Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
File:                     FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft (raw, json)
Hash identifier:          uga7eKPH4eV8yUeUMRMT406tQiOZ1Pmd41EChBzie5o=
Subject key identifier:   91:6D:27:50:26:C6:3E:BC:2F:C4:EF:A6:A2:73:2B:9E:2B:D0:70:0B
Authority key identifier: 15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84
Certificate issuer:       /CN=159ba29a75ae1325c0382fb484b321d68d154384
Certificate serial:       019FAA8756B042AD2C6DBDE5EFB25552A0FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
Manifest number:          0D03
Signing time:             Tue 28 Jul 2026 21:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:24 +0000
Files and hashes:         1: FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl (hash: ooC+ZA3CX3CDSXgS33xp05Ebk5OZu3/THaNl/2Zax7I=)
                          2: KCeDYKcbeE9UWfctYxdAU1BZ1s0.roa (hash: YDX/bv7OMO0VUSqXGoDYDOy5fKvBcU1O+oeXxOMbVws=)
                          3: pmMHoCeiYkyuWIBqrZmK4CC1Qhs.roa (hash: qIpgZAvACZiZoj7IMOJaeVVTQ89Jj1BHX4QV5zS2blA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:56:b0:42:ad:2c:6d:bd:e5:ef:b2:55:52:a0:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159ba29a75ae1325c0382fb484b321d68d154384
        Validity
            Not Before: Jul 28 21:00:24 2026 GMT
            Not After : Jul 29 21:00:24 2026 GMT
        Subject: CN=916d275026c63ebc2fc4efa6a2732b9e2bd0700b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:d6:94:41:54:93:bb:2d:f0:88:09:58:76:
                    df:00:96:c8:6c:02:8a:48:f0:b0:bf:d9:b8:e4:eb:
                    f0:fe:4c:9b:8d:e5:b7:c8:fc:55:7d:01:67:41:08:
                    b5:b5:6e:8e:93:3c:8c:02:5e:2f:43:4f:46:91:02:
                    b6:e0:d4:ed:e8:93:ab:e6:d8:c7:79:ed:c4:c8:d7:
                    2d:45:1d:89:6c:3a:61:53:b9:07:65:c2:15:64:ef:
                    3b:a0:85:9e:52:46:41:91:33:5d:be:3a:48:fa:1a:
                    bf:08:25:37:33:32:ed:e9:b8:b0:c7:08:5c:da:9e:
                    90:15:c7:6a:70:7e:84:0a:98:f6:7a:c1:7b:bb:b1:
                    88:93:29:06:65:4e:48:66:61:3c:0e:81:08:a4:7f:
                    cb:c7:b2:27:9a:4f:8d:0e:22:6c:f9:f3:87:a7:0b:
                    ad:41:f7:cb:e6:38:f2:00:a8:f1:76:dc:61:98:68:
                    8d:9b:ce:c3:9b:9d:60:a1:86:29:80:d5:98:de:68:
                    f1:72:53:2d:9b:d0:29:ab:a7:11:d8:fb:73:95:f6:
                    c2:02:ec:12:0c:9a:72:5a:37:57:f3:ad:5f:df:4f:
                    32:84:c1:95:02:2d:3c:85:c7:ea:17:e7:2b:1f:46:
                    b5:97:30:ae:39:b2:cc:8a:d1:77:ba:39:83:c1:4d:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6D:27:50:26:C6:3E:BC:2F:C4:EF:A6:A2:73:2B:9E:2B:D0:70:0B
            X509v3 Authority Key Identifier:
                keyid:15:9B:A2:9A:75:AE:13:25:C0:38:2F:B4:84:B3:21:D6:8D:15:43:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/300195-7e7b-4e99-a52d-caf4fa072682/1/FZuimnWuEyXAOC-0hLMh1o0VQ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:9b:a3:bb:47:a6:59:0e:22:24:7c:05:50:84:a8:b4:ca:0d:
         ab:cb:8c:04:8f:d5:1a:71:7d:17:40:25:8f:95:86:e0:03:a6:
         4f:6c:d3:be:1d:9d:c6:61:64:52:82:94:86:e0:93:41:f1:bc:
         56:8f:c0:3a:6c:a5:d8:92:b1:70:cb:54:8b:cd:2b:25:46:91:
         2f:ac:3a:e2:eb:da:dd:26:a7:b2:5e:9f:90:d1:b2:7b:ee:fa:
         e3:30:26:c1:a2:f9:bf:06:ff:bd:ef:fa:01:f7:0a:23:6a:48:
         5d:4f:91:57:54:3d:c6:d8:be:26:b2:50:a9:6c:55:25:61:f5:
         4d:e3:8d:6b:4b:d8:68:d1:a5:3e:94:9e:33:f5:61:19:64:b0:
         dc:b9:ec:c8:8f:48:e4:bb:52:38:46:b5:66:e6:28:7c:07:95:
         d6:57:fd:c9:63:e8:0f:ef:ec:7e:77:c9:50:2a:f6:9b:a7:b6:
         10:60:fd:0f:dd:43:69:24:99:74:a7:1b:f4:a2:0c:d8:18:f8:
         95:76:07:7b:a6:0c:7c:e8:cb:7a:1f:a4:14:0d:7d:ec:0e:6b:
         40:f4:79:cc:2a:d3:b8:9b:5d:71:8c:35:f0:e5:03:4a:c1:28:
         66:14:72:a6:09:fc:0c:8e:fd:74:37:df:d0:a5:58:29:ef:24:
         7d:69:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:33 2026 by rpki-client