Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File:                     FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier:          wN+DP9WpID8OJ6HIJinkbpOeBYDWEy+nOu9hAyoxDmw=
Subject key identifier:   CF:D1:A5:14:5F:F3:D2:3B:9D:12:89:2D:6B:31:2B:1E:82:D3:8D:C3
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer:       /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial:       019EB7D7CF2C79542EA8FEBF8E3B35961029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number:          1955
Signing time:             Thu 11 Jun 2026 18:00:34 +0000
Manifest this update:     Thu 11 Jun 2026 18:00:34 +0000
Manifest next update:     Fri 12 Jun 2026 18:00:34 +0000
Files and hashes:         1: 04V3xL-wvyvCRWgSYkpGUkjiE8s.roa (hash: FQS7L+Hj2zSXnBRorh0m7ldyBShNLVTNeylqQBQZHwo=)
                          2: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: Tb8scsGzAigc7tbAQyYuOEzXhQnazSelIBZpQHmn5VY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:d7:cf:2c:79:54:2e:a8:fe:bf:8e:3b:35:96:10:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
        Validity
            Not Before: Jun 11 18:00:34 2026 GMT
            Not After : Jun 12 18:00:34 2026 GMT
        Subject: CN=cfd1a5145ff3d23b9d12892d6b312b1e82d38dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:c2:e4:01:df:c2:b0:5c:a7:6e:3a:b5:ec:
                    d7:05:c2:52:ea:f4:01:df:93:92:95:88:54:c2:20:
                    1d:4d:67:25:82:00:b9:37:e7:eb:d2:bc:95:40:36:
                    f6:d2:bf:22:e4:15:a9:20:79:8d:5b:03:c8:85:be:
                    36:a8:62:e2:b7:bc:25:f8:4f:00:d8:13:28:f6:f6:
                    18:5d:ab:08:62:44:08:4b:94:26:f0:36:6d:cd:85:
                    b6:8d:95:36:48:81:28:75:6b:a0:d0:75:db:fe:e5:
                    55:e4:72:c3:83:3c:01:79:12:6f:43:4a:c5:af:5d:
                    8f:fd:35:b7:50:76:0e:2d:19:d6:20:75:d1:ec:4f:
                    60:59:7c:f2:8f:b2:db:86:7c:a6:e2:c3:fb:c9:b3:
                    44:d3:f1:29:ac:df:32:da:68:bb:51:97:f4:f0:71:
                    0b:7b:b7:78:7f:89:c4:1d:9e:da:a7:3d:79:4f:d2:
                    90:52:60:8d:b2:aa:98:0f:23:bc:f9:3c:e4:de:d3:
                    8c:95:1f:9a:0e:60:2a:6c:6b:9f:0f:dd:30:a7:25:
                    f8:1f:2e:27:5e:56:98:95:81:88:69:55:a5:9b:f3:
                    ee:2f:8f:90:6a:d6:33:fb:5c:af:0a:16:eb:75:17:
                    4b:c1:42:50:1e:b7:f9:9f:a1:5e:dd:8c:85:e1:96:
                    cd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D1:A5:14:5F:F3:D2:3B:9D:12:89:2D:6B:31:2B:1E:82:D3:8D:C3
            X509v3 Authority Key Identifier:
                keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:db:49:c5:6e:4e:55:e3:ed:61:31:f2:06:81:61:21:da:93:
         92:4d:d6:dc:73:44:06:d8:df:1c:c1:aa:27:37:ef:8c:78:ed:
         d4:0e:a5:cf:d5:92:0d:7b:e1:37:c6:e6:dc:e5:84:c1:80:40:
         21:1e:e5:9a:c1:45:30:ae:12:64:e7:46:bd:bf:bc:54:33:c5:
         15:e9:f3:a0:28:ab:cf:8d:4c:b1:53:97:d3:6e:1e:d8:08:88:
         35:ad:d2:d9:db:c7:07:e4:14:c4:d0:96:77:11:e6:74:fa:2a:
         4e:5a:12:bd:4b:90:39:b8:54:19:b1:41:0c:ed:c9:40:c0:90:
         df:4a:7f:65:f7:e6:4c:ac:2d:e5:1a:c2:35:ab:0c:d1:11:63:
         c9:6f:b6:b3:25:85:83:9b:f3:d6:5e:a6:98:4f:00:70:71:67:
         26:5c:2e:b7:97:4f:59:8c:7c:28:70:4d:20:fa:c0:fa:53:78:
         4f:31:ac:cb:87:87:76:be:de:71:69:aa:1b:09:d8:b3:00:d8:
         ab:a7:f2:26:f8:1c:88:ba:58:89:2c:d5:b2:71:2f:2d:3a:9b:
         60:74:9b:9d:d9:a4:e3:65:71:da:f3:da:17:5d:89:e7:a6:51:
         93:44:b0:6a:af:80:3b:65:24:55:25:b6:dd:22:12:d0:d2:34:
         75:0e:f4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:37:47 2026 by rpki-client