Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File:                     FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier:          2qqpT5eZwwY0y/8wjhk7BU0BrtnZvtxIuGiOCjD01Q4=
Subject key identifier:   D3:90:DE:A1:1B:ED:B5:84:0E:33:02:DB:7C:D9:42:04:A5:BC:17:F7
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer:       /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial:       019EBEED04E1603F8BCAD78DB079396FC0E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number:          121F
Signing time:             Sat 13 Jun 2026 03:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 03:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 03:01:04 +0000
Files and hashes:         1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: kQ69Fdav0BrVxzlzYRM/S7yJx6U0ITeuk0hYNKsvR6Y=)
                          2: jDnrlpzju9hJvaoQu4OXwOXPSyA.roa (hash: 5ssODwVsvynqY+E+xEJbdKWKWIk6XsrizpcJBHs3DN8=)
                          3: uxvdRH3Lx7ZudvJAlNDH4WnIMb8.roa (hash: 7H1SzU9/jyjG63PZcxwjrSZgzIIH3ECkB+OiPPAHQwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ed:04:e1:60:3f:8b:ca:d7:8d:b0:79:39:6f:c0:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
        Validity
            Not Before: Jun 13 03:01:04 2026 GMT
            Not After : Jun 14 03:01:04 2026 GMT
        Subject: CN=d390dea11bedb5840e3302db7cd94204a5bc17f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:49:fe:32:e5:90:aa:fe:93:2c:77:2f:40:
                    e3:f9:2b:10:5d:8e:2c:7e:e9:cd:24:9b:c9:6b:21:
                    df:47:45:a0:3f:36:e3:c1:e6:c7:d8:0e:6a:80:9f:
                    97:83:a8:13:8e:0d:46:2b:f9:1a:13:e4:2c:9b:af:
                    de:80:c4:d7:27:5e:2e:87:05:c9:e9:d2:e4:61:18:
                    1c:3f:2c:e3:26:7b:d1:db:2e:3a:a1:01:1b:88:cb:
                    ca:8e:93:f1:b0:5a:7b:20:c1:9f:a3:34:06:ec:38:
                    45:5e:40:df:3a:79:9f:29:a6:45:4a:48:a0:51:d3:
                    a1:fe:f1:4c:47:2e:5d:55:70:7c:08:ff:ef:00:2d:
                    ba:7c:86:3b:cb:ca:32:26:84:91:99:88:7f:c5:5c:
                    1a:93:88:92:9f:15:b8:26:d1:ff:fc:a8:c9:8c:4f:
                    0d:8b:2a:cb:76:68:5c:32:62:d1:9d:56:98:f3:15:
                    4b:90:5b:03:ba:85:5d:01:2d:a4:6c:22:9a:d3:5b:
                    29:dc:b9:24:92:96:1e:16:c5:d4:b6:a1:c1:21:8e:
                    fd:3f:07:2d:ec:ea:5a:25:25:94:cd:af:06:72:95:
                    41:ff:78:39:93:20:06:32:4e:a8:b9:12:21:16:f0:
                    03:93:40:73:59:23:24:6a:21:37:3b:a3:1e:a7:23:
                    2c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:90:DE:A1:1B:ED:B5:84:0E:33:02:DB:7C:D9:42:04:A5:BC:17:F7
            X509v3 Authority Key Identifier:
                keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a5:32:eb:c2:39:7a:eb:dc:8b:63:3f:aa:5b:30:d8:57:45:
         9e:6b:76:74:7a:38:37:35:da:8a:06:f7:3a:b2:c7:98:9e:5e:
         44:e7:19:bc:63:ad:23:94:ba:3f:68:36:25:66:75:01:dc:12:
         d3:a6:29:86:5e:9b:ac:c3:f8:be:da:47:13:28:08:8e:0b:98:
         e3:d9:48:28:d1:98:a5:93:f2:05:a0:84:19:2d:4c:4e:8f:a6:
         d0:d1:2d:cf:62:2c:e9:f5:6b:32:20:fe:6c:8e:9a:da:cf:24:
         3b:17:7f:2c:26:07:94:4e:b9:c6:00:ef:1a:30:4c:96:9e:e3:
         02:2e:95:63:63:94:92:13:e6:a6:5f:37:d4:30:f0:42:48:23:
         18:6c:28:03:d4:bc:76:ec:46:5f:0b:66:45:56:44:98:43:10:
         87:f9:b7:6c:70:7f:8d:ef:16:f9:f7:82:5b:0c:c8:3b:88:b6:
         b1:0d:1f:28:b4:4e:e4:57:bb:44:bc:e1:0b:9e:54:ac:43:93:
         dc:e1:ec:24:21:4f:59:04:cf:7f:be:9a:b7:69:dc:0c:b5:13:
         5f:9b:8c:13:4a:ce:45:c6:43:c1:ef:1c:90:fa:ad:86:6f:b9:
         e3:9a:ef:b2:c9:0f:61:6d:08:d6:8e:4f:96:72:09:cc:d7:df:
         a5:c0:7b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:38:04 2026 by rpki-client