Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File:                     FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier:          uwrAJSdhAbeOTjep6FipWIuqMHEkHte1CiKWC8jym1c=
Subject key identifier:   76:A6:DE:7B:A6:7E:71:11:9C:60:75:56:88:52:8B:14:9C:CA:7C:80
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       019E21A3EEF3C3BE641B42002A4B63D0DA16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number:          190B
Signing time:             Wed 13 May 2026 14:00:52 +0000
Manifest this update:     Wed 13 May 2026 14:00:52 +0000
Manifest next update:     Thu 14 May 2026 14:00:52 +0000
Files and hashes:         1: 1RanCO1mu-OiQ0iZEtdw-yAjkTI.roa (hash: yloj+KSnzpOLHXmmnW6y/9LvQrZ1HgM73eQl1+fYOuI=)
                          2: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: HNp8cAKYLXViC2q9V88E3dg0ffDBEIpNlcErHVLOgbo=)
                          3: G83x6tFUMdJXFpkh7ob8iQJOyWk.roa (hash: fqKR1JBeUu0DbH/b90tqdDXbcTIQ5RZlC7Ezhyu15AQ=)
                          4: IwnuHUcrSyqTDj2R1SrfqJthDz0.roa (hash: SAYzINhAcM78pjeHDBOp09qDlTIFRrqRQDRqGfJbZ6g=)
                          5: QguY6sNw_4yrqydTBsOIYz60GsQ.roa (hash: MwsRxWqp1y4l7li+nXNmzcRZf3idKS20ILN1jbY4EjI=)
                          6: YGxOWC67xnFdZpqiT6jQNZ3x7F8.roa (hash: IBA2eWmYoe53rLsRx6eyDDNbF8a4NYDcbQ80+DftLrA=)
                          7: bqonASN6m8_X-0PLTWyL1k78XVc.roa (hash: BHHdw7qa2kmdkeh9BUPFPvgX9iTcx117t99txuo1M88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 14:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:21:a3:ee:f3:c3:be:64:1b:42:00:2a:4b:63:d0:da:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: May 13 14:00:52 2026 GMT
            Not After : May 14 14:00:52 2026 GMT
        Subject: CN=76a6de7ba67e71119c60755688528b149cca7c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:7c:98:cf:83:cf:cf:a1:13:b6:dc:b1:ae:
                    b6:90:a9:e5:9e:3a:e7:25:76:e4:5b:47:c6:bb:b5:
                    54:eb:1d:bc:bf:88:66:37:bb:87:bb:ef:7f:b9:9d:
                    d3:d4:c8:2a:cf:fb:d8:00:02:ab:a0:73:14:66:2d:
                    9d:98:d3:74:a0:e7:e1:2c:02:fe:96:e0:b1:e8:d2:
                    2e:40:35:84:b1:f3:e5:6a:49:20:4d:7c:ad:60:ff:
                    8d:52:ad:e9:a1:db:fa:7f:50:b4:ad:49:f1:fe:d0:
                    71:3d:62:62:c8:81:fa:fb:4e:1e:2c:fd:5b:ed:20:
                    55:89:1f:ff:63:2e:3a:3d:d4:c4:86:8a:9b:c5:55:
                    bf:74:41:61:dc:94:76:97:6f:42:db:41:9e:e1:1c:
                    ef:a7:41:f8:36:00:5f:96:8b:a4:64:f9:42:d4:b0:
                    36:39:7e:98:02:d3:94:ff:cf:26:5c:fe:29:c8:60:
                    94:85:5b:ba:fe:8a:1b:17:2f:ab:92:49:38:63:2f:
                    e7:3f:db:e6:4c:25:c7:37:c7:b4:3e:25:2e:4f:8c:
                    ee:e1:f3:6c:0d:bd:5d:00:13:2f:64:33:a9:b7:a3:
                    aa:78:0c:04:5a:ec:f1:21:17:3c:2f:ad:41:59:90:
                    39:d0:41:69:90:34:89:a9:23:44:00:48:57:fc:02:
                    39:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A6:DE:7B:A6:7E:71:11:9C:60:75:56:88:52:8B:14:9C:CA:7C:80
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:16:9a:e4:5f:a1:c3:b4:af:af:1a:89:bd:4e:7a:57:7b:a2:
         5a:54:b7:55:82:ea:0a:8c:a1:74:30:df:e0:4a:ca:d4:6f:eb:
         22:43:6a:a3:23:a1:dc:8e:8a:43:29:ec:47:d8:32:ae:12:fd:
         28:ad:4c:84:ec:37:31:00:21:d3:cf:b6:97:b0:cc:cb:89:1c:
         f7:f9:07:a6:6a:9b:7a:eb:a9:eb:79:50:96:7f:ad:b9:e0:77:
         4e:3a:b4:7f:88:e3:96:b7:86:6b:b4:17:4a:82:8e:12:0e:8d:
         63:ec:71:7a:ff:f3:72:25:cd:3b:bf:c1:5b:14:f5:1d:e4:06:
         e6:29:af:23:55:d0:74:3d:c7:54:cf:d8:63:89:f5:ef:84:a7:
         54:7d:62:cf:b5:23:a4:03:a0:72:1f:5a:5f:5d:1d:a2:5e:9b:
         9e:1e:c2:7f:3b:f8:50:f0:23:92:d6:9d:47:eb:e1:0c:dc:3b:
         a9:de:e6:20:85:a3:3e:7e:04:36:7e:27:2b:a6:f4:fa:a5:cc:
         6d:5d:f2:c2:13:21:71:6f:1d:b5:c8:76:57:02:de:d9:55:58:
         6b:62:32:1f:3e:cc:08:d3:32:88:d9:dd:97:26:04:c8:6b:a9:
         1b:c6:c2:13:80:7e:ae:53:9b:63:d8:54:04:83:aa:94:da:11:
         86:16:a5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:11 2026 by rpki-client