Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
File:                     FGysOKrBes72Z80OqgLg_JZ3_Pc.mft (raw, json)
Hash identifier:          r/IwjnOcoNaF+Vs+GvexUD3NoC8MQ1M8fNiWFhvzU58=
Subject key identifier:   31:EB:27:5D:A1:57:B6:EC:20:07:C2:45:D0:04:67:28:5F:C1:59:CE
Authority key identifier: 14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7
Certificate issuer:       /CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
Certificate serial:       019EC41363B69478BC9A00884131C69E4C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
Manifest number:          16
Signing time:             Sun 14 Jun 2026 03:01:05 +0000
Manifest this update:     Sun 14 Jun 2026 03:01:05 +0000
Manifest next update:     Mon 15 Jun 2026 03:01:05 +0000
Files and hashes:         1: FGysOKrBes72Z80OqgLg_JZ3_Pc.crl (hash: LYmOr+0J8e0KvmIcWMa4rr0auaQr0a7fwzKn1UjZCC8=)
                          2: sMwIgLKNRpB1RpAtf3RJI_ymDmY.roa (hash: BKXDq8tUvCJz2+LeUi2VmO5hnXnUxOen+el/zYEKMWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:13:63:b6:94:78:bc:9a:00:88:41:31:c6:9e:4c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146cac38aac17acef667cd0eaa02e0fc9677fcf7
        Validity
            Not Before: Jun 14 03:01:05 2026 GMT
            Not After : Jun 15 03:01:05 2026 GMT
        Subject: CN=31eb275da157b6ec2007c245d00467285fc159ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:32:05:43:4e:87:96:cb:e3:b6:1d:85:63:
                    a7:66:64:25:9c:6f:0d:aa:18:ad:a8:62:4f:53:ac:
                    fd:f8:22:2e:3b:13:a0:f4:ff:c7:d3:e9:f4:64:83:
                    32:41:1e:45:cd:7b:16:fa:d3:79:7e:7a:6b:50:98:
                    f2:44:f7:14:37:92:84:aa:b6:44:45:3a:ed:79:ae:
                    6f:a9:9f:02:46:9b:c1:49:b2:2e:d0:ec:95:18:1d:
                    6d:51:5f:72:eb:55:ed:5a:95:81:4a:13:58:c4:52:
                    c0:83:54:07:5f:90:83:47:98:2b:b5:a7:33:e8:2b:
                    0e:22:00:37:cb:a1:4d:5c:3a:86:55:2c:87:44:f9:
                    42:9c:11:3d:05:eb:63:e8:5c:8a:dd:c5:1f:76:54:
                    61:a4:e8:a0:0e:ec:40:fe:87:32:92:bd:90:c2:0b:
                    64:dc:85:41:95:0c:73:b3:1f:c2:e3:3c:26:d0:5d:
                    b3:69:d0:d4:81:77:b2:27:28:f5:be:22:f2:36:89:
                    c2:13:2f:09:f3:71:07:4d:9f:fe:8e:61:6c:26:af:
                    94:00:21:25:ea:2b:16:a8:1e:47:31:d9:73:2f:56:
                    c3:b6:73:9c:56:eb:99:65:32:4b:bc:35:c0:84:8c:
                    2a:d4:7d:7a:33:53:d1:1f:af:94:70:16:a6:08:db:
                    a0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EB:27:5D:A1:57:B6:EC:20:07:C2:45:D0:04:67:28:5F:C1:59:CE
            X509v3 Authority Key Identifier:
                keyid:14:6C:AC:38:AA:C1:7A:CE:F6:67:CD:0E:AA:02:E0:FC:96:77:FC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGysOKrBes72Z80OqgLg_JZ3_Pc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/a43238-0d94-4697-9338-c211a27a7c27/1/FGysOKrBes72Z80OqgLg_JZ3_Pc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0d:79:5c:59:3b:ef:68:ff:19:7a:a9:1d:3a:79:ac:e8:6d:
         cb:83:41:e0:8c:ea:a7:86:9f:a9:c2:4c:3d:17:d1:be:b8:64:
         f6:9b:4a:68:be:3d:5f:46:5a:16:70:6d:0f:16:53:ee:8c:eb:
         d6:1f:62:e9:26:08:7b:39:70:34:a5:19:5a:44:9f:ae:36:41:
         ec:f4:b7:d2:a8:00:66:e9:4f:31:38:7b:82:14:9d:70:a2:35:
         af:25:99:a6:35:54:17:fa:c2:63:61:c3:78:b7:77:d4:a2:ea:
         d8:31:62:72:0c:b8:f6:44:87:3c:52:8a:21:9e:45:da:89:6b:
         93:b6:62:1a:74:59:78:5a:b4:c3:dc:20:32:be:d6:77:2e:82:
         67:68:38:42:b9:f6:5e:c1:ac:16:12:ae:bf:7e:09:75:40:2f:
         09:b3:98:6e:4a:e0:2e:af:cc:84:32:5e:ac:25:49:84:b7:48:
         fd:13:10:b5:fc:45:ac:14:df:5e:31:a2:cd:ce:b1:df:a1:73:
         fa:76:77:03:12:d8:33:fd:d5:ef:27:3b:24:ee:2c:bc:5d:bb:
         dc:4a:0f:db:28:a9:90:cf:07:31:58:6a:7c:24:a3:b4:1d:0a:
         04:b9:85:e9:f2:12:0f:be:7a:10:dd:f0:70:44:6a:85:81:a6:
         41:0e:9c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:31:58 2026 by rpki-client