Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
File:                     FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft (raw, json)
Hash identifier:          lD78HLTpwJPOior9vJRWKbHJYENSEw76pLNGphWdS+Y=
Subject key identifier:   8E:29:FF:43:A8:7A:2E:4A:7F:14:6E:8E:26:F1:D7:57:C0:19:64:02
Authority key identifier: 16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35
Certificate issuer:       /CN=1662cfd26eccf289757399cc99c17d1cb4357535
Certificate serial:       019FA1F2B858F97A48229E7C6182FB882866
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
Manifest number:          1931
Signing time:             Mon 27 Jul 2026 05:01:06 +0000
Manifest this update:     Mon 27 Jul 2026 05:01:06 +0000
Manifest next update:     Tue 28 Jul 2026 05:01:06 +0000
Files and hashes:         1: 8Ntlvv9Ld6-BDde15t0bTONC60U.asa (hash: B8ekVh6JTKOuIcf00A6vFcLBslPnzuLMCZMIiVm2VBc=)
                          2: FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl (hash: Xd+01jnCHrK4ZMI5adnUqdpB5YAWqgG3NxwF0NKEWDE=)
                          3: KbrXBzB1BgM_1A9x-JUDv8lrSsk.roa (hash: Nsz86TtqyWj5Lo+BBb81+XB5/uP+6tXXKhUi47zk2Q4=)
                          4: PbVXfQ5rfq2QGlRT7ustY9GJalA.roa (hash: 4ylBUTwX4OuSjSYpDk8XgQA77uXsCX+X47fLt/q6PPQ=)
                          5: XT2ZxiNyPl8rn_wjT4dSEsrv2FQ.roa (hash: j9Z9JJ3f8apoIT6KOvwGf6DjWw4/5A4w3HMpiPuUfAs=)
                          6: ef19nvdTGsqwpxhWrlA2QPoAkQE.asa (hash: /b9WKn4+Ce0TfiX2ao4EvDhI4KCZFREiDp2QXziTSF8=)
                          7: j8rGil1Q99cXiy4wHBKzzsKv93s.roa (hash: U9Hz8djx34h6Nab+qY2wHquJzqc1/9nIwuGkR5Yv/u0=)
                          8: vPPS-OSlU2Rm3HYJWIzBj0GFPtk.roa (hash: 2YpBCFxGwCwb9QOvfRX4TxcBo9tjV7B1bM0xKoJ16qI=)
                          9: xbIyTDCpsnXfmiMR3BR_GrwBr-o.roa (hash: Z4NKqsIvOyqlHYqkZodAOXY8gr36mAXiXG8WLSal1pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:b8:58:f9:7a:48:22:9e:7c:61:82:fb:88:28:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1662cfd26eccf289757399cc99c17d1cb4357535
        Validity
            Not Before: Jul 27 05:01:06 2026 GMT
            Not After : Jul 28 05:01:06 2026 GMT
        Subject: CN=8e29ff43a87a2e4a7f146e8e26f1d757c0196402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:ba:ac:2f:ee:7c:bd:8a:30:57:37:f4:ed:
                    3d:1a:f5:69:5d:db:e8:c4:92:bd:8e:e2:22:b8:e4:
                    bf:6b:21:72:10:7c:ff:bf:04:a2:27:6e:48:c7:47:
                    08:07:57:02:15:35:25:b8:23:72:90:aa:12:bb:18:
                    5b:a4:a7:2f:4c:f4:2c:08:3a:0f:d8:fe:c5:8a:a7:
                    8e:a5:ff:b3:4e:d8:78:75:22:b4:39:b9:e4:a3:09:
                    8f:b3:f9:62:70:b6:76:01:eb:19:e1:94:b9:3a:34:
                    2e:a9:52:22:2c:4d:ca:9e:f2:70:5e:52:d9:c1:8a:
                    16:31:6b:93:78:0e:7a:98:e4:5c:8e:a2:1c:27:e2:
                    46:d0:e0:d0:28:90:0a:6b:45:00:ab:3b:46:ae:e7:
                    02:10:04:15:c1:6a:25:f6:57:4d:5c:b4:fd:9e:35:
                    2a:4a:fc:2f:92:79:6a:82:5a:80:81:21:f8:bf:f6:
                    94:fe:7f:18:e3:74:d8:4e:05:8c:69:ca:d9:8f:05:
                    35:00:f1:41:9a:31:6e:a5:53:ed:4b:c3:42:4a:05:
                    2a:5c:9b:82:68:4d:21:12:1c:f6:52:4c:6a:cc:7e:
                    08:8d:59:e3:1e:e7:5b:8b:cc:0c:bb:2c:54:ca:04:
                    03:de:4f:c0:ca:da:b7:fa:46:62:df:25:f8:5b:c7:
                    6e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:29:FF:43:A8:7A:2E:4A:7F:14:6E:8E:26:F1:D7:57:C0:19:64:02
            X509v3 Authority Key Identifier:
                keyid:16:62:CF:D2:6E:CC:F2:89:75:73:99:CC:99:C1:7D:1C:B4:35:75:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5b9878-2080-4354-9592-b7231941fc3a/1/FmLP0m7M8ol1c5nMmcF9HLQ1dTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:8c:42:1d:36:5b:7d:7c:46:ef:9d:ca:9f:35:cf:5f:70:e6:
         6e:57:ea:da:3f:e2:d4:16:09:ec:90:84:97:fc:f0:93:09:4d:
         4f:e0:98:00:77:cb:2e:1e:ed:ca:8d:bf:5c:ff:19:4c:bb:ae:
         a6:2f:9c:e5:3f:a0:6c:9b:fa:d3:fd:9c:b8:0a:e9:f7:27:77:
         7a:4c:9e:7d:89:1a:7a:8a:de:36:ec:b9:5d:f0:85:0f:b5:7d:
         b5:a4:34:4f:0d:53:65:ce:bb:2c:64:41:dc:32:26:10:b5:f9:
         2f:65:d2:72:a2:f7:6f:eb:ae:3b:b6:82:c2:30:c8:3d:30:a1:
         96:7c:f2:37:f0:ab:1e:c5:48:7a:ce:3e:72:9f:11:1e:8e:d1:
         71:20:fe:b1:be:52:e7:5a:e9:d1:74:4e:81:ae:55:c0:b4:73:
         a2:e6:f0:04:c5:b3:83:98:fa:53:81:14:c9:e8:b8:1d:36:70:
         88:6a:07:2d:60:04:b2:b6:e1:58:e3:40:dc:a4:e8:f4:d5:d6:
         51:e7:34:ce:21:90:e0:49:b2:e4:d2:97:8e:e7:8b:67:f8:42:
         6f:db:8c:ce:9c:7f:af:d5:05:5d:3c:0b:84:4d:44:d9:a7:ca:
         e3:0c:6c:fe:3d:e3:21:95:eb:6d:34:ef:e0:38:eb:58:c8:c0:
         f8:f6:75:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:40:08 2026 by rpki-client