Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File:                     FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier:          9pyfqpei/jqPAh+iELo/SWFhEi32gMo0CLl2FKVO1Eo=
Subject key identifier:   88:12:80:D4:EB:33:21:15:6E:0B:B1:09:16:00:12:BF:EC:2B:06:CF
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer:       /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial:       019FA26089AC7530001DDF258BE7236E7443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number:          19D5
Signing time:             Mon 27 Jul 2026 07:01:03 +0000
Manifest this update:     Mon 27 Jul 2026 07:01:03 +0000
Manifest next update:     Tue 28 Jul 2026 07:01:03 +0000
Files and hashes:         1: BL9BKwYvvr4PQi4Olmvs_SJfdIU.roa (hash: PQRLVCa1vMzlo4kwd2qwNYT39XsjM74Jew0dEax8fpk=)
                          2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: aU1twfimNEpVD6xEssefSb+h84EpO6sS73rIHQQdnac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:89:ac:75:30:00:1d:df:25:8b:e7:23:6e:74:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
        Validity
            Not Before: Jul 27 07:01:03 2026 GMT
            Not After : Jul 28 07:01:03 2026 GMT
        Subject: CN=881280d4eb3321156e0bb109160012bfec2b06cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a3:07:f1:4b:39:0e:4f:0f:69:9c:26:db:bd:
                    b1:7b:d2:d9:b8:cf:6d:fc:6a:46:18:b0:be:12:25:
                    06:60:2f:be:78:30:cf:55:45:d3:88:4d:f4:cc:35:
                    69:fc:88:13:d8:75:7f:31:f5:e5:80:be:85:cc:c7:
                    d5:14:2d:5a:8a:ff:ec:69:2e:fc:56:35:fb:2e:8a:
                    1d:38:9f:f7:84:64:ef:04:0a:c0:8e:c4:7f:0b:5a:
                    28:71:3d:0b:07:a8:88:8d:d6:fb:b8:c6:75:52:27:
                    84:b5:d2:82:1a:92:0c:4f:b8:83:3f:17:a3:54:bf:
                    ad:c6:d8:61:8a:ef:03:a4:87:e7:9a:ae:1f:23:34:
                    f1:60:5e:03:6b:c0:7c:05:73:fb:22:a3:92:bb:1f:
                    1e:7d:14:e7:fe:ce:71:39:68:59:3d:2e:a8:63:5a:
                    68:7a:4f:00:7e:4d:7f:9f:f9:49:ee:c4:dc:bb:bc:
                    ba:1e:a7:f2:d1:1b:5f:7d:8e:85:28:b3:b5:4d:85:
                    ce:b0:d8:74:68:a2:d9:5b:f9:38:cf:4f:88:ac:d4:
                    b4:fb:a1:c6:cf:41:98:a7:af:f5:03:da:46:3f:b3:
                    42:81:23:fe:dc:34:34:fe:ba:39:f9:71:95:f1:7b:
                    8d:c0:70:3a:e1:25:a8:03:8f:6c:05:a0:03:6d:8f:
                    7a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:12:80:D4:EB:33:21:15:6E:0B:B1:09:16:00:12:BF:EC:2B:06:CF
            X509v3 Authority Key Identifier:
                keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7b:a6:5f:cb:d4:e8:ee:b3:5c:a5:c4:64:db:a4:50:c5:66:
         42:3c:8a:ae:74:89:68:09:a1:c4:82:ea:58:73:0a:5d:31:ed:
         dd:93:aa:b5:e3:f1:32:96:6e:4a:5c:2b:09:59:19:29:14:96:
         92:dd:e5:52:15:22:a4:6f:ca:d5:fa:5b:d5:01:32:e0:b9:1e:
         4c:38:42:bc:ca:77:a7:3e:54:5b:72:d4:1a:6d:1b:bf:83:94:
         68:2b:8b:06:dd:70:85:18:89:02:a3:40:63:e9:dc:ad:52:71:
         96:1b:9c:53:84:05:74:d2:94:a6:de:cd:4b:8a:4b:85:c0:17:
         83:00:86:8a:16:c4:69:27:f7:f4:98:45:52:1c:1d:96:1b:5f:
         d0:14:d0:90:85:de:28:21:68:e3:2c:0a:e6:3f:57:ab:29:07:
         12:17:91:45:79:6c:d7:9f:f7:49:b3:59:77:ff:d5:99:a0:38:
         11:60:bb:48:a0:42:2d:94:54:19:a5:6f:61:23:ec:a1:5c:c0:
         ee:c1:79:5e:6e:97:45:16:20:0d:20:96:16:ea:8d:9b:12:22:
         9a:e9:5c:8b:0a:34:46:57:ea:a3:8b:54:ec:3b:ea:b1:83:4b:
         16:c9:a8:b0:63:cc:dd:cb:33:cb:ce:db:d5:76:d2:7d:e7:89:
         c1:54:8a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:17:04 2026 by rpki-client