Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File:                     FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier:          ut80JIVkgrt9i8oEfpPRTH/Z7vcvmtYUrk90NYsWMcg=
Subject key identifier:   4C:FC:DF:99:9A:EC:43:07:1C:73:AC:93:2E:0D:A9:18:4E:74:F7:8E
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer:       /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial:       019E205AA8F2D5C79CF31A08C101E97BFA2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number:          11F4
Signing time:             Wed 13 May 2026 08:01:12 +0000
Manifest this update:     Wed 13 May 2026 08:01:12 +0000
Manifest next update:     Thu 14 May 2026 08:01:12 +0000
Files and hashes:         1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: d0WCTt6axx1vSY8K1fB4aC3dxQo/5ZIsAns1779loyU=)
                          2: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (hash: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg=)
                          3: vhNThqSAy5954A66ZAELAQvQDDs.roa (hash: gLwZkYW6p55DWlKg23Na3S6CUGHIHQi2tyQWg7l4acM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 08:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:a8:f2:d5:c7:9c:f3:1a:08:c1:01:e9:7b:fa:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
        Validity
            Not Before: May 13 08:01:12 2026 GMT
            Not After : May 14 08:01:12 2026 GMT
        Subject: CN=4cfcdf999aec43071c73ac932e0da9184e74f78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:64:fd:d7:6a:e4:92:53:b7:3f:d7:91:dd:
                    58:7b:82:1a:38:66:48:28:77:06:37:70:7a:e0:ea:
                    b2:cf:c2:c4:44:e3:0b:21:aa:9f:af:06:e6:0a:d6:
                    92:b6:17:8d:7d:e2:2d:38:fd:b2:66:64:0e:bc:86:
                    78:13:20:ba:1d:3a:14:7c:67:60:8f:ac:25:47:a8:
                    8b:88:5f:92:7b:78:9d:d4:d4:ac:ff:90:23:1c:3e:
                    f0:f9:a7:71:2f:fb:65:fe:af:3e:9b:ae:6a:f5:e2:
                    29:27:bf:c8:34:69:b0:62:2a:0e:d8:f2:7b:6c:73:
                    e8:e3:20:a3:a8:65:90:db:fe:89:0e:c0:46:33:2e:
                    96:c0:92:ef:76:f8:4a:14:56:8c:1b:5e:e1:fc:ac:
                    31:9d:55:7e:8e:a7:b9:00:f5:25:3c:c7:5b:59:e2:
                    50:47:cd:78:56:71:77:32:a7:4d:1f:6c:47:8a:e9:
                    a2:9d:dd:ec:2e:be:c2:b6:c8:ac:2d:a6:12:a2:45:
                    91:89:23:1d:f9:2b:f1:0e:b9:8b:a9:4e:d7:20:97:
                    9b:83:96:34:82:e4:e4:0c:ec:67:e1:d9:e7:37:cf:
                    13:63:28:2e:8a:5d:3b:76:80:19:4b:28:8e:64:33:
                    33:4f:f3:08:e4:53:a4:4d:30:c4:19:73:b6:f3:fc:
                    0f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:FC:DF:99:9A:EC:43:07:1C:73:AC:93:2E:0D:A9:18:4E:74:F7:8E
            X509v3 Authority Key Identifier:
                keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:c8:c4:1e:0d:60:97:64:86:51:bb:eb:a9:3f:30:f7:f8:fe:
         a0:a9:43:44:43:58:ec:b1:8e:5b:fa:e9:2d:10:54:cb:b4:f4:
         6e:61:32:c0:09:ea:5d:88:fd:b2:56:37:4e:b4:e7:e4:8c:8a:
         85:1a:02:f5:ea:5f:8a:c7:77:45:be:e7:ee:a1:f0:5b:24:d9:
         2b:cf:31:69:5c:d7:fe:51:f4:82:19:c2:c2:79:03:23:b2:3f:
         f3:c6:5a:27:9f:53:86:ba:a0:df:75:8d:20:49:24:85:e3:ec:
         46:9f:42:79:8d:f6:0a:4a:72:8e:1f:44:df:8e:1e:1e:e4:b9:
         e9:60:26:f9:9f:5a:f8:2a:94:6f:03:03:31:6f:2b:71:02:bc:
         cb:9f:e8:87:02:ac:32:0b:73:c1:2b:4f:be:ea:e9:34:1b:8b:
         ea:b4:84:a1:c6:ea:67:2b:e9:a5:78:11:4a:4b:2f:a1:e1:fc:
         0b:c6:9c:af:1e:69:22:57:78:a9:08:a8:02:ba:c7:1c:d9:75:
         4d:e6:fe:02:82:e5:16:00:b5:8a:91:72:e6:a4:a4:fa:96:f8:
         f0:7a:2e:c1:67:69:17:3f:b9:f2:ad:99:2e:6d:eb:b9:7b:a4:
         07:13:3e:dc:0e:81:30:be:27:78:64:d5:f2:d6:ff:28:07:e4:
         9a:94:e3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:22:14 2026 by rpki-client