Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          fsVt2odlo84iQiKnyRyomoht4APdzbfu5AkFuiA2b7M=
Subject key identifier:   D6:96:F5:0F:81:31:C3:D8:D4:98:96:C2:FA:35:18:9C:91:5F:E3:A7
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       019FCFDE2488DB5F3C4F65E5CBB20ACFE72E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          0FDE
Signing time:             Wed 05 Aug 2026 03:01:09 +0000
Manifest this update:     Wed 05 Aug 2026 03:01:09 +0000
Manifest next update:     Thu 06 Aug 2026 03:01:09 +0000
Files and hashes:         1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: 59rZouTvaLs2SlExx2/GgS4L0FC1Qvh9aJ8iGUg2Wko=)
                          2: KDLd_3rPD976SC3XcGSVNGzbbrw.roa (hash: 9uOq1GB8z5yH6EUyG7/81m/WIFx1QPWTnjtsr+U7cVg=)
                          3: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
                          4: Sm4dMxxnP8iPlpaArNe_lrYOoWs.roa (hash: CxwMb0XJuXM900emiizD6nilfu0y7bF1zGc6ZqIFhXo=)
                          5: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Aug 2026 03:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cf:de:24:88:db:5f:3c:4f:65:e5:cb:b2:0a:cf:e7:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Aug  5 03:01:09 2026 GMT
            Not After : Aug  6 03:01:09 2026 GMT
        Subject: CN=d696f50f8131c3d8d49896c2fa35189c915fe3a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:eb:c5:97:be:cd:0b:2e:e3:ca:b9:0d:d1:57:
                    84:54:08:23:80:33:dc:b9:17:30:1c:1a:7c:7f:c0:
                    b7:c1:ae:7b:9e:f1:eb:12:02:22:4a:66:d8:9b:b2:
                    e1:bf:9d:5c:d6:60:a7:aa:a4:b2:43:4b:13:16:6b:
                    90:8e:68:ae:99:54:9c:e6:46:41:4b:5f:24:4d:68:
                    fb:55:af:30:49:2a:7d:ec:a6:95:b2:4b:56:6a:22:
                    1b:10:fb:29:de:b8:58:37:dd:a0:ac:9f:b4:a8:82:
                    15:1f:94:20:8f:c9:1e:2a:6f:e8:bf:46:7a:29:62:
                    56:f9:ab:53:f8:e0:e4:bb:5c:f0:0d:de:98:eb:c1:
                    0a:d7:21:2f:8c:1b:34:30:33:50:20:20:21:d1:de:
                    28:d1:61:3c:ac:a1:34:88:f1:61:90:d0:4b:6a:b5:
                    23:c2:21:c7:69:7a:b1:a5:24:86:bf:f8:d6:11:1e:
                    55:e3:66:5a:13:4b:fa:34:f7:12:e1:9a:1f:b4:db:
                    64:f2:96:75:69:6b:27:df:f1:01:0e:a4:ea:96:71:
                    86:19:cf:40:49:2b:63:c9:e4:88:12:65:ae:67:51:
                    56:08:b4:66:b5:10:a1:7d:34:0f:8f:15:0d:a8:da:
                    f5:7b:c5:9c:a2:d6:88:bf:79:be:a5:3a:d7:b6:5f:
                    0d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:96:F5:0F:81:31:C3:D8:D4:98:96:C2:FA:35:18:9C:91:5F:E3:A7
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:43:9e:fb:0e:e5:a4:83:71:7d:85:19:16:9e:3b:5b:4f:
         4d:41:ee:7d:fe:0b:0d:bc:f2:2f:d8:fa:7f:fe:14:55:2d:36:
         8c:e3:5b:2b:81:56:75:d9:71:14:dd:31:54:ee:40:66:89:ba:
         f2:64:1f:ca:9f:1e:63:d7:1c:88:fa:90:59:87:8d:23:8a:b3:
         d3:17:ba:b3:38:98:01:7a:3c:7e:fa:52:c4:6a:09:c3:26:77:
         68:e5:e9:53:6f:88:c5:46:7c:a6:21:47:47:ca:fc:37:cd:9a:
         b1:f7:7f:75:af:de:e3:5c:cc:2b:ed:6c:89:75:2a:ac:0a:b9:
         7c:a3:55:15:29:21:76:c3:47:44:27:8c:30:a7:9e:de:e3:bd:
         86:2c:15:f6:59:6b:94:a6:25:46:b3:90:52:28:02:37:14:84:
         fd:d9:0f:4f:61:c7:d8:08:53:f6:84:7e:77:a4:58:37:cb:ab:
         87:e0:f6:a8:4b:97:9e:d0:d1:0c:25:e8:5c:43:d2:a6:33:f8:
         36:e8:7b:e2:ab:64:de:a8:d3:e7:33:db:f5:cd:0a:67:57:20:
         78:69:03:e5:6f:13:4d:61:37:ab:96:d5:7e:fd:c7:1b:a1:f7:
         39:dd:94:c4:4f:42:08:a9:29:fa:ed:63:8a:c5:5c:13:4d:3f:
         a7:14:ce:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 12:21:29 2026 by rpki-client