Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          pVhQOkJX8xUlt8oUAFjqXXwS+SPiyXR5s6ccZnEDB+c=
Subject key identifier:   A0:6C:82:5C:4E:16:6C:3B:63:0F:D9:25:22:90:26:9E:02:56:E7:7A
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       019F91DA1E46A3CB1BBCA3498FF9B2D152D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          0A23
Signing time:             Fri 24 Jul 2026 02:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:18 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: YysXvm7e1JStCtF8GfeE4S6VX1ZDKHzYfw6ZxQOo2BE=)
                          2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
                          3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
                          4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
                          5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
                          6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
                          7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:1e:46:a3:cb:1b:bc:a3:49:8f:f9:b2:d1:52:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Jul 24 02:00:18 2026 GMT
            Not After : Jul 25 02:00:18 2026 GMT
        Subject: CN=a06c825c4e166c3b630fd9252290269e0256e77a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:34:5d:fd:08:9e:d4:92:a5:84:cd:1c:b9:
                    e4:9f:c1:d0:ce:10:58:f0:e4:9d:1f:56:39:96:aa:
                    14:a2:05:46:3a:48:48:4d:e2:be:fd:06:12:7b:7f:
                    d0:34:de:08:aa:e2:98:86:aa:63:fe:b6:6d:2f:8d:
                    12:ec:3d:d6:8d:47:a9:ba:12:25:41:e5:3f:bf:45:
                    03:72:a6:85:45:2e:72:00:99:c0:20:40:f2:75:c9:
                    cc:b2:37:22:eb:16:16:3a:03:3e:a5:9e:54:34:15:
                    48:9e:13:22:99:aa:b8:52:14:f3:80:4c:47:89:e1:
                    fd:55:ab:51:ec:4f:e8:eb:5b:2f:3a:cc:1b:3f:42:
                    43:c2:58:97:a7:20:04:e4:e6:ff:cc:fd:90:60:c1:
                    e0:9b:d2:ee:a6:49:eb:9b:d6:3e:37:9e:d1:19:f7:
                    be:fa:a7:9d:cc:ed:7f:43:4c:2a:b2:b4:7c:bc:0d:
                    58:f9:a2:ac:b4:cc:48:f1:0a:93:a2:99:63:b0:f0:
                    68:5f:5f:5c:43:ec:58:e6:a4:eb:df:a5:af:9b:9e:
                    2e:62:ef:80:ef:da:9d:50:8d:d9:49:a1:42:04:38:
                    81:28:2c:6a:a5:a6:36:96:fe:0a:dc:dd:26:e5:72:
                    9d:d8:19:3c:2d:3a:93:f6:e5:65:41:80:54:78:84:
                    ee:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6C:82:5C:4E:16:6C:3B:63:0F:D9:25:22:90:26:9E:02:56:E7:7A
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:24:db:16:62:88:d3:49:62:86:fe:56:4c:4f:02:9a:b7:
         75:fb:1a:98:82:0f:8b:76:66:47:fb:aa:11:5c:c8:9b:67:57:
         d3:d9:a8:73:2e:ac:c0:af:e0:e5:59:24:53:23:ba:6e:f5:d6:
         23:77:98:e2:40:56:68:ad:0a:bf:74:70:0d:84:e0:ef:84:b8:
         c1:42:00:60:3d:12:8f:49:ae:58:75:4d:3f:ec:bc:5b:45:9b:
         f4:c9:ed:35:82:60:5f:c3:5e:09:5f:41:07:f0:6a:12:49:d3:
         39:ba:ec:3c:b9:67:6d:19:39:61:94:ab:56:be:52:ff:10:24:
         c8:73:2e:ea:1b:45:4a:74:90:8c:ee:aa:77:97:32:6a:93:e8:
         0d:36:38:94:66:fa:6d:8c:5b:0a:e3:af:34:ae:e7:68:f2:9d:
         41:31:33:5b:7e:dc:df:c4:fe:d8:b3:f8:d0:58:c3:1b:43:de:
         45:19:c1:4f:c2:24:54:a5:ae:17:ac:25:4e:83:96:5b:17:d7:
         f7:43:5e:ad:b7:36:97:49:7a:cf:19:0c:c5:75:0d:92:2e:21:
         e6:56:51:2b:6f:ca:75:da:fa:83:10:ac:7b:d8:c6:d8:a8:8e:
         0b:26:02:7b:3e:b7:63:71:4a:cd:9e:b6:ac:df:80:52:39:4b:
         56:f9:16:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:09 2026 by rpki-client