Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
File:                     FEz3GmQFf4aSkG29men2hEB9boA.mft (raw, json)
Hash identifier:          5VlbCaM85nh95C42oNI/UbY1TBjFObmBlM93OJ0axGE=
Subject key identifier:   56:C1:AD:82:2E:96:A6:15:4E:22:CF:BB:87:CA:7F:3F:36:42:1B:78
Authority key identifier: 14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80
Certificate issuer:       /CN=144cf71a64057f8692906dbd99e9f684407d6e80
Certificate serial:       019ED4CF9F8C17D285B60AECE81C7F157FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
Manifest number:          0107
Signing time:             Wed 17 Jun 2026 09:00:36 +0000
Manifest this update:     Wed 17 Jun 2026 09:00:36 +0000
Manifest next update:     Thu 18 Jun 2026 09:00:36 +0000
Files and hashes:         1: FEz3GmQFf4aSkG29men2hEB9boA.crl (hash: hAFh3usPAQjp4O1g1eK0UCjNhQch6/7ITSYkBEiqd7U=)
                          2: V7cyqG-pYyAMULVUem9DUD4mh5Y.roa (hash: NfpPyZF7G0X8PIMTTllt/U0ECaL4KgW7SFDL7u8msig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 08:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:cf:9f:8c:17:d2:85:b6:0a:ec:e8:1c:7f:15:7f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144cf71a64057f8692906dbd99e9f684407d6e80
        Validity
            Not Before: Jun 17 09:00:36 2026 GMT
            Not After : Jun 18 09:00:36 2026 GMT
        Subject: CN=56c1ad822e96a6154e22cfbb87ca7f3f36421b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:61:43:e4:5e:72:a8:f9:5a:e6:c7:23:1f:01:
                    d9:b4:7c:69:75:b1:30:cd:78:cf:5b:48:82:7f:a4:
                    86:2f:44:cf:3d:20:18:39:22:3d:3c:4d:90:68:d3:
                    ac:c2:e9:fd:54:1b:dc:11:48:04:17:54:57:c0:ff:
                    59:88:06:b7:0a:0e:04:96:56:bf:8b:12:40:c6:45:
                    85:7f:01:dc:95:e4:81:af:03:cb:f1:fb:ff:4e:9d:
                    5e:ac:96:6f:b3:8d:6b:ed:fa:9d:ad:6b:77:a2:08:
                    7e:40:06:cd:7a:3d:fd:7a:6b:24:a5:a9:ee:26:b4:
                    db:cc:d9:21:f7:e1:8d:85:84:bf:4e:a3:bc:dc:09:
                    39:59:83:4f:1d:4b:54:e6:83:62:f8:a6:41:51:b5:
                    15:9e:94:7d:14:f4:34:36:0c:32:6a:16:55:5c:07:
                    37:d4:fe:84:2c:3a:58:d2:11:5a:0f:48:95:fa:82:
                    3d:89:bf:4e:6c:98:ec:1a:14:4f:48:e3:cb:3d:b3:
                    e3:b3:98:d4:db:cc:ac:7d:9e:cd:4f:d7:cb:ea:59:
                    81:26:11:45:de:6b:5a:ff:41:8d:6b:29:f1:fe:a6:
                    43:9c:b2:ec:52:00:cb:b0:cd:18:e5:d9:85:eb:73:
                    5c:85:ee:aa:d9:3e:d4:f0:23:6f:a0:b3:76:8b:01:
                    11:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C1:AD:82:2E:96:A6:15:4E:22:CF:BB:87:CA:7F:3F:36:42:1B:78
            X509v3 Authority Key Identifier:
                keyid:14:4C:F7:1A:64:05:7F:86:92:90:6D:BD:99:E9:F6:84:40:7D:6E:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEz3GmQFf4aSkG29men2hEB9boA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/140d04-cafb-46e3-8cfa-b05cde93d8e5/1/FEz3GmQFf4aSkG29men2hEB9boA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:18:c7:80:d0:f1:cf:8b:93:e5:f4:76:0d:b2:b0:da:f9:4a:
         79:81:bb:19:d5:03:aa:eb:38:2d:ad:1d:72:ec:25:9c:3c:3f:
         a2:aa:0a:b0:b9:4e:70:69:a0:05:bd:a7:cf:14:55:46:39:6e:
         31:87:1b:d5:09:cc:d5:95:62:c0:b8:64:5f:32:98:97:f4:5e:
         ba:c4:6a:08:2d:e8:da:0a:5c:af:64:19:26:5c:46:81:c3:63:
         73:cb:6d:e2:b2:d3:69:35:a1:31:07:6e:b9:2b:13:5e:e3:dc:
         3b:a6:3e:2e:f8:e7:67:2b:af:d7:8a:21:08:01:ea:59:a7:6d:
         71:a7:d2:c7:c7:7c:c9:04:81:37:39:4d:b8:6a:ac:de:d0:e8:
         38:43:8f:48:74:78:c6:64:8e:a8:26:35:25:ca:34:a2:7b:02:
         dd:a5:0d:c9:1c:3c:1a:58:d0:91:1e:6b:ca:0f:52:05:39:c0:
         d6:66:4c:36:80:ca:36:82:ac:b0:98:60:57:af:6c:89:6e:bd:
         4b:33:aa:e2:f1:1d:5f:75:e8:27:d7:4b:26:b9:50:2c:73:d1:
         81:b9:09:10:46:a0:29:d9:c8:54:92:20:23:d4:1a:1b:30:fd:
         c3:a0:fb:4c:ee:40:43:cf:43:e8:0a:e2:c5:32:58:e7:54:3e:
         4e:4a:c3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:38:36 2026 by rpki-client