Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File:                     FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier:          KDr7TjiRRD6ELhfT8TKOgsGs21Jf2A6u9wXnEF79/TA=
Subject key identifier:   5E:77:44:08:4D:0D:B7:4F:F3:C6:AF:25:F6:2A:12:17:0C:5E:3E:23
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer:       /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial:       019E51EB51BCDCD609317A1C431C7CD0316B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number:          1923
Signing time:             Fri 22 May 2026 23:00:36 +0000
Manifest this update:     Fri 22 May 2026 23:00:36 +0000
Manifest next update:     Sat 23 May 2026 23:00:36 +0000
Files and hashes:         1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: nD9t+yosZIBAP629pEmoRJxptj/pNXI0tZ9CXMfWnRE=)
                          2: oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa (hash: ojbwZkbf6RTWhGjCLnOZeAUwCGajo9XVRazbI1Jt8aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:51:eb:51:bc:dc:d6:09:31:7a:1c:43:1c:7c:d0:31:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
        Validity
            Not Before: May 22 23:00:36 2026 GMT
            Not After : May 23 23:00:36 2026 GMT
        Subject: CN=5e7744084d0db74ff3c6af25f62a12170c5e3e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9c:cd:25:05:38:a5:63:f3:4a:ac:42:f2:7d:
                    3f:e9:c9:89:5c:40:4d:48:5b:c5:b1:98:f0:c9:08:
                    06:52:ea:fe:ed:a0:9a:d5:e7:93:0a:7e:17:b6:27:
                    e0:d4:89:46:f1:7e:fb:ef:1a:05:7a:02:4c:6f:c5:
                    07:7d:6c:5e:ee:d3:3b:0f:f0:1e:74:6a:c3:23:d0:
                    62:14:05:cf:79:ef:68:13:f3:ed:7c:65:1c:43:8e:
                    41:c5:fc:dd:b1:1f:41:6c:d3:55:77:5a:3c:e0:32:
                    99:5f:ba:fe:ec:47:3d:b1:65:ad:63:a0:5b:b8:5a:
                    36:74:5d:af:c9:3d:da:1c:e1:23:52:35:d3:dd:64:
                    28:50:0f:5c:b0:32:b0:80:9a:c4:73:c0:12:74:a3:
                    1c:fb:75:af:17:05:39:0e:11:36:9e:c6:74:7e:db:
                    05:3d:f8:f5:9e:08:a4:b3:25:83:ea:52:e8:4d:13:
                    51:06:95:b2:ca:80:80:20:da:dd:03:87:c2:5c:bf:
                    fc:49:cc:d4:70:fd:3d:54:4a:ec:1e:77:db:c3:16:
                    83:e9:95:fc:67:6f:73:07:06:21:bb:40:f0:72:e7:
                    a5:75:90:0b:86:a0:f0:94:46:87:48:54:d7:73:e5:
                    e6:8f:34:77:57:22:d3:68:11:f3:43:74:f4:f7:eb:
                    dc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:77:44:08:4D:0D:B7:4F:F3:C6:AF:25:F6:2A:12:17:0C:5E:3E:23
            X509v3 Authority Key Identifier:
                keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:55:3b:67:b3:80:13:53:a7:22:a4:40:be:2e:b8:f3:76:dc:
         06:b1:73:86:ec:6b:2a:d6:d4:98:a5:b1:58:55:4f:08:8a:f3:
         65:91:7f:2a:75:b0:d2:bc:41:d9:a9:c8:5f:d8:fb:44:e7:a7:
         87:05:eb:90:e2:c8:ab:a7:c5:d9:ea:3f:be:88:b6:06:3a:f3:
         5c:2c:a2:a7:5b:37:e3:6d:4b:3b:90:a2:e7:e2:42:75:4b:d0:
         7b:ab:17:29:7d:7c:14:bf:76:63:86:ae:3b:e8:fd:25:b1:3e:
         57:d7:82:bd:63:16:70:c9:08:27:23:40:d2:80:8d:25:90:42:
         b5:ac:cd:30:02:34:c1:e8:1f:29:d5:99:93:60:6d:48:8c:4a:
         c7:45:05:09:7b:29:01:41:71:8f:f0:93:b5:68:4b:25:8a:65:
         cd:3c:61:cc:78:f0:db:00:f2:b0:9a:9c:02:97:4d:c7:4f:ac:
         8c:d7:01:71:50:f0:e0:b3:ed:61:fe:c9:70:f2:0a:96:0d:6c:
         61:f5:6a:17:16:0d:b7:49:91:c2:13:13:d6:99:f0:ed:da:3f:
         a8:ed:2f:fe:41:e7:cf:0a:6b:78:1f:70:46:5c:0c:c8:a3:25:
         83:a1:b7:ec:9a:0f:e4:03:f7:b3:72:65:8b:de:0d:d8:7a:64:
         7a:e1:bc:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5R61G83NYJMXocQxx80DFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZGIwNGY5YzkyMzE3ZWNjN2EyYWFmZjJjYTRkNzA5OGQx
YmQyNmEwHhcNMjYwNTIyMjMwMDM2WhcNMjYwNTIzMjMwMDM2WjAzMTEwLwYDVQQD
Eyg1ZTc3NDQwODRkMGRiNzRmZjNjNmFmMjVmNjJhMTIxNzBjNWUzZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJzNJQU4pWPzSqxC8n0/6cmJXEBN
SFvFsZjwyQgGUur+7aCa1eeTCn4Xtifg1IlG8X777xoFegJMb8UHfWxe7tM7D/Ae
dGrDI9BiFAXPee9oE/PtfGUcQ45BxfzdsR9BbNNVd1o84DKZX7r+7Ec9sWWtY6Bb
uFo2dF2vyT3aHOEjUjXT3WQoUA9csDKwgJrEc8ASdKMc+3WvFwU5DhE2nsZ0ftsF
Pfj1ngiksyWD6lLoTRNRBpWyyoCAINrdA4fCXL/8SczUcP09VErsHnfbwxaD6ZX8
Z29zBwYhu0DwcueldZALhqDwlEaHSFTXc+XmjzR3VyLTaBHzQ3T09+vclwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF53RAhNDbdP88avJfYqEhcMXj4jMB8GA1UdIwQY
MBaAFBTbBPnJIxfsx6Kq/yyk1wmNG9JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMt
NThjN2JmY2RjZmRmLzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMtNThjN2JmY2RjZmRm
LzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuVU7Z7OA
E1OnIqRAvi6483bcBrFzhuxrKtbUmKWxWFVPCIrzZZF/KnWw0rxB2anIX9j7ROen
hwXrkOLIq6fF2eo/voi2BjrzXCyip1s3421LO5Ci5+JCdUvQe6sXKX18FL92Y4au
O+j9JbE+V9eCvWMWcMkIJyNA0oCNJZBCtazNMAI0wegfKdWZk2BtSIxKx0UFCXsp
AUFxj/CTtWhLJYplzTxhzHjw2wDysJqcApdNx0+sjNcBcVDw4LPtYf7JcPIKlg1s
YfVqFxYNt0mRwhMT1pnw7do/qO0v/kHnzwpreB9wRlwMyKMlg6G37JoP5AP3s3Jl
i94N2HpkeuG8zA==
-----END CERTIFICATE-----
Generated at Sat May 23 03:47:42 2026 by rpki-client