Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          nVqG8rMOz2OLC0GQNY7BvTD0cIrPVE3VyARRzu1vVlM=
Subject key identifier:   5F:E5:A1:66:B3:32:10:E3:10:F2:D3:73:B5:7B:A8:F1:C7:52:89:F0
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       019FAB2BFFE8AAF7039D8789B8E698BB44CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          0FCB
Signing time:             Wed 29 Jul 2026 00:00:15 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:15 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:15 +0000
Files and hashes:         1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: U14QjBh266PeDRfKA6UmnG2ftzPdfwgq2yM1/gAh++M=)
                          2: KDLd_3rPD976SC3XcGSVNGzbbrw.roa (hash: 9uOq1GB8z5yH6EUyG7/81m/WIFx1QPWTnjtsr+U7cVg=)
                          3: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
                          4: Sm4dMxxnP8iPlpaArNe_lrYOoWs.roa (hash: CxwMb0XJuXM900emiizD6nilfu0y7bF1zGc6ZqIFhXo=)
                          5: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2b:ff:e8:aa:f7:03:9d:87:89:b8:e6:98:bb:44:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Jul 29 00:00:15 2026 GMT
            Not After : Jul 30 00:00:15 2026 GMT
        Subject: CN=5fe5a166b33210e310f2d373b57ba8f1c75289f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:74:cf:2d:79:bd:86:fe:42:a3:d4:1e:fb:a4:
                    46:7c:f5:71:41:2a:fd:6a:03:d7:a6:e5:4a:2f:67:
                    27:eb:7c:47:db:77:e7:e7:13:90:9f:70:e6:f9:26:
                    f3:06:5c:8e:47:d5:ae:14:5c:31:85:37:20:41:f8:
                    9e:14:b3:9d:83:26:cd:0e:07:25:e7:c9:83:4c:b2:
                    f0:5c:34:92:5c:9d:91:6b:9b:22:67:90:1b:23:18:
                    c4:14:d5:61:e0:3d:95:fb:7b:00:68:11:51:83:71:
                    03:6a:17:b1:39:71:50:92:39:9c:a2:3d:4c:39:74:
                    7b:51:56:9b:03:b4:2e:ec:53:74:db:e2:01:e3:a3:
                    9a:bd:76:54:5e:fc:2b:da:33:2f:33:ae:b8:ca:36:
                    03:d7:43:83:b5:47:12:d9:56:f2:7a:1e:51:45:9e:
                    04:53:90:f8:b9:ec:24:37:5c:6c:1e:62:a6:68:05:
                    35:fc:e9:b8:be:b1:b6:71:28:96:89:51:73:cb:95:
                    5d:04:e3:51:b9:5d:93:aa:00:76:18:74:c9:bd:3c:
                    04:22:e5:ec:a2:cd:67:b8:8d:bc:21:bd:3e:2f:1a:
                    8c:4c:c7:44:0a:a5:be:0b:ce:a1:07:1e:db:61:66:
                    42:6f:03:ff:28:d3:f8:93:94:4e:43:40:51:6b:92:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E5:A1:66:B3:32:10:E3:10:F2:D3:73:B5:7B:A8:F1:C7:52:89:F0
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:3d:3c:8d:07:94:87:da:85:d3:c0:97:36:23:35:e8:f2:d4:
         28:1c:2e:34:45:cf:a1:f6:a5:16:41:a6:3e:43:41:a8:af:96:
         13:47:a3:c0:d2:20:79:6d:70:70:e9:d0:c3:c7:16:91:d5:37:
         f1:8d:04:48:7b:d5:13:14:c8:66:ec:d5:33:a0:f9:3d:30:7f:
         a7:bf:42:1d:92:82:e3:48:e6:75:76:18:96:cb:3f:bc:2d:62:
         88:cc:c6:0f:64:7c:4d:5d:bc:d6:e7:b0:30:9f:f6:16:4b:ac:
         f8:bf:02:04:42:28:33:92:31:ef:a4:a6:b6:7d:1f:cc:39:78:
         5f:f2:c2:ff:cc:d9:ba:74:d5:93:89:0c:c8:3d:83:31:69:45:
         98:10:ef:c2:f4:e2:1a:4f:41:5b:88:fc:bd:a9:60:ac:6a:b2:
         5e:c2:ad:a0:92:d7:9a:7b:22:ab:33:0b:ca:31:0e:f4:40:59:
         08:d3:35:ca:ff:1c:87:ab:4b:bd:3f:79:18:ef:a7:89:a2:4c:
         3c:b0:50:65:9c:a3:40:fe:b5:e5:7d:d5:ed:a9:34:ae:9b:40:
         4c:de:57:a4:1e:d0:64:e4:a8:c1:34:56:a2:70:6f:b8:d5:44:
         c8:29:09:ec:db:28:9f:5f:db:a5:d2:80:e0:31:d3:d0:0f:78:
         77:93:35:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:28:45 2026 by rpki-client