Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
File:                     FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json)
Hash identifier:          6MC8yfjwCgteZ++lFzp9cBOW8Dc2uMUrgzYQZ/oWCQc=
Subject key identifier:   56:3A:42:71:10:0F:7F:51:55:8A:0A:E6:C8:07:24:3C:7D:51:8E:19
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Certificate issuer:       /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial:       019FAC08713AD43B1FA8135CAA72D3EAEB1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
Manifest number:          19DA
Signing time:             Wed 29 Jul 2026 04:01:02 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:02 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:02 +0000
Files and hashes:         1: BL9BKwYvvr4PQi4Olmvs_SJfdIU.roa (hash: PQRLVCa1vMzlo4kwd2qwNYT39XsjM74Jew0dEax8fpk=)
                          2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: 3GC3elj8Nf9F8jvq65xRVe9x+u/aVqoqoE+cdhg3L+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:71:3a:d4:3b:1f:a8:13:5c:aa:72:d3:ea:eb:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
        Validity
            Not Before: Jul 29 04:01:02 2026 GMT
            Not After : Jul 30 04:01:02 2026 GMT
        Subject: CN=563a4271100f7f51558a0ae6c807243c7d518e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:83:2a:fe:bf:8e:ba:df:f1:3c:11:4d:50:
                    0c:4b:e6:57:c5:14:49:17:d1:48:19:da:52:d2:bf:
                    db:b9:00:7e:2d:8a:90:1b:3e:1b:2e:ac:ed:3d:03:
                    c8:cb:59:44:66:2b:60:fa:eb:9f:b2:39:a7:63:13:
                    8b:ed:cd:5d:26:a2:2a:90:ca:8c:08:9c:f7:c3:48:
                    ed:e1:bf:0f:aa:b3:3f:6b:5f:b7:8b:96:34:a7:66:
                    2d:5d:ee:49:dd:75:2f:2b:62:eb:a1:ae:34:03:62:
                    9b:d9:90:fa:ee:f3:54:95:0c:49:45:a5:83:e0:30:
                    db:f8:1d:6c:3a:85:11:43:aa:62:d0:b4:0a:37:02:
                    51:5c:53:88:dd:f8:38:08:4b:3f:f2:e6:d7:57:d2:
                    cc:f0:b3:8c:6b:a8:b9:56:f2:8d:2f:26:64:b2:a7:
                    c1:d1:32:3f:0e:79:7c:5a:9d:f6:38:1d:ae:c0:ce:
                    ca:f2:9d:8b:07