Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
File:                     FEz3GmQFf4aSkG29men2hEB9boA.mft (raw, json)
Hash identifier:          C1/a9BV8PYNTsSFU0a92o6RYMfRg/LkotElB1SKBL5E=
Subject key identifier:   B8:F1:FF:44:FD:D7:3C:16:E3:99:65:A5:4B:95:B7:6C:9F:30:46:58
Authority key identifier: 14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
Certificate issuer:       /CN=144cf71a64057f8692906dbd99e9f684407d6e80
Certificate serial:       019F9DA783F5F7F9BA503CACA9AD2276811A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
Manifest number:          016F
Signing time:             Sun 26 Jul 2026 09:00:28 +0000
Manifest this update:     Sun 26 Jul 2026 09:00:28 +0000
Manifest next update:     Mon 27 Jul 2026 09:00:28 +0000
Files and hashes:         1: FEz3GmQFf4aSkG29men2hEB9boA.crl (hash: uocvDuZ3w+IAAI3yIqMovU0HXyENFbFd1wXMwXCGG2Q=)
                          2: V7cyqG-pYyAMULVUem9DUD4mh5Y.roa (hash: NfpPyZF7G0X8PIMTTllt/U0ECaL4KgW7SFDL7u8msig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 09:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9d:a7:83:f5:f7:f9:ba:50:3c:ac:a9:ad:22:76:81:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144cf71a64057f8692906dbd99e9f684407d6e80
        Validity
            Not Before: Jul 26 09:00:28 2026 GMT
            Not After : Jul 27 09:00:28 2026 GMT
        Subject: CN=b8f1ff44fdd73c16e39965a54b95b76c9f304658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a1:8d:d8:31:85:23:e6:f9:d1:fb:ce:83:ab:
                    26:52:ac:a6:cb:38:4b:0a:13:ae:c1:a1:d5:b5:38:
                    bf:fc:68:b0:70:34:a0:d1:8a:1c:17:d8:58:83:15:
                    31:83:17:e8:43:4b:80:9e:f8:ea:e4:83:fe:18:f9:
                    4a:ff:34:21:60:6d:3c:ee:4c:ae:b9:8d:ea:e5:b8:
                    4a:72:bf:ce:f3:da:b2:b6:75:8b:47:87:98:0e:8b:
                    84:d8:f1:61:f1:6f:0c:b2:ac:cf:2a:75:11:2f:d2:
                    72:b2:e0:5a:dd:b3:c0:e5:de:9f:5c:f0:38:28:6f:
                    21:05:65:0d:cf:15:90:4f:ef:87:3d:f0:f0:f9:ec:
                    0e:9c:b9:1c:a3:f4:97:bc:99:2e:f4:f9:d5:e1:50:
                    36:66:4c:3e:67:c1:d6:bd:ed:20:73:0e:6d:33:89:
                    1c:d2:9c:41:7f:85:7c:4f:9b:1c:7c:79:5d:b8:5f:
                    a1:e9:b0:9d:76:f8:c0:af:42:42:29:22:fc:d6:8f:
                    c3:58:6a:bc:da:cc:b9:5d:aa:32:b1:70:99:b0:14:
                    91:d7:4e:3c:e2:6a:df:b4:6b:92:4e:59:c9:13:3a:
                    66:63:de:7c:b6:42:e8:ed:68:7e:7a:84:40:25:73:
                    4a:90:3f:c7:48:bf:e4:68:04:f2:b2:e6:55:2c:91:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F1:FF:44:FD:D7:3C:16:E3:99:65:A5:4B:95:B7:6C:9F:30:46:58
            X509v3 Authority Key Identifier:
                keyid:14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:95:7a:6a:5b:76:94:71:94:e3:1b:97:de:e8:3e:45:52:9f:
         c1:11:53:8f:d3:65:5c:c8:a9:01:2d:69:49:79:f2:6b:a2:80:
         ba:40:3d:e1:f4:09:27:eb:e0:88:81:0f:01:69:d2:f0:3b:c6:
         83:5f:7a:b1:78:f3:61:2f:8d:a7:37:8d:02:c0:d2:7a:b0:03:
         74:ae:f9:5d:18:fd:42:69:93:94:d1:20:ac:5e:6c:bd:d7:e3:
         47:ac:83:9e:cf:99:b3:92:b4:14:86:15:67:96:08:b6:fb:74:
         2c:b4:79:53:94:b3:81:8b:04:a4:f1:8c:6d:ea:38:06:29:75:
         da:a8:fb:b8:28:c2:5e:9b:50:63:36:a6:20:5b:88:a6:77:70:
         36:bd:4a:47:b7:b9:7d:71:8f:76:94:73:bb:3a:c3:97:f9:28:
         00:bd:8a:4b:be:c0:50:6a:7f:7e:26:e9:6b:58:cb:a9:ed:68:
         d6:d3:5a:6b:88:86:34:ec:bf:8e:aa:be:4a:fb:7d:55:29:3e:
         94:e7:98:0c:e7:0a:fa:b5:7d:f4:1a:95:84:d7:39:2a:46:cb:
         80:e9:05:6f:e3:27:e2:00:4b:d3:b4:db:6c:28:fb:0a:0b:48:
         60:8e:51:1d:56:07:3a:36:8a:69:8c:65:62:f2:dc:81:35:2d:
         bf:c8:a0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:50:18 2026 by rpki-client