Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File:                     FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier:          Qw0BLHmH7t84ggrI+UlsBqIlg14/S2lcb05id/cC2mo=
Subject key identifier:   F3:2C:60:23:5D:62:EA:F3:87:EE:31:A5:07:AB:76:D1:FB:84:4F:B2
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer:       /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial:       019E1EA3425CEFA4E6E4880258BE387B36FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number:          1909
Signing time:             Wed 13 May 2026 00:01:16 +0000
Manifest this update:     Wed 13 May 2026 00:01:16 +0000
Manifest next update:     Thu 14 May 2026 00:01:16 +0000
Files and hashes:         1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: 129fGZuOX1imc169JHALJPJxejhtxi5c0UpHvRF8HO0=)
                          2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:42:5c:ef:a4:e6:e4:88:02:58:be:38:7b:36:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
        Validity
            Not Before: May 13 00:01:16 2026 GMT
            Not After : May 14 00:01:16 2026 GMT
        Subject: CN=f32c60235d62eaf387ee31a507ab76d1fb844fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b0:0a:62:a1:7b:d1:e6:ee:a0:28:7f:7c:d7:
                    33:a0:e6:d1:59:04:04:7e:91:8b:15:27:03:fd:1e:
                    06:3c:76:c8:f6:e3:a1:f0:33:90:9f:eb:19:6b:aa:
                    18:27:1e:8a:5b:44:67:14:05:12:3c:4c:2f:a6:45:
                    4a:7b:73:f0:af:0f:32:f9:90:fd:4c:75:dc:c8:f9:
                    d1:92:1f:79:57:c3:83:91:19:bc:e3:9f:f5:85:3d:
                    98:05:ad:b5:dc:b1:ac:a7:f0:c4:48:cd:29:b5:bf:
                    29:0d:9e:8d:a2:d9:3b:60:22:00:18:f2:8c:f3:5d:
                    63:ee:c8:87:46:31:f6:0b:f7:4f:70:03:af:36:59:
                    1c:58:da:a3:07:52:3b:ed:21:0f:21:76:27:9c:da:
                    ab:18:5e:1e:b5:8d:50:69:e1:ea:1a:f5:07:8a:64:
                    69:9d:4f:1a:0e:16:3f:73:a0:ee:d8:b5:b6:35:a4:
                    15:20:9e:9e:b4:04:51:3a:b6:f3:f0:41:62:2b:f3:
                    ae:c0:40:5b:d5:3b:5b:41:ec:03:a5:1e:dc:cd:41:
                    42:46:f9:66:71:5c:2c:db:a8:d5:d8:0d:fa:d5:c1:
                    ac:f9:b7:1e:83:40:39:88:82:3c:43:ae:bf:c7:a4:
                    b3:fb:ad:45:71:97:06:20:a8:43:d2:92:ba:45:93:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:2C:60:23:5D:62:EA:F3:87:EE:31:A5:07:AB:76:D1:FB:84:4F:B2
            X509v3 Authority Key Identifier:
                keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:17:37:c2:1c:20:01:df:ea:77:41:0b:66:6b:0c:be:82:53:
         94:39:88:a6:de:22:23:8d:cb:98:3a:dc:c1:ea:35:01:78:bf:
         f4:71:c0:cb:c4:81:aa:a1:ea:3d:42:d7:87:59:96:6f:5d:54:
         80:bb:a6:99:e2:63:87:b0:73:d0:37:8e:75:0c:c5:0f:1a:6f:
         c3:6a:14:3c:30:51:6d:0a:3d:f2:9b:ed:e7:56:79:43:23:9e:
         b4:83:5a:d8:b5:3a:3a:03:b7:7d:d5:2d:69:e6:9c:48:2c:81:
         57:68:4e:2b:86:3a:80:29:63:78:a1:1d:3b:87:7f:b7:9c:f2:
         28:69:8b:f2:19:85:14:6a:f3:17:46:2f:63:f0:f3:ad:bf:39:
         1e:53:7e:0f:ed:a7:75:09:79:d6:d8:c1:25:80:50:6d:f2:52:
         28:95:1d:fb:82:97:41:46:76:34:d2:d5:fc:c5:dd:d4:bc:62:
         37:73:8a:f7:b0:64:24:44:5a:be:e5:2e:69:d7:b6:d6:5f:1d:
         c2:0d:bb:af:88:7f:81:12:df:ad:58:c7:37:06:82:64:85:e8:
         5d:2f:70:23:08:f4:08:72:62:8b:3a:cf:c5:a3:ce:89:d7:fd:
         47:41:92:71:37:fc:22:f4:43:10:b8:bc:df:c5:d9:da:6c:30:
         fa:f1:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:31:15 2026 by rpki-client