Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          IyWDLjE1ITUghEXKHv+6PBhwhEn4x6XEgwqS31dZt/M=
Subject key identifier:   40:E8:66:08:23:C6:49:36:2B:C3:85:00:A5:3B:AB:F3:D9:43:C2:56
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       019EC1EE47CDAA9699810455D86CB7717C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          0642
Signing time:             Sat 13 Jun 2026 17:01:19 +0000
Manifest this update:     Sat 13 Jun 2026 17:01:19 +0000
Manifest next update:     Sun 14 Jun 2026 17:01:19 +0000
Files and hashes:         1: btFTz2r_BesZJN2u_oCmJMOAwZk.roa (hash: 0LBuX7o2jR543EQsgYTaLGtgZY2hOEDSxDyt/nU6qa0=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: QuNMgkt4fjGu/uV9IW5NskbO6RGWb1bw8W5vMiAgqe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ee:47:cd:aa:96:99:81:04:55:d8:6c:b7:71:7c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: Jun 13 17:01:19 2026 GMT
            Not After : Jun 14 17:01:19 2026 GMT
        Subject: CN=40e8660823c649362bc38500a53babf3d943c256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:45:e2:49:a2:ee:42:f6:23:8a:df:38:57:
                    42:42:03:e5:5c:a5:1f:91:fd:60:5e:43:75:bc:5b:
                    ad:f0:20:91:92:1f:75:b0:5e:d7:35:21:6b:7f:84:
                    ff:de:ef:d4:ee:3e:e3:d0:b2:9a:57:12:be:36:59:
                    12:1b:47:59:33:ce:f4:97:9b:18:93:ce:3e:57:5c:
                    47:be:12:7c:43:00:92:b1:74:53:e3:a6:b2:2e:4a:
                    c7:6b:21:f8:d6:39:9e:38:ef:4c:a7:70:32:f2:5c:
                    b8:d9:81:0a:f5:c0:d5:78:10:cc:79:85:80:51:03:
                    15:f5:2e:2e:51:dd:bc:8e:a4:15:d5:75:2a:ab:ed:
                    0b:bd:fc:82:27:e9:ee:56:f5:96:01:40:d2:f9:78:
                    2c:49:53:07:c5:0e:ac:04:ba:a8:11:f1:f0:e0:c2:
                    5b:27:1d:a4:02:f8:dd:11:cf:22:60:75:20:cf:bb:
                    3f:33:d8:3a:37:7c:2e:9a:1e:d4:82:5f:87:35:d2:
                    c2:5f:69:2a:ce:98:69:cb:85:d4:36:ba:13:c2:9a:
                    09:bb:40:7e:bf:69:ad:c1:1d:1d:e8:6c:7b:77:86:
                    87:85:0b:f6:0c:ed:59:7c:c6:b5:0c:39:8b:ce:ab:
                    2c:b1:c7:ee:95:50:10:af:12:df:ca:1d:82:90:c3:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E8:66:08:23:C6:49:36:2B:C3:85:00:A5:3B:AB:F3:D9:43:C2:56
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:41:ee:88:38:ee:4b:1c:ce:39:34:d5:51:a2:24:bc:6c:0d:
         fa:9c:d6:42:c4:01:82:bd:53:0d:09:a4:10:1d:ca:fc:ef:9a:
         95:ee:79:75:c3:f4:e3:0d:3a:d2:42:e6:26:b0:3e:83:cc:8b:
         29:65:9d:12:9b:ab:30:59:35:fd:a5:ac:fa:12:97:5d:ef:33:
         74:04:2c:70:f7:89:e5:bb:7c:7a:44:e2:e4:96:d4:cd:9f:f8:
         8f:4b:68:45:49:30:b7:50:cf:f7:5b:6f:b0:3c:2b:92:be:67:
         03:02:bc:05:e2:6f:34:75:bf:f1:33:91:cd:27:33:19:6d:ef:
         50:bc:b7:08:5b:d5:6d:57:7c:24:b4:32:5e:42:d0:4a:91:2f:
         d9:4c:76:ee:47:fd:d1:ee:10:39:b7:49:57:96:cb:47:59:8b:
         3e:af:9d:6a:3f:e1:d7:8d:5f:3e:ee:2b:d0:7f:81:3e:f7:86:
         7d:02:83:fb:df:cc:1f:ae:2f:65:22:1a:84:d5:33:da:64:39:
         0b:2f:af:30:60:4b:ea:02:6d:56:a0:ac:4b:11:8b:12:d6:74:
         eb:3e:c1:ac:ca:69:5e:db:c1:36:55:3d:b0:34:13:d0:73:c1:
         7f:ff:7b:f0:7c:b4:35:6d:ce:c4:4f:fd:1a:5e:69:e4:30:5a:
         a7:34:6d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:54:22 2026 by rpki-client