Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
File:                     FL85E5txDE9yN-39iFGGVa85wyM.mft (raw, json)
Hash identifier:          ccpetw9wEVOH+0Ue2kDLBuAKAynBjlZXeT2iPcAnstM=
Subject key identifier:   29:FE:67:4A:96:0E:DD:A0:BB:CE:C6:EB:27:98:F4:71:8E:DC:92:90
Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23
Certificate issuer:       /CN=14bf39139b710c4f7237edfd88518655af39c323
Certificate serial:       019D9A06D4EACF385C240043B42196377D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
Manifest number:          0EB9
Signing time:             Fri 17 Apr 2026 06:00:32 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:32 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:32 +0000
Files and hashes:         1: FL85E5txDE9yN-39iFGGVa85wyM.crl (hash: QmYjIGvd+Pz962Vps+3lqCScW17LLuTSQUmN1+rvsr8=)
                          2: KDLd_3rPD976SC3XcGSVNGzbbrw.roa (hash: 9uOq1GB8z5yH6EUyG7/81m/WIFx1QPWTnjtsr+U7cVg=)
                          3: RnUS1igSJL82HjX33CCsU61QZck.roa (hash: Ca4C5GBPcPOUxC7vkHsVjTSt9X2mkmWbGHVff1pumQA=)
                          4: Sm4dMxxnP8iPlpaArNe_lrYOoWs.roa (hash: CxwMb0XJuXM900emiizD6nilfu0y7bF1zGc6ZqIFhXo=)
                          5: nenXOTdR_MN811e1s9Lg1rInHxY.roa (hash: hyWjywUgqQpYVmd438IBWEVlqHt+CxuJlbA1x1JMEic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:d4:ea:cf:38:5c:24:00:43:b4:21:96:37:7d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323
        Validity
            Not Before: Apr 17 06:00:32 2026 GMT
            Not After : Apr 18 06:00:32 2026 GMT
        Subject: CN=29fe674a960edda0bbcec6eb2798f4718edc9290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:05:19:96:40:99:1d:2f:42:f4:91:00:c1:
                    6d:24:c5:0e:6c:fb:69:4d:bb:0f:a4:cd:98:32:be:
                    f9:84:22:02:da:e8:b2:7a:a7:68:da:c1:f5:73:97:
                    c7:73:ed:e0:dc:f1:30:3f:ac:b4:df:1c:ae:0e:a0:
                    04:50:be:1f:45:c2:0e:8f:95:8f:4c:e7:77:b1:86:
                    52:3a:c8:cd:45:8c:25:34:35:b4:bc:fe:63:55:e7:
                    f1:bf:f9:7a:b8:7f:1c:c7:2f:7a:bb:19:98:a0:9b:
                    07:aa:ef:d4:c2:e8:b3:26:da:40:f3:8e:73:3e:ef:
                    05:05:dc:19:fd:b8:aa:93:a0:3a:c5:0c:1f:98:aa:
                    2e:60:7e:af:e9:9e:47:7a:aa:f3:25:b4:d4:10:fc:
                    93:dc:8e:b2:5b:15:9e:67:4a:36:a6:12:f6:6c:e4:
                    52:06:c8:1f:75:85:b4:1e:47:82:2f:94:e7:7d:f6:
                    97:ca:61:dd:3f:53:e4:58:51:74:44:55:a1:0a:2e:
                    17:7d:fa:79:de:03:4b:1f:56:cc:b1:48:83:9b:b3:
                    fc:ce:0e:75:73:29:6e:4b:b2:48:5d:21:d2:89:b0:
                    70:f0:ce:a9:aa:1b:6e:0e:5d:a6:4c:e7:75:72:b4:
                    11:10:9a:d1:72:13:c4:a5:3b:74:32:1b:89:78:78:
                    7a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FE:67:4A:96:0E:DD:A0:BB:CE:C6:EB:27:98:F4:71:8E:DC:92:90
            X509v3 Authority Key Identifier:
                keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:0c:4e:5f:2b:b2:08:1e:13:6a:bc:da:0e:71:b5:a5:b5:b4:
         1b:08:38:0d:78:67:d6:30:0d:99:a6:ae:e4:03:dc:9b:24:7f:
         f6:03:f9:31:06:69:90:a3:4b:60:a6:8c:3b:c2:1f:8f:38:9f:
         97:4a:04:37:79:18:93:10:35:ba:cb:fa:76:a7:e6:49:f0:eb:
         3f:e0:4c:f6:b5:2e:e9:a1:fc:d4:92:18:ee:8a:f8:7d:e1:f4:
         d1:63:0c:aa:ff:b8:5e:4e:7d:04:41:02:4d:19:71:5d:6f:89:
         6b:a0:4d:8a:1b:46:4a:e1:7f:cb:69:42:03:65:46:16:c5:fc:
         44:ee:4f:60:00:87:ca:4a:df:d1:51:a0:e1:d7:24:a9:44:6c:
         7a:23:b8:50:ba:8c:24:89:20:45:16:81:04:c7:fb:a1:09:f6:
         56:7c:17:8a:7d:c4:59:3b:f0:ca:d6:6f:d3:56:79:2e:8d:42:
         17:c0:c5:1c:13:ea:3a:f8:c6:d0:fa:bd:fe:a0:36:1e:ea:1f:
         74:9c:d8:3e:90:b6:47:3d:ff:b0:97:e0:94:8a:c3:ce:89:35:
         c7:49:a6:14:37:4d:2f:74:16:05:2c:72:d0:df:e9:95:6e:ae:
         47:2d:23:4c:62:a1:f8:fe:93:36:38:13:03:2f:94:9c:8c:47:
         aa:7d:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:40 2026 by rpki-client