)
                          2: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (hash: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:36:57:0d:2e:e6:f2:6f:b5:d0:b1:7a:40:48:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
        Validity
            Not Before: Jul 23 19:00:59 2026 GMT
            Not After : Jul 24 19:00:59 2026 GMT
        Subject: CN=474479bd2f576ad6a17ee0699b41327cdc597891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:1c:a0:3b:57:21:75:92:cb:b0:6c:7b:30:
                    7e:28:7a:7e:27:3c:32:31:a5:4f:0e:0f:c1:04:a4:
                    b4:21:4a:39:af:f8:82:fa:48:37:f4:13:75:08:c4:
                    49:02:f7:48:ca:0c:76:45:eb:d7:0e:83:91:e0:fc:
                    3b:b8:02:71:90:4d:65:9a:8e:b6:86:a1:6b:ec:88:
                    da:ff:8f:c4:c4:47:d8:fd:98:62:bf:f1:87:19:4a:
                    f4:60:ce:b8:85:71:60:a0:ee:69:41:8e:30:d8:6d:
                    c3:dc:d1:96:2d:90:7f:a6:dc:3f:7b:ce:a4:47:64:
                    d0:8d:4d:b4:37:e5:e7:a2:2b:c9:03:2d:e7:7e:4d:
                    a5:29:c7:82:99:5e:c0:bb:c5:6a:fc:12:6d:fe:64:
                    ff:25:a3:22:77:46:60:55:fe:a9:06:e1:6a:8c:99:
                    cf:a1:d6:88:f5:18:aa:f8:d8:31:e3:5e:7f:21:da:
                    ba:e8:64:58:c2:97:15:22:9f:2b:90:1a:74:ac:90:
                    85:3f:ea:28:61:0f:ed:6d:7a:e7:92:9e:8e:06:ab:
                    71:9e:a5:84:85:60:e2:e8:55:04:e3:d6:2d:42:03:
                    34:7c:68:1b:ec:31:5e:83:db:06:c7:c0:19:21:aa:
                    a2:6c:ae:5e:db:37:b5:cb:b5:a8:de:64:72:38:ef:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:44:79:BD:2F:57:6A:D6:A1:7E:E0:69:9B:41:32:7C:DC:59:78:91
            X509v3 Authority Key Identifier:
                keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:b6:de:8a:8f:a6:ac:ba:48:f8:5c:35:bb:d6:ce:d6:d7:e4:
         6d:9d:b0:51:de:a4:f1:cd:51:ad:09:ae:eb:f1:ba:ac:f2:fc:
         32:20:3b:a0:da:05:02:a7:23:4d:cc:1e:8b:58:47:fe:20:1e:
         49:79:cf:67:9e:22:38:f3:1b:ba:85:1c:f3:a2:eb:f4:f6:a7:
         3d:6a:b3:c4:40:4e:e7:23:61:b1:c6:12:39:ce:fc:f1:14:45:
         b8:4c:d9:19:4a:53:86:f8:8c:db:51:f9:76:4c:4e:37:5f:51:
         3c:38:d0:c4:36:f3:07:c2:09:ca:24:e9:5f:ad:5a:26:11:96:
         62:76:5c:46:c0:1b:87:6e:62:0e:82:d0:50:27:df:82:3c:a0:
         5f:8d:b3:f0:63:e1:65:ea:29:a0:ac:6e:c8:c2:8e:b2:49:98:
         3e:44:8d:a4:fa:8c:2e:a1:92:47:de:59:50:ac:24:ba:85:2d:
         aa:68:b4:4e:4f:6c:c3:95:aa:73:fe:a9:76:bf:1b:04:82:86:
         2b:77:fc:c3:9d:8c:ca:65:7e:6d:c6:b3:f7:a6:41:09:1f:7a:
         ec:0f:d5:86:a1:fd:64:5e:ce:19:83:e6:f6:17:1f:ab:2e:6a:
         dd:1f:72:d1:4c:1d:dc:71:52:ac:6f:12:24:ab:65:cd:fc:74:
         2e:b6:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:02 2026 by rpki-client