Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
File:                     FK__4H7yluyM0lK8sgiLG6qPur0.mft (raw, json)
Hash identifier:          OF4GBypmvjoEaOF/wFvkEifdh9nm9OpiWNXLwnc7hpg=
Subject key identifier:   EB:9C:58:B4:3F:A1:61:43:A4:B8:D9:A4:66:B1:28:5A:37:70:A4:6D
Authority key identifier: 14:AF:FF:E0:7E:F2:96:EC:8C:D2:52:BC:B2:08:8B:1B:AA:8F:BA:BD
Certificate issuer:       /CN=14afffe07ef296ec8cd252bcb2088b1baa8fbabd
Certificate serial:       019EC1B733520CE43A851B5B944897B89791
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
Manifest number:          D3
Signing time:             Sat 13 Jun 2026 16:01:09 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:09 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:09 +0000
Files and hashes:         1: FK__4H7yluyM0lK8sgiLG6qPur0.crl (hash: WMxE1w++OdcnfEV2UZdVkYhBvapw+31WfzHarcdvc8I=)
                          2: QpgRqR4ONpEAldJV9RdLVieuB30.roa (hash: O7WrNb/BN4tdedokbnfczoEsP+osybSj8/C29gRLRWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:33:52:0c:e4:3a:85:1b:5b:94:48:97:b8:97:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14afffe07ef296ec8cd252bcb2088b1baa8fbabd
        Validity
            Not Before: Jun 13 16:01:09 2026 GMT
            Not After : Jun 14 16:01:09 2026 GMT
        Subject: CN=eb9c58b43fa16143a4b8d9a466b1285a3770a46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:dd:f3:8c:d7:99:ab:17:d4:67:d7:8c:09:
                    68:7b:d9:f1:77:cf:a8:a4:87:95:58:12:6a:ff:09:
                    23:0f:aa:4d:db:26:c0:44:51:f3:ca:af:f8:90:a8:
                    b9:13:05:0a:38:80:b5:59:9b:3a:98:c8:08:2c:e9:
                    39:43:52:bb:33:58:63:66:75:67:93:47:fe:8d:1b:
                    9c:40:4f:bf:17:0d:9b:78:24:68:ee:62:df:f7:f4:
                    e6:69:54:aa:20:c8:18:cc:51:cb:04:75:ec:cf:d6:
                    55:99:d3:66:82:e0:24:f9:f0:78:cb:d7:74:16:17:
                    da:5e:69:3a:1c:95:de:c9:14:52:52:36:03:4e:17:
                    e3:32:d2:00:a5:cc:be:43:09:8a:9b:61:56:6f:63:
                    89:26:87:ec:84:00:31:67:d1:0d:d1:4c:10:3b:72:
                    b6:dd:5e:ae:f8:2b:f9:92:11:3b:00:16:ed:c9:f9:
                    fb:4b:88:da:62:9b:d9:e8:aa:32:e1:97:8a:d0:2c:
                    6f:56:cd:c7:0a:07:51:36:aa:e9:b7:b1:01:03:c6:
                    01:0f:3e:bc:f8:3f:b0:42:8b:2d:2a:0d:36:6a:7a:
                    02:df:a0:7d:92:06:93:81:ec:89:b2:02:b7:e2:95:
                    9e:6a:49:77:8a:fc:4a:92:cd:05:27:3f:17:94:e6:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9C:58:B4:3F:A1:61:43:A4:B8:D9:A4:66:B1:28:5A:37:70:A4:6D
            X509v3 Authority Key Identifier:
