Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File:                     fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier:          xH1u+14pv76h0Zxd1raQx2OC6CvmmT+zJY29A9D7KVw=
Subject key identifier:   DD:6D:F6:78:E1:97:95:DA:A7:A4:B3:6D:4B:B9:84:EF:51:9A:A9:2B
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer:       /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial:       019EC2C97B1DEEE4AAAB0C327E597F2A4A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number:          162E
Signing time:             Sat 13 Jun 2026 21:00:44 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:44 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:44 +0000
Files and hashes:         1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: xLNEOytYj/slqyjZADtzli3kn9EOHesTQDo1ugeMhAQ=)
                          2: pnSX4g2lmq0K8FTBTKkZmOyOugg.roa (hash: V6XhkHNDk99HDBU8c9gDLWqCQBMIvpkfeeSqTLRceRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:7b:1d:ee:e4:aa:ab:0c:32:7e:59:7f:2a:4a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
        Validity
            Not Before: Jun 13 21:00:44 2026 GMT
            Not After : Jun 14 21:00:44 2026 GMT
        Subject: CN=dd6df678e19795daa7a4b36d4bb984ef519aa92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:ab:13:0c:25:20:d1:ab:db:0b:be:18:3e:
                    ca:a5:c1:d9:cd:ea:65:d9:56:7e:4b:d7:af:c5:43:
                    1f:8c:e6:55:a0:bd:1f:fe:dc:d0:57:77:9b:05:d8:
                    2d:e9:ce:46:08:ac:39:86:eb:9d:6a:b8:0d:47:cd:
                    34:e6:ef:61:13:5c:b8:b4:2f:99:53:bc:c5:f7:05:
                    e4:46:f5:e2:34:41:38:10:29:e0:ad:fa:96:d3:af:
                    e4:70:2a:7d:8f:fe:1d:c1:2b:e5:eb:b9:73:5a:a7:
                    c2:f1:5f:41:ea:29:f1:2f:19:29:59:dc:d4:2c:a0:
                    d2:f4:ba:dd:20:8c:c5:94:0d:82:20:ab:ea:11:46:
                    69:c7:33:b2:cb:89:01:22:e1:e2:99:78:b4:12:77:
                    74:08:ad:27:80:e5:87:a5:62:7e:58:c4:c2:8b:2d:
                    d9:ce:33:17:dd:e3:30:ef:14:f0:6b:e2:cb:b9:e0:
                    88:e3:55:e5:db:bd:13:58:74:53:ae:c7:76:99:30:
                    e0:1f:2c:c2:d7:05:37:56:d0:d7:20:39:82:8e:46:
                    9d:0a:a5:4a:5f:32:94:41:72:13:ec:cf:7d:49:7a:
                    71:d9:7a:38:52:78:17:27:5e:f7:c2:e1:f9:2d:2b:
                    a6:c8:83:45:76:bf:4f:fa:98:38:e6:bb:ec:25:e9:
                    60:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:6D:F6:78:E1:97:95:DA:A7:A4:B3:6D:4B:B9:84:EF:51:9A:A9:2B
            X509v3 Authority Key Identifier:
                keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0b:11:82:53:4c:53:a0:91:69:9b:a1:39:40:1d:2a:55:82:
         9a:fc:0b:e8:f1:c3:b8:77:2b:d4:3a:9e:9e:b2:e8:01:c7:d2:
         95:2d:a1:c8:a9:aa:a9:af:6e:be:8c:e7:d1:1b:95:1c:dc:29:
         c4:3c:cc:21:ba:e2:24:0d:76:98:ec:8d:25:bb:b0:78:1c:26:
         a1:25:b2:4e:6d:bb:58:41:f4:07:db:3b:fb:98:9f:de:b2:9e:
         cd:56:69:72:37:08:da:dc:19:bc:36:02:21:26:aa:4e:3c:06:
         89:c3:64:f4:bd:1d:8c:07:34:b5:0e:c4:8c:34:b5:3d:03:6b:
         f2:5d:10:0e:ef:9e:17:fb:2f:ae:fa:56:c7:52:a3:94:cc:6f:
         3f:99:63:38:ee:ec:87:39:f8:12:71:2c:f5:72:36:80:df:10:
         3d:88:73:8b:ea:49:5c:b8:28:9f:3a:1c:ac:0d:9d:0e:49:fd:
         8b:0a:38:51:55:d8:d9:7f:b4:8c:5e:c5:ac:77:25:92:2e:f2:
         b7:a9:ce:47:6c:91:82:a2:8e:d6:a3:f5:9d:9d:5a:dd:88:8d:
         56:cf:ed:0c:d3:a3:3f:3f:62:a5:d2:bf:88:79:20:2f:89:b9:
         cd:08:d8:6b:77:1f:60:d2:32:e7:60:a6:35:26:f7:78:fc:cf:
         a7:61:2e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:00 2026 by rpki-client