Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
File:                     FyU3YBoxaXQEki2VfnRFD1qcvnM.mft (raw, json)
Hash identifier:          yrcHIJTmye7vEmMacwjkBAmMvfSP+hxHjVhnE2mdgcQ=
Subject key identifier:   14:4E:6E:75:65:48:DF:27:65:11:22:88:CE:04:87:3A:14:5C:F1:DC
Authority key identifier: 17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73
Certificate issuer:       /CN=172537601a31697404922d957e74450f5a9cbe73
Certificate serial:       019E4F21B4C40FF8BB731C7DAC6B6C78EAB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
Manifest number:          139E
Signing time:             Fri 22 May 2026 10:01:09 +0000
Manifest this update:     Fri 22 May 2026 10:01:09 +0000
Manifest next update:     Sat 23 May 2026 10:01:09 +0000
Files and hashes:         1: 5Hk9v8vwqFZwgv90_mBCAmlMuuM.roa (hash: NQu2pFqMrFP9QqXLaVI4TDxhucoHe3KI9PQTNgRjuVY=)
                          2: FyU3YBoxaXQEki2VfnRFD1qcvnM.crl (hash: keQINcsXwrrCeAaWG/jLI4pkA45JWEF31kyOy7msZN8=)
                          3: QNm4qXfmUyEs6AgWVoAd3p7xDto.roa (hash: 5WxbazwI9YUcD8mk4Tz0dUwbVJ0crE/g/cMT5agZZgM=)
                          4: TCAvFFGRvOGj7ZTsHmq6PaB3UoY.roa (hash: cry3FkNL2HaffYnu7M9Y0TK7ndTp3ozAuFnKjTG+Nyk=)
                          5: UMUzqPaZVIHXXirp9-_OtB8U8ZU.roa (hash: cbHmOZDkt9KB/VNrOStC9gT2Pe3X9bm47dYrL5UFqvE=)
                          6: lo4AMmkJU70dpL16bJEcQX1CnuA.roa (hash: qDQHS3ec66GmrYNs8OCEy2n0tsEz1PnlU1U37E1h6TM=)
                          7: xnCjSj8cwOG8sjfJr8_Y6BlXt0I.roa (hash: CSD65KQy0rhwcXUVAqtvLoXcHnYbl0w+ZOLg5KhLlPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:4f:21:b4:c4:0f:f8:bb:73:1c:7d:ac:6b:6c:78:ea:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172537601a31697404922d957e74450f5a9cbe73
        Validity
            Not Before: May 22 10:01:09 2026 GMT
            Not After : May 23 10:01:09 2026 GMT
        Subject: CN=144e6e756548df2765112288ce04873a145cf1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:f6:8a:fd:4d:69:11:bf:13:5a:d7:73:9f:
                    43:d9:d7:d4:6d:fd:04:68:ad:24:1a:5b:8a:87:70:
                    64:b4:6e:56:aa:9b:ef:36:9a:da:96:96:89:9b:1d:
                    f9:aa:90:61:97:db:b8:24:a8:3d:a6:1a:01:2e:6b:
                    9a:cb:72:cc:b2:f9:39:6a:09:99:bb:fa:0e:63:83:
                    a4:c0:c4:fa:00:54:a7:33:c6:55:3b:da:bf:13:b1:
                    14:7c:18:27:a4:00:22:2e:06:94:5e:d9:26:55:c4:
                    ab:fb:eb:e4:95:d8:86:13:f0:b8:67:9a:fa:6c:d0:
                    3c:e5:77:4a:bb:da:1c:3e:bc:cf:21:f1:b5:fa:74:
                    84:45:7d:e5:ef:a6:4e:34:b3:a0:9f:dd:c1:c7:4e:
                    08:51:b2:dd:97:2e:e4:ab:03:e3:dc:c5:29:50:4c:
                    67:ea:d0:56:86:ae:57:d9:a0:f7:4f:b2:ae:9a:a9:
                    ae:04:07:ff:44:c8:1e:f9:e8:01:27:61:e0:a2:7a:
                    eb:be:0b:10:2c:72:75:3b:8d:37:31:22:60:19:ab:
                    3e:27:84:8a:22:19:49:77:22:53:00:04:fb:2f:8e:
                    ce:91:e3:5d:65:21:69:62:a2:a4:12:be:d1:33:98:
                    44:24:4f:a5:83:d6:28:02:58:d8:b3:93:75:43:f5:
                    a6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4E:6E:75:65:48:DF:27:65:11:22:88:CE:04:87:3A:14:5C:F1:DC
            X509v3 Authority Key Identifier:
                keyid:17:25:37:60:1A:31:69:74:04:92:2D:95:7E:74:45:0F:5A:9C:BE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyU3YBoxaXQEki2VfnRFD1qcvnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/219cae-264d-46a7-9e64-e604b61be0ea/1/FyU3YBoxaXQEki2VfnRFD1qcvnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:e4:78:71:62:71:ff:77:3c:66:19:b9:1b:8a:02:56:50:bc:
         4f:a2:9f:53:1c:78:db:e7:12:b2:9e:df:8f:b6:78:1d:1b:ee:
         f4:5b:52:24:16:4b:70:cd:f4:e5:d8:2e:a8:0d:c9:39:3e:5d:
         d5:f3:01:a5:87:f6:94:db:54:01:9d:b3:c6:8d:17:3a:8e:f5:
         89:22:27:5e:65:d4:5e:7d:44:1f:2b:6c:4e:22:20:45:ff:15:
         b7:f8:ac:4a:de:9b:e7:47:0b:9f:8c:52:d5:0d:de:5c:ae:2e:
         ce:14:67:d9:7b:cb:61:29:cb:85:69:5e:62:ce:29:4d:06:18:
         2f:ea:49:cf:26:17:39:f0:8b:dd:94:8e:e2:20:9a:2d:c5:a8:
         c4:62:44:f5:df:3d:ed:05:aa:f4:2a:27:cd:cf:ad:b4:ff:32:
         69:d2:f2:f1:c1:2d:b5:4b:83:32:72:57:a2:2a:50:b7:4b:ab:
         41:40:60:ea:0e:2f:a3:a9:80:e6:4a:1e:23:d5:27:93:8e:06:
         bc:ff:24:f6:ab:31:64:58:c8:f0:9d:37:30:08:ee:2a:64:d3:
         ac:99:f3:ee:79:77:86:78:ac:99:f5:38:6d:47:00:67:72:5d:
         f7:d3:4f:b6:f1:7a:81:9c:86:3d:6c:3e:e8:8e:fc:72:bd:1d:
         89:aa:f5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:16 2026 by rpki-client