Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
File:                     FLcYAN3cSX9g-e23gzyUlzq33Bw.mft (raw, json)
Hash identifier:          lpvzq8v/IOPWjYz6TeWNORUmVCOk6t1EV6edLrWDa1w=
Subject key identifier:   DA:96:BE:91:36:BD:97:B4:E1:CC:91:2F:68:FA:78:BB:10:AA:2D:86
Authority key identifier: 14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
Certificate issuer:       /CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Certificate serial:       019EB98F284AB74D722F16F522A2D7CF9092
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
Manifest number:          1843
Signing time:             Fri 12 Jun 2026 02:00:27 +0000
Manifest this update:     Fri 12 Jun 2026 02:00:27 +0000
Manifest next update:     Sat 13 Jun 2026 02:00:27 +0000
Files and hashes:         1: CmtFVtO9hzZe40i8krBc2erjmj0.roa (hash: zXgMe4Op7B660E2hvvLX+Q3KPKDasJwTTDrEF1VufuM=)
                          2: FLcYAN3cSX9g-e23gzyUlzq33Bw.crl (hash: hIVIozE7A2JDW7+3zi/CCLXYMk4W+2rBac/X1bhH3q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:8f:28:4a:b7:4d:72:2f:16:f5:22:a2:d7:cf:90:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
        Validity
            Not Before: Jun 12 02:00:27 2026 GMT
            Not After : Jun 13 02:00:27 2026 GMT
        Subject: CN=da96be9136bd97b4e1cc912f68fa78bb10aa2d86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:90:b9:97:87:bd:25:07:93:df:86:b8:78:
                    56:91:a2:eb:7c:b8:8e:d8:6b:6d:d8:36:11:1d:7f:
                    76:97:49:de:c7:88:99:bd:3e:7d:31:d7:9b:2f:8b:
                    24:b6:df:65:b0:16:be:63:21:2f:14:5b:e7:0f:a6:
                    34:4c:61:36:a0:c2:21:6f:fa:0b:e0:48:ca:a8:af:
                    d1:f3:bf:b8:67:26:ec:11:54:97:0e:4b:19:0c:a2:
                    80:fa:1f:0e:bc:5d:83:16:52:38:63:06:4e:22:b2:
                    d3:74:00:c1:44:31:fb:5c:02:af:7b:5d:77:c7:26:
                    66:f0:fc:0b:29:0a:88:36:8b:e0:51:e6:c0:ba:21:
                    5c:25:e0:68:b7:13:e4:03:33:c4:d0:9e:85:49:06:
                    9e:fa:3f:7d:7b:1e:e3:b0:05:34:b9:d7:42:80:c9:
                    7b:57:d7:d4:68:81:a2:16:ef:34:5f:3e:90:f6:2b:
                    d0:0e:6f:61:2b:eb:c0:51:d8:a8:47:86:41:0f:b3:
                    c7:60:e3:22:d4:70:a5:33:c4:dd:1f:9e:18:86:58:
                    4c:b8:79:78:36:9d:14:09:da:f0:44:ff:ee:ce:9e:
                    63:76:67:21:c9:3e:36:76:22:0c:82:4d:3c:1c:2e:
                    23:e2:38:4c:59:9c:fc:3e:d8:da:0d:7d:ca:63:5a:
                    3e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:96:BE:91:36:BD:97:B4:E1:CC:91:2F:68:FA:78:BB:10:AA:2D:86
            X509v3 Authority Key Identifier:
                keyid:14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:aa:03:28:5c:af:e9:e7:4c:be:7a:98:92:d4:30:a4:67:06:
         73:15:42:7f:fa:a1:aa:14:52:2f:1d:42:e2:bd:70:8c:0c:f4:
         97:3d:71:9d:bd:62:cb:33:a0:f2:e3:a2:61:3c:33:44:ea:97:
         ba:92:5b:b2:b9:0b:22:58:2b:c5:63:65:20:43:8b:d9:f0:7e:
         f0:9b:ef:8f:8d:17:e2:a6:b3:48:3b:01:84:cc:89:d3:ad:a0:
         e3:64:ec:13:0d:f7:7c:b0:1d:d9:ce:e7:b0:6e:d1:64:3c:9a:
         a3:32:22:47:89:20:05:2e:05:7b:a5:83:01:b7:ce:90:2f:00:
         27:4b:3b:62:d4:58:2a:45:09:73:4b:39:97:c2:3d:b7:59:f4:
         d5:24:61:02:4c:3d:5a:ea:b3:d1:02:9e:a1:12:d2:4e:06:6d:
         e3:b1:18:e2:2d:57:d2:2c:66:50:bc:12:07:1b:81:ec:75:bb:
         1e:14:91:2e:e2:b7:35:eb:bc:de:5d:c7:27:4b:34:df:cd:78:
         7c:b1:08:1c:f4:e5:58:38:14:3c:ac:ed:d3:00:fd:f7:a1:6e:
         c7:74:9e:d3:c5:05:07:04:c4:3d:05:b8:71:a8:3e:1d:2e:be:
         7b:01:7c:f2:8d:cf:47:02:51:25:f7:b4:42:d9:c1:b7:4e:e4:
         1f:b4:03:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:20:26 2026 by rpki-client