Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          76aU9P5T6C5aYKqaNhP8fSE2OZ492kte1EDUBG+VTIE=
Subject key identifier:   76:A3:6B:EF:93:08:C6:29:7F:C0:1E:73:E8:21:61:12:CF:A3:81:11
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       019EE6318EE761F2179BF84B81B0BE42D76B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          0F65
Signing time:             Sat 20 Jun 2026 18:01:07 +0000
Manifest this update:     Sat 20 Jun 2026 18:01:07 +0000
Manifest next update:     Sun 21 Jun 2026 18:01:07 +0000
Files and hashes:         1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: ReAdawinUtZ0xZgFncNgLC2H6fGpnU4CGPKEcN7qWBU=)
                          2: KDLd_3rPD976SC3XcGSVNGzbbrw.roa (hash: 9uOq1GB8z5yH6EUyG7/81m/WIFx1QPWTnjtsr+U7cVg=)
                          3: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
                          4: Sm4dMxxnP8iPlpaArNe_lrYOoWs.roa (hash: CxwMb0XJuXM900emiizD6nilfu0y7bF1zGc6ZqIFhXo=)
                          5: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Jun 2026 13:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e6:31:8e:e7:61:f2:17:9b:f8:4b:81:b0:be:42:d7:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Jun 20 18:01:07 2026 GMT
            Not After : Jun 21 18:01:07 2026 GMT
        Subject: CN=76a36bef9308c6297fc01e73e8216112cfa38111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:3d:f6:58:c4:37:c7:e9:dd:82:20:fe:78:
                    f4:9c:fa:4d:c6:ef:7f:84:59:58:88:f5:e7:ad:a7:
                    dd:90:6e:1f:17:be:a9:d1:54:15:cd:76:56:18:43:
                    a3:90:3f:92:a6:10:20:50:9c:63:7d:ce:99:c0:23:
                    7d:ad:cd:00:cc:f6:ed:c8:b0:61:41:32:a9:37:44:
                    f4:a5:0d:11:4c:2d:17:18:2e:9b:ce:0d:87:d5:78:
                    4c:40:8a:24:fb:8d:f4:0f:29:c7:06:f5:04:e9:ce:
                    54:9f:fe:9a:c4:d7:14:b4:ea:33:c0:aa:16:1d:03:
                    d5:b6:52:16:5a:8d:94:3d:f0:a2:4a:ef:87:42:8c:
                    18:ec:36:1d:2c:1f:85:ca:73:79:35:77:c9:91:fa:
                    da:fb:8a:b1:00:fe:3c:6f:df:d1:9f:0c:fc:13:7a:
                    af:e9:f8:af:c5:02:23:78:f3:0f:be:64:da:01:04:
                    42:81:a8:dd:89:3c:62:70:ad:38:e9:a7:6a:19:99:
                    3f:cb:53:e2:99:4a:56:ab:d2:30:6c:bf:11:1e:50:
                    1a:0c:24:4d:44:fa:b0:c8:c7:69:a8:e6:d8:11:af:
                    67:63:b7:81:61:17:62:72:8f:17:bd:93:4a:9c:88:
                    95:01:9d:4c:29:68:48:73:2d:24:96:f0:ad:bc:bc:
                    01:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A3:6B:EF:93:08:C6:29:7F:C0:1E:73:E8:21:61:12:CF:A3:81:11
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:08:14:71:8b:72:9b:33:08:75:2f:64:07:d2:25:37:49:
         65:62:33:a1:98:d0:bf:20:27:d5:86:84:7d:de:65:15:91:18:
         dc:d1:72:b6:8f:6a:8b:f9:47:78:a5:f4:e8:ef:d6:ed:cb:6f:
         c3:8d:1c:81:2a:f7:6a:4f:f3:5d:68:c3:7e:b9:20:a4:c3:46:
         c8:a6:e5:8b:bd:b8:d4:18:e7:15:d1:c6:2a:96:3c:81:86:9a:
         c1:16:15:8b:1f:47:42:52:fd:62:82:d0:92:e3:5d:f1:55:1d:
         82:d6:eb:78:63:a8:08:b7:61:67:d8:9e:62:f5:ee:d9:98:53:
         2a:4d:00:90:51:b0:1e:73:96:6e:ee:1a:7c:c9:09:29:b8:79:
         e2:5c:aa:37:16:b1:9e:57:77:fb:06:eb:4d:e2:c5:1f:01:d6:
         b0:91:58:a9:6c:5a:9a:09:23:8d:53:25:32:63:8c:31:09:71:
         c0:e6:e0:8a:2d:b8:51:5c:52:f9:ce:3c:ef:80:66:92:05:ad:
         85:1b:92:47:85:3d:a7:82:80:eb:f4:e4:a0:18:de:a7:c5:fa:
         5b:91:a6:05:69:47:c6:80:30:94:04:c9:6f:bf:06:dc:73:3a:
         77:1f:58:4a:c1:b1:41:6d:b5:f2:f4:c5:2d:0c:1a:a6:9a:ba:
         e7:87:81:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 20:18:39 2026 by rpki-client