Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File:                     FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier:          EGBmIVaCVU8WeRHf7YP6tevfNGXCdIvMSsyaJJoYpic=
Subject key identifier:   E2:E9:19:F5:3A:92:44:72:CC:B2:08:49:B5:20:C8:55:1B:29:62:6A
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer:       /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial:       019EB92132B097C9FF03B2A84999507496D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number:          1959
Signing time:             Fri 12 Jun 2026 00:00:21 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:21 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:21 +0000
Files and hashes:         1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: wxQ1PplJi3k6Bq0H22KVmiQsFnWuFJOf4aR6uJhiq8I=)
                          2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:32:b0:97:c9:ff:03:b2:a8:49:99:50:74:96:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
        Validity
            Not Before: Jun 12 00:00:21 2026 GMT
            Not After : Jun 13 00:00:21 2026 GMT
        Subject: CN=e2e919f53a924472ccb20849b520c8551b29626a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:cb:d7:2a:60:30:88:fe:c1:07:fa:4e:c3:
                    20:76:78:4d:a4:2c:83:19:8e:66:2b:71:48:50:26:
                    9b:a7:c7:5d:36:1c:c7:6e:86:52:01:51:ca:c2:e8:
                    4d:04:3f:6a:e6:57:08:4a:61:7c:03:6c:82:e0:2f:
                    a0:34:07:f8:a8:0c:61:33:ca:a7:b8:1f:3f:e1:81:
                    c9:33:2c:76:ba:3d:1e:ba:2a:47:c4:04:f3:3c:e0:
                    fb:96:1c:83:4a:57:27:7c:12:9a:44:e9:00:0c:e1:
                    69:a9:e2:22:4f:dc:5a:cc:0b:60:51:83:8e:f0:52:
                    53:13:9c:3a:a6:06:81:17:5d:04:34:f2:ff:9d:0d:
                    cd:24:eb:d8:ba:5e:ca:04:c1:b8:22:90:ae:38:8c:
                    3e:c8:a4:3b:46:ac:70:87:62:1b:14:32:2d:c4:40:
                    f1:e9:1d:73:4c:45:4d:3c:69:58:ab:76:9e:a8:d8:
                    97:da:ed:ac:ae:a4:aa:fb:91:69:17:aa:fa:0e:10:
                    d9:4b:35:49:dd:98:91:20:ba:63:3d:c0:a6:17:f3:
                    3b:20:cf:ea:aa:b6:b0:52:5b:6f:2b:65:c3:a9:d7:
                    ba:81:ca:48:bf:bc:e4:77:79:3d:6f:2b:40:2d:e8:
                    9e:87:0a:8f:20:d4:19:28:e2:55:58:0a:9d:57:df:
                    07:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E9:19:F5:3A:92:44:72:CC:B2:08:49:B5:20:C8:55:1B:29:62:6A
            X509v3 Authority Key Identifier:
                keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2c:72:08:ba:a0:35:9b:84:a9:fc:00:e2:58:70:2a:71:18:
         67:47:44:b6:dd:84:18:e2:38:65:e8:92:46:e8:65:4b:a0:ee:
         44:a7:43:52:48:d1:a8:81:a7:59:0d:c8:5e:ba:41:e7:70:56:
         c4:64:d9:4f:fa:83:d4:dd:8f:d4:24:38:b7:ba:3c:fc:03:d2:
         2c:83:c5:fd:2c:2c:13:ac:96:84:11:93:f7:cb:79:61:30:c5:
         41:75:23:b2:ce:94:d6:58:f0:79:93:81:c9:43:3c:3c:be:23:
         02:4f:b8:29:14:64:c1:e5:b8:8d:85:25:bb:de:4f:39:fe:78:
         bd:f3:d5:2b:59:26:57:22:44:40:ff:3d:ad:be:8e:f4:02:4c:
         8b:dc:92:b3:ec:1b:27:c0:4e:43:bc:f2:b2:d3:bb:e3:e0:e0:
         b7:7c:c5:fc:37:fb:55:ce:e9:e6:2e:56:dd:1a:49:1d:1a:e5:
         93:c4:bd:22:bf:c8:a2:75:66:ca:e1:83:2a:11:a9:3d:2b:3f:
         a9:35:3d:f0:d3:28:4e:df:79:ca:a4:c8:3f:61:51:62:8b:f9:
         23:de:27:c5:4b:74:91:fd:67:56:e4:bd:c9:9e:b6:e7:1e:92:
         94:44:fe:9d:ad:10:2e:9b:c3:aa:9a:f7:f7:1f:04:97:2c:1c:
         09:30:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:18 2026 by rpki-client