Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File:                     FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier:          iZRoH8rrQpSBltrSn7cZiBPqzKXIepb+eiCwR8+JH5Q=
Subject key identifier:   83:0C:AA:3D:62:83:A3:DE:A4:8B:22:3D:61:A0:C3:58:A4:C5:51:1D
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer:       /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial:       019F90C7BCF4FA455F523A832B947ED9C5B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number:          0B4A
Signing time:             Thu 23 Jul 2026 21:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:36 +0000
Files and hashes:         1: 3Ar2XyUYMweTk8EKwl8UseYrYE0.roa (hash: e5PBA+QHrdK8UegyVXOovBxHSL9kzq5+vsNWxUzz/VA=)
                          2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: O+7tPWAhyFbPYm3p9W9ATSrJdRE9raIf9ufWKcHvHrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:bc:f4:fa:45:5f:52:3a:83:2b:94:7e:d9:c5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
        Validity
            Not Before: Jul 23 21:00:36 2026 GMT
            Not After : Jul 24 21:00:36 2026 GMT
        Subject: CN=830caa3d6283a3dea48b223d61a0c358a4c5511d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:e4:61:b7:14:69:0b:ff:6f:6f:4c:44:34:
                    42:4c:c0:76:54:04:ca:d3:0a:f1:f5:0f:f3:58:a2:
                    d7:e1:00:0d:ee:6d:9b:6d:67:8d:f8:9f:fe:75:74:
                    cb:d6:9a:8e:99:42:b2:37:0f:22:fa:f1:3d:b2:ab:
                    3c:07:56:81:cc:30:af:ba:a8:1b:b2:80:e7:9f:47:
                    2e:c9:f1:f7:e2:f8:92:9d:4f:a0:a4:ba:ee:d0:a5:
                    44:1a:7d:a5:b1:e7:de:bc:3d:b0:ba:b1:97:34:d2:
                    eb:2d:d3:23:1a:32:cb:cf:d7:af:7f:75:1d:df:1e:
                    07:ea:8f:f7:dd:c0:0a:e2:03:79:75:a7:25:78:88:
                    78:17:74:19:03:7d:b2:9a:04:82:7c:31:82:ee:f8:
                    ce:30:a1:bf:73:b8:2f:17:5d:e3:da:d5:bd:a4:28:
                    ef:aa:0c:bc:6b:1e:2f:6d:20:75:d6:ae:34:1a:06:
                    0a:f4:8d:5c:39:af:2c:dd:4a:16:1f:8c:ea:ab:28:
                    4a:ab:6d:78:24:9c:55:1a:0e:95:c6:30:9a:8b:9e:
                    cc:b1:f9:c8:86:f4:a1:58:9c:a1:68:04:a8:00:2a:
                    3c:36:35:de:2a:c8:e6:09:13:2e:51:03:91:73:82:
                    fb:5d:f3:49:0b:b0:8c:12:56:6f:8e:87:c2:c9:14:
                    08:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0C:AA:3D:62:83:A3:DE:A4:8B:22:3D:61:A0:C3:58:A4:C5:51:1D
            X509v3 Authority Key Identifier:
                keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:1a:91:e4:1b:5f:1c:81:10:5b:dd:f3:cc:9a:67:67:76:
         bb:2d:14:db:f2:d4:a4:a0:59:02:35:55:a7:12:e5:b7:4c:1f:
         b0:b0:98:6a:1c:e7:81:8d:fd:24:8f:ce:b1:fc:5f:6c:c1:b9:
         f4:65:42:bd:d3:52:b4:d6:7b:f6:cc:cf:0c:65:03:12:81:f0:
         d0:95:10:33:d5:05:43:f4:fa:eb:ac:2e:55:0d:96:7e:4f:27:
         5a:bc:7e:ef:5e:16:5e:a3:c3:ec:77:b8:68:47:c6:04:68:74:
         0f:27:f0:55:e2:1f:32:e3:a0:7c:b5:d8:a2:a4:73:33:3e:14:
         88:ca:92:14:03:45:dd:eb:b1:63:ed:fe:2c:7e:f3:8e:13:53:
         88:4e:7b:0d:65:93:6b:78:46:77:22:65:4f:c5:27:a7:d3:87:
         05:ed:9d:0d:fc:23:f6:6d:a3:44:54:bb:4a:37:e9:0e:00:bb:
         56:47:6c:4a:4d:0e:13:a4:45:37:d0:fc:50:83:bf:d3:7c:ac:
         df:eb:c4:5b:cf:b7:54:ac:37:4a:44:e3:f9:00:db:fb:4d:23:
         10:54:78:4f:18:33:29:af:69:0e:19:c3:b3:11:03:ba:81:8c:
         0c:4a:9a:10:30:64:57:15:d7:95:c9:33:66:11:2f:96:df:0f:
         b1:aa:e1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:56:15 2026 by rpki-client