Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
File:                     FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json)
Hash identifier:          Gtr19ruywwfl9Rb5p38LaTJ28G/6nLcB9fSnvz/hHL4=
Subject key identifier:   C8:DA:D7:DD:59:68:68:CE:D8:C3:3C:BC:18:61:DD:98:09:BA:C8:E3
Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3
Certificate issuer:       /CN=14d94a6b30920d1f7a2d15171b508f92266476e3
Certificate serial:       019F189E42BE15575F9B1E5FA544A4A59692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
Manifest number:          1919
Signing time:             Tue 30 Jun 2026 13:00:52 +0000
Manifest this update:     Tue 30 Jun 2026 13:00:52 +0000
Manifest next update:     Wed 01 Jul 2026 13:00:52 +0000
Files and hashes:         1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: 7sRj7F2KgYWuDSloBkWfU8lK9Gpeb163XLu4EYGKZCc=)
                          2: LYeebYhXQ4ozTkOxDiNrlwHyTZs.roa (hash: l6hu36oMQogqFFPGyf6pGKkrBP0BChtip7eb8I8e7yY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:42:be:15:57:5f:9b:1e:5f:a5:44:a4:a5:96:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3
        Validity
            Not Before: Jun 30 13:00:52 2026 GMT
            Not After : Jul  1 13:00:52 2026 GMT
        Subject: CN=c8dad7dd596868ced8c33cbc1861dd9809bac8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:93:d2:37:6c:02:0c:39:c2:23:42:11:75:48:
                    d5:36:d5:d6:6c:34:db:cb:48:e9:61:91:03:5c:25:
                    e3:79:52:03:86:19:a5:df:7a:fd:ff:b3:e5:5b:59:
                    fe:80:d0:31:d5:d5:14:92:64:63:b5:2a:3f:0a:55:
                    b1:42:47:e1:0e:a4:a1:96:86:10:d1:2b:ee:cd:c5:
                    f3:96:00:55:21:8e:aa:7f:66:15:75:b0:89:4b:3f:
                    32:ba:40:85:79:aa:09:f7:0a:11:ea:80:e6:83:cc:
                    2c:97:5d:a3:a4:28:a3:5d:5b:7f:ab:6f:1f:c9:1d:
                    6e:eb:aa:0d:c3:8b:9f:ad:ec:ef:3b:ee:bd:c3:b7:
                    ff:03:d7:e2:62:08:5f:8d:d9:b6:6a:f6:f0:2e:30:
                    19:87:81:60:2c:e8:90:2d:c6:e3:09:1b:f4:95:a2:
                    b9:c1:3e:92:83:be:e5:7d:96:56:cc:42:21:5f:12:
                    03:c9:b2:00:39:aa:82:f9:20:72:f8:21:6e:7a:2a:
                    a4:8a:01:84:2f:44:6b:4c:64:6b:eb:3f:86:35:77:
                    17:c6:08:87:17:19:e0:df:61:8c:06:dd:68:8b:b9:
                    55:9b:48:1a:55:46:9f:bc:b7:fa:0c:42:de:06:12:
                    9e:bd:da:e0:0c:1c:ef:b1:7c:36:52:70:ed:ed:1e:
                    74:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DA:D7:DD:59:68:68:CE:D8:C3:3C:BC:18:61:DD:98:09:BA:C8:E3
            X509v3 Authority Key Identifier:
                keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ae:f9:70:51:89:b1:f8:e8:c7:1d:31:f7:d0:81:c4:59:e9:
         ff:cb:b3:60:1a:d3:cb:35:53:16:2a:fa:55:8d:ca:b1:03:95:
         62:9f:a8:05:c8:8f:fb:40:b6:0a:ef:e8:9d:9c:4a:46:0e:4c:
         35:65:3d:aa:56:48:24:17:1b:35:bf:2e:04:e9:3a:da:a1:a4:
         f9:29:9f:32:ab:ee:a4:de:5d:70:e1:e9:56:13:25:42:9f:fe:
         fa:5f:8b:53:57:fb:b9:c9:d1:3d:92:be:03:c6:87:b8:8e:33:
         49:ec:b3:5b:b7:5b:99:c2:8b:7c:35:14:80:e3:3f:af:d1:77:
         3a:a0:0a:26:3a:a2:f7:fd:07:13:49:7b:23:9e:19:ff:a7:a9:
         e8:52:e3:b8:79:cb:e3:46:a3:c6:80:e8:52:bb:d6:57:4a:d7:
         cb:a0:cc:e8:9d:04:15:4d:a9:0d:ae:e0:c4:16:b1:a8:2b:35:
         d8:65:16:92:0e:a5:87:a4:47:7e:5d:0f:4b:ae:b1:73:1d:6e:
         4b:f6:de:10:70:ef:53:32:2d:43:11:8f:c4:e9:da:44:de:20:
         7f:63:cd:52:9a:95:e3:7f:64:2b:7b:dd:52:83:34:f3:95:b6:
         8d:77:84:8a:e9:e2:e8:a8:17:9b:e1:0a:6a:b9:e2:f2:cb:f2:
         07:23:a0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:17:29 2026 by rpki-client