Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File:                     FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier:          ufwgZN7CsJdfBYnvp79sqLXYyOoi7lzkGgBpnxOBJEI=
Subject key identifier:   31:BF:A2:F2:24:F5:3F:46:A9:D0:82:D5:F5:EB:C1:59:D2:94:DD:70
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer:       /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial:       019F84C42772C44F2F77631D83E5F310FF2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number:          12D6
Signing time:             Tue 21 Jul 2026 13:01:15 +0000
Manifest this update:     Tue 21 Jul 2026 13:01:15 +0000
Manifest next update:     Wed 22 Jul 2026 13:01:15 +0000
Files and hashes:         1: 9EY388q_8N1ByylpLUNJcoEQmNc.roa (hash: swwp7NtGKddr8ryZRv2cyRO8Q2e4qDuv+717NcJsQ10=)
                          2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: gTklVjP55VAV9tQurTF3ThJAxoKnotYS7G7Z2buFDWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c4:27:72:c4:4f:2f:77:63:1d:83:e5:f3:10:ff:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
        Validity
            Not Before: Jul 21 13:01:15 2026 GMT
            Not After : Jul 22 13:01:15 2026 GMT
        Subject: CN=31bfa2f224f53f46a9d082d5f5ebc159d294dd70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:c9:ac:4a:7d:69:0d:8c:b7:2e:2e:01:40:
                    91:53:06:8d:b5:37:cc:53:a9:bb:fd:63:aa:07:85:
                    09:e5:89:17:02:2b:9b:bc:de:48:6d:e4:ae:c3:93:
                    5e:8e:90:15:2e:87:0d:d0:8a:cc:bc:90:20:45:cf:
                    82:e3:2e:ad:7a:fc:78:01:61:d6:aa:53:55:06:41:
                    b9:91:5a:1c:1d:f4:b2:e6:f0:5a:3e:55:e8:ce:a1:
                    5b:5c:30:87:b3:78:06:91:56:7a:d7:d6:f4:87:8d:
                    2a:a4:f9:9a:38:9d:80:67:c3:a9:af:3f:a7:57:e3:
                    dd:ef:04:ef:b1:4c:f8:9d:c1:9f:b4:6c:76:78:a1:
                    72:4b:ba:b9:21:59:4e:89:4f:2b:97:a2:0b:dc:c1:
                    b7:f3:48:52:74:93:70:b8:5b:80:3f:ae:91:74:6f:
                    e6:28:fe:ac:dd:b0:9b:d9:c5:e7:93:e4:37:6b:2b:
                    1a:10:f8:3a:cd:2d:7b:34:9a:f4:70:fa:e7:dc:27:
                    af:c4:9e:6f:cc:aa:0d:f7:1a:89:dd:5a:7f:ff:59:
                    79:a1:03:bb:8e:4a:eb:ba:d4:16:80:db:6d:cd:3f:
                    b3:e3:52:60:11:15:b8:e7:10:29:46:29:aa:9b:50:
                    7d:62:0b:6d:4f:1f:1a:4a:0c:8f:ee:34:6a:ce:12:
                    db:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:BF:A2:F2:24:F5:3F:46:A9:D0:82:D5:F5:EB:C1:59:D2:94:DD:70
            X509v3 Authority Key Identifier:
                keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:87:1f:36:18:7e:d0:6d:d3:3d:d4:08:60:4d:cb:a9:e4:b4:
         09:d8:2f:ab:55:0a:95:28:70:dc:4d:d5:a0:d6:62:f7:67:61:
         77:3f:5d:22:6d:e7:f7:ad:10:3e:74:14:4a:6f:a3:81:dd:5d:
         2e:7a:8c:64:f9:8f:b2:67:dc:71:a3:8c:3b:0a:3c:e8:01:bd:
         f8:c8:62:0a:79:47:29:57:e4:c9:6f:77:2c:e1:97:eb:a6:a3:
         58:69:05:f2:8c:3e:ab:47:bb:19:48:0d:d4:39:ea:e4:40:7d:
         c5:92:2c:25:7e:60:d0:02:7d:e3:d0:d4:a7:26:29:28:11:2e:
         44:05:d6:da:38:0c:f2:1b:70:ee:10:24:b4:92:fd:ea:1c:dd:
         41:b5:5d:9f:f6:3f:ec:99:d5:2f:33:45:2b:f4:19:3f:24:2e:
         86:5c:c6:69:2a:bd:1e:1e:77:7e:f5:96:0d:f0:8a:88:44:1b:
         b3:4e:af:57:a9:e0:8a:54:2f:a0:c8:c8:6e:aa:39:de:6d:f3:
         11:f8:5c:5d:42:94:5a:d2:b2:f2:f1:1a:a0:94:fa:26:7f:1b:
         64:73:9b:47:82:1d:a1:d2:aa:a9:09:40:1a:87:44:aa:fd:96:
         c4:16:6d:67:55:65:ae:d1:3c:89:9e:d4:a2:34:84:a4:01:a5:
         de:83:be:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:57:38 2026 by rpki-client