Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File:                     FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier:          iuqJdoErh4812l1u3IMqAoF+KNqTQv7Jd23DegSEoCg=
Subject key identifier:   E8:2E:33:11:3F:3C:3D:6B:BD:4F:3A:BF:6A:40:15:95:E4:18:3F:B7
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer:       /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial:       019FACE445414D8FF1AC13D195F3EAE3534B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number:          19D3
Signing time:             Wed 29 Jul 2026 08:01:08 +0000
Manifest this update:     Wed 29 Jul 2026 08:01:08 +0000
Manifest next update:     Thu 30 Jul 2026 08:01:08 +0000
Files and hashes:         1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: THumDZel1BQVfOnjrTHWqY238LkgestX40TwSKa28lY=)
                          2: lmzI8mKK7VNK4bS0BEeEZ9whyrI.roa (hash: V1SxHQwjwN4AmdXg8rhG9lnM2vuDDx2mOA2my+gG8OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e4:45:41:4d:8f:f1:ac:13:d1:95:f3:ea:e3:53:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
        Validity
            Not Before: Jul 29 08:01:08 2026 GMT
            Not After : Jul 30 08:01:08 2026 GMT
        Subject: CN=e82e33113f3c3d6bbd4f3abf6a401595e4183fb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bb:c3:cd:1e:84:77:39:2b:cc:46:86:eb:45:
                    65:47:e9:70:5c:b5:b1:51:09:cd:d2:71:1e:04:7d:
                    4b:a8:03:52:f4:85:cb:9f:a3:78:79:cf:01:e4:50:
                    b0:27:2b:54:8e:85:63:38:a7:f9:62:99:02:de:da:
                    f4:7f:4d:65:f0:88:99:93:55:c4:64:a9:eb:08:83:
                    6a:03:44:56:fe:c5:26:b4:e7:b8:37:f3:e9:d5:76:
                    00:c3:61:c7:34:5e:02:90:78:57:ec:05:46:57:8b:
                    4f:44:3e:84:d0:f3:3b:15:2d:ab:ca:29:ea:6b:98:
                    a7:2b:32:20:79:57:7d:88:99:09:29:8b:1c:1f:b5:
                    3e:56:ca:d1:7c:e6:03:05:1b:e8:05:00:d2:c6:1a:
                    80:76:9a:48:61:f8:05:74:fd:38:ee:80:e5:85:cd:
                    6d:89:ca:ed:01:3f:d4:e4:82:2b:43:65:d3:16:8e:
                    d4:0b:27:da:56:3a:e2:30:4e:49:8f:75:9b:e9:6e:
                    be:80:8f:f3:9e:41:c2:33:2a:f3:ab:c7:24:61:e1:
                    0d:1d:6a:eb:cd:1e:ce:a3:38:49:fe:2f:4c:b9:26:
                    95:35:03:96:b0:b7:16:a1:51:4f:60:d8:fe:f3:76:
                    c0:67:3d:7f:f5:8f:5a:24:89:9b:6a:1d:f6:6f:7b:
                    26:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2E:33:11:3F:3C:3D:6B:BD:4F:3A:BF:6A:40:15:95:E4:18:3F:B7
            X509v3 Authority Key Identifier:
                keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5d:a9:75:13:a5:39:9c:89:98:82:72:73:cf:48:cc:d2:e2:
         6b:57:5b:47:5e:ff:53:f4:3b:85:22:14:08:ba:15:8c:98:f0:
         47:f7:18:c1:01:3b:c3:c4:84:93:7c:eb:5b:e1:aa:5c:4e:75:
         ed:41:a6:31:ea:ab:26:f9:4b:c9:1a:07:b2:95:8b:4c:e4:3b:
         80:c7:63:77:17:96:41:0a:bf:d7:b5:b9:0b:4c:ec:c7:e3:db:
         b4:d9:1a:f5:65:fe:1c:31:f8:68:b4:77:3f:41:60:cd:d4:07:
         d3:d4:2e:c8:7e:b3:6e:b5:49:2e:ae:64:26:8a:3e:12:42:1e:
         20:ad:1a:f7:1f:cf:5b:33:b1:6b:ed:64:8c:7e:fa:81:04:aa:
         fc:48:14:11:1b:e2:92:de:3b:92:f4:8d:bc:c1:f6:03:8e:8a:
         9d:62:32:fd:4a:d6:8b:01:48:83:e3:29:0d:8c:72:c9:89:b3:
         f3:f2:10:56:c0:4f:e0:d8:89:71:3b:99:25:72:3b:31:e8:ea:
         70:9d:e9:6c:32:76:48:cb:e0:9e:eb:17:44:39:43:e5:79:44:
         ea:f4:eb:f3:25:e7:f3:a9:e3:00:55:3e:5b:b8:fa:ec:2d:ed:
         22:54:c7:03:ba:bc:89:f7:d5:16:97:15:fe:cf:ab:06:09:e9:
         9b:93:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:40:42 2026 by rpki-client