                keyid:14:AF:FF:E0:7E:F2:96:EC:8C:D2:52:BC:B2:08:8B:1B:AA:8F:BA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK__4H7yluyM0lK8sgiLG6qPur0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/b03a50-ecc9-4631-be3e-75254e8dc117/1/FK__4H7yluyM0lK8sgiLG6qPur0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e4:1a:95:d0:ec:2b:f4:07:28:04:7c:28:e0:de:bc:b6:f8:
         86:ac:a1:1d:03:cf:44:1f:3f:98:12:00:71:c2:12:9f:c6:fb:
         26:a9:da:33:dd:fc:82:ec:07:b2:13:e3:ff:42:65:a8:4c:22:
         9b:9d:50:7e:8e:8d:64:4d:dc:e9:34:09:17:f9:c8:2a:39:4d:
         77:c3:95:b0:ef:6b:d7:3e:da:90:55:31:f5:0c:af:d8:9f:d8:
         99:ef:a0:16:f3:69:96:fa:fd:f9:ef:bb:47:57:d3:f3:0d:70:
         6f:0a:c2:c0:6c:c8:18:2a:2a:db:f9:1d:3e:75:03:03:71:3a:
         f4:79:44:c4:64:7c:5a:be:ec:e0:d3:31:16:e4:50:ad:a2:ef:
         1e:8a:fc:ca:d0:ae:e2:22:75:59:bd:4d:30:d4:db:fe:a6:77:
         9e:72:f3:b1:29:d5:ff:56:0a:fd:14:24:54:3b:d5:a1:07:b6:
         73:66:21:82:2d:c9:e8:c9:df:c9:ac:7e:d9:fc:99:ee:3a:7c:
         ab:ae:31:a2:78:ed:66:d3:10:53:f6:1d:a6:6e:40:75:f5:8d:
         a1:b0:22:07:99:c6:2d:89:f6:af:c4:69:7c:a5:f6:43:9a:b1:
         8d:8c:c7:7c:e3:63:87:37:50:df:4d:35:9d:cf:27:d7:9e:38:
         08:bf:42:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BtzNSDOQ6hRtblEiXuJeRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWZmZmUwN2VmMjk2ZWM4Y2QyNTJiY2IyMDg4YjFiYWE4
ZmJhYmQwHhcNMjYwNjEzMTYwMTA5WhcNMjYwNjE0MTYwMTA5WjAzMTEwLwYDVQQD
EyhlYjljNThiNDNmYTE2MTQzYTRiOGQ5YTQ2NmIxMjg1YTM3NzBhNDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEfd84zXmasX1GfXjAloe9nxd8+o
pIeVWBJq/wkjD6pN2ybARFHzyq/4kKi5EwUKOIC1WZs6mMgILOk5Q1K7M1hjZnVn
k0f+jRucQE+/Fw2beCRo7mLf9/TmaVSqIMgYzFHLBHXsz9ZVmdNmguAk+fB4y9d0
FhfaXmk6HJXeyRRSUjYDThfjMtIApcy+QwmKm2FWb2OJJofshAAxZ9EN0UwQO3K2
3V6u+Cv5khE7ABbtyfn7S4jaYpvZ6Koy4ZeK0CxvVs3HCgdRNqrpt7EBA8YBDz68
+D+wQostKg02anoC36B9kgaTgeyJsgK34pWeakl3ivxKks0FJz8XlOZXaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOucWLQ/oWFDpLjZpGaxKFo3cKRtMB8GA1UdIwQY
MBaAFBSv/+B+8pbsjNJSvLIIixuqj7q9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktfXzRIN3lsdXlNMGxLOHNnaUxHNnFQdXIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9iMDNhNTAtZWNjOS00NjMxLWJlM2Ut
NzUyNTRlOGRjMTE3LzEvRktfXzRIN3lsdXlNMGxLOHNnaUxHNnFQdXIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9iMDNhNTAtZWNjOS00NjMxLWJlM2UtNzUyNTRlOGRjMTE3
LzEvRktfXzRIN3lsdXlNMGxLOHNnaUxHNnFQdXIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOQaldDs
K/QHKAR8KODevLb4hqyhHQPPRB8/mBIAccISn8b7JqnaM938guwHshPj/0JlqEwi
m51Qfo6NZE3c6TQJF/nIKjlNd8OVsO9r1z7akFUx9Qyv2J/Yme+gFvNplvr9+e+7
R1fT8w1wbwrCwGzIGCoq2/kdPnUDA3E69HlExGR8Wr7s4NMxFuRQraLvHor8ytCu
4iJ1Wb1NMNTb/qZ3nnLzsSnV/1YK/RQkVDvVoQe2c2Yhgi3J6Mnfyax+2fyZ7jp8
q64xonjtZtMQU/Ydpm5AdfWNobAiB5nGLYn2r8RpfKX2Q5qxjYzHfONjhzdQ3001
nc8n1544CL9CwQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:34 2026 by rpki-client