Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
File:                     FK__4H7yluyM0lK8sgiLG6qPur0.mft (raw, json)
Hash identifier:          ZeujzajN0hcB1B6HAGNiMVihJU82zsDFh1gjcAkq7O8=
Subject key identifier:   6F:D0:AB:76:CA:68:A7:68:3A:B7:78:E8:F8:45:A8:62:E9:F2:F8:E6
Authority key identifier: 14:AF:FF:E0:7E:F2:96:EC:8C:D2:52:BC:B2:08:8B:1B:AA:8F:BA:BD
Certificate issuer:       /CN=14afffe07ef296ec8cd252bcb2088b1baa8fbabd
Certificate serial:       019E30E027231C19F55777F48ED74ECF1B17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
Manifest number:          88
Signing time:             Sat 16 May 2026 13:00:56 +0000
Manifest this update:     Sat 16 May 2026 13:00:56 +0000
Manifest next update:     Sun 17 May 2026 13:00:56 +0000
Files and hashes:         1: FK__4H7yluyM0lK8sgiLG6qPur0.crl (hash: uI8un5M/G/ecO9sMimb7veaJXLBADilyVgI4f6BRCdM=)
                          2: QpgRqR4ONpEAldJV9RdLVieuB30.roa (hash: O7WrNb/BN4tdedokbnfczoEsP+osybSj8/C29gRLRWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:27:23:1c:19:f5:57:77:f4:8e:d7:4e:cf:1b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14afffe07ef296ec8cd252bcb2088b1baa8fbabd
        Validity
            Not Before: May 16 13:00:56 2026 GMT
            Not After : May 17 13:00:56 2026 GMT
        Subject: CN=6fd0ab76ca68a7683ab778e8f845a862e9f2f8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:d2:bf:0f:16:86:70:09:60:c9:c4:8c:10:
                    5c:3f:e5:e2:4c:c3:da:29:4c:9c:9a:fe:e2:db:ab:
                    44:81:e0:8f:ac:09:0d:78:9c:05:d8:cd:c8:89:23:
                    43:5d:bb:1c:b0:cc:e8:25:b4:60:22:78:16:81:3d:
                    d2:cb:e4:c2:c5:af:f3:85:a1:ac:96:1e:46:97:fe:
                    1e:2a:ad:04:4a:ef:29:b9:75:c7:52:29:92:fb:40:
                    01:0a:2e:f6:2f:59:ee:2f:b6:8e:dd:8a:cb:52:cf:
                    3b:e8:4a:81:76:06:08:d8:d9:fb:7a:53:3f:4d:10:
                    82:49:c0:f4:8d:28:65:f4:f5:92:bc:4f:fb:51:23:
                    18:1f:8b:45:ef:2a:de:14:cd:4a:a4:8b:90:90:ed:
                    2d:4f:8d:d6:07:81:bb:ae:65:29:47:56:18:c7:58:
                    d6:49:ef:94:56:fb:8c:bf:01:14:b8:c0:ca:7b:f8:
                    f8:12:aa:32:16:40:df:d2:bb:11:fb:77:7a:db:95:
                    98:6a:27:42:c2:d5:4e:51:c5:db:a8:c0:3d:05:b7:
                    25:59:45:e7:1b:db:32:60:7c:dd:5a:1f:95:db:3e:
                    9a:a3:52:f6:82:67:48:ba:21:6f:8e:1d:cb:49:48:
                    6b:c9:da:c3:c7:7c:14:01:86:de:35:56:79:e6:84:
                    af:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D0:AB:76:CA:68:A7:68:3A:B7:78:E8:F8:45:A8:62:E9:F2:F8:E6
            X509v3 Authority Key Identifier:
                keyid:14:AF:FF:E0:7E:F2:96:EC:8C:D2:52:BC:B2:08:8B:1B:AA:8F:BA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:72:83:98:09:e0:b1:c7:0c:62:5c:ab:c9:ed:4e:bb:b3:3a:
         48:db:60:0f:96:03:d7:4b:3a:15:f1:f3:ee:f3:b1:80:f8:71:
         50:12:2c:ed:18:39:e6:98:6b:a7:7e:dd:6e:69:dc:cc:d8:1e:
         4e:16:b6:de:fb:b8:2b:02:df:7d:d7:56:9a:d4:37:68:4d:8a:
         c7:48:8b:2d:be:7a:e1:7e:5c:23:5a:03:47:12:09:8e:40:95:
         7e:cb:8e:2d:3a:43:66:28:e4:a9:65:cc:e9:42:27:cb:e9:fc:
         e2:b8:39:fe:8e:f6:75:cb:6b:6b:bd:21:28:64:7f:2e:b3:9e:
         0b:39:e7:ed:6b:92:05:4c:b4:58:cf:ae:2f:bd:e5:a5:69:a8:
         13:a1:80:10:d2:65:db:0a:be:f7:67:65:50:31:8a:55:74:3a:
         a6:59:40:91:03:99:b9:ac:2a:ae:af:44:e5:54:08:1d:6b:69:
         3a:28:f8:6c:29:11:bb:2b:a1:a8:0b:32:d0:3f:0f:90:3d:d7:
         37:cc:0b:6c:88:67:86:82:7e:e6:7f:93:4c:ba:63:5f:c7:91:
         63:8c:b5:f9:ca:50:60:3b:19:5d:6f:85:1c:0f:f0:d9:2f:30:
         12:b9:1a:1b:7a:de:44:3e:59:10:c4:66:0e:95:ab:c7:ea:5d:
         fc:95:a7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:12:48 2026 by rpki-client