Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
File:                     90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json)
Hash identifier:          HIN0gW3dYbpqeH7fxEWLKl5OPpFuAYh7ii6bbzgAq1I=
Subject key identifier:   45:34:16:8E:05:C6:C2:F8:45:F9:E9:3F:87:79:89:2A:FD:3B:5E:B4
Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
Certificate issuer:       /CN=f747ead1fa9a135c65057ca412d893bb82e91429
Certificate serial:       019E8D5BA511AC7E60C9586D4DE567341E6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
Manifest number:          01FD
Signing time:             Wed 03 Jun 2026 12:00:53 +0000
Manifest this update:     Wed 03 Jun 2026 12:00:53 +0000
Manifest next update:     Thu 04 Jun 2026 12:00:53 +0000
Files and hashes:         1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: cAMUviVvDJAiF6hESbOfYNqZ0EDfTg79k3Jn+LjoCM8=)
                          2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8d:5b:a5:11:ac:7e:60:c9:58:6d:4d:e5:67:34:1e:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429
        Validity
            Not Before: Jun  3 12:00:53 2026 GMT
            Not After : Jun  4 12:00:53 2026 GMT
        Subject: CN=4534168e05c6c2f845f9e93f8779892afd3b5eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:37:70:1f:a2:8e:b5:a1:68:58:89:7e:38:
                    b6:8a:41:1d:9a:3b:eb:1b:38:75:a9:32:26:50:8e:
                    7e:58:9a:1f:f8:c6:9e:29:db:29:b3:19:ce:e3:96:
                    a8:12:64:70:e9:dc:e0:cb:2f:3d:64:d7:a1:4f:cd:
                    c6:7f:6f:44:aa:14:97:29:1e:db:65:c4:eb:db:e6:
                    5e:68:a3:e8:39:6e:85:3b:3c:bd:8d:21:f7:ac:a7:
                    a6:71:2f:33:a2:34:d0:6e:e5:f2:25:d3:a6:5c:4c:
                    10:40:09:2c:7e:6e:cb:9a:40:4c:ee:07:51:1c:e8:
                    9b:87:57:8a:e3:80:00:ef:41:24:34:1c:89:5d:f1:
                    70:34:80:09:64:ba:2d:74:9a:c7:ce:32:63:8c:0d:
                    33:8f:28:25:ab:31:c4:dd:bd:ca:6b:3e:e3:c7:8b:
                    3e:7f:ea:cb:44:af:f2:1f:7c:a9:c2:da:6f:e3:cb:
                    73:96:f1:e3:93:5c:c6:2b:ae:56:26:d2:6c:d4:55:
                    01:c4:e8:29:25:ce:d3:3a:de:f5:95:4e:6c:13:18:
                    a4:7e:1a:74:97:a0:c6:d0:d7:6f:16:ae:ed:f2:58:
                    d4:e5:94:0f:ce:0b:f5:09:d3:97:b7:8b:32:51:32:
                    5c:aa:f1:70:76:22:27:7b:16:88:26:7a:3b:3c:88:
                    6c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:34:16:8E:05:C6:C2:F8:45:F9:E9:3F:87:79:89:2A:FD:3B:5E:B4
            X509v3 Authority Key Identifier:
                keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:d8:93:51:a4:07:8a:9b:6b:c6:d3:dd:33:6a:ce:64:06:c8:
         1b:5a:3b:fe:43:0e:07:26:16:1e:06:21:99:1d:31:c1:bb:b4:
         61:59:5f:a9:f3:68:c8:53:b6:68:f7:66:35:29:ca:a6:ae:8a:
         6a:54:e6:a6:da:89:14:2b:bd:0b:f7:0c:c9:2e:e2:5a:ff:23:
         3a:86:c7:b8:e8:79:08:40:26:e6:49:df:53:9a:de:b4:81:e6:
         65:e4:02:e2:3c:6e:05:16:a0:7a:ab:09:ef:bb:31:57:ec:c8:
         d1:82:5d:8a:95:a2:c9:ef:01:e8:4f:6f:a4:d4:21:df:6b:db:
         fe:c0:e1:16:d7:ff:2b:74:72:bc:f2:46:7a:59:ee:06:0e:18:
         0e:d5:a7:62:ed:20:5e:ae:1a:a9:52:2f:a8:38:bc:f8:18:4f:
         e2:48:68:ea:0f:7d:66:9a:fc:0e:61:75:08:e6:06:e7:bf:23:
         57:8c:2b:ff:14:42:b5:d1:93:10:78:e9:e3:dc:c8:a8:31:a1:
         8a:4b:03:1a:91:e0:ce:7f:8c:59:d7:5c:2d:04:f5:00:bf:2a:
         bd:7b:3a:5a:6d:22:45:78:ed:4b:29:4a:67:96:a9:03:12:78:
         23:3c:e9:26:e9:b1:62:7b:60:6c:1c:58:2a:76:72:72:63:97:
         3f:c7:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:01:27 2026 by rpki-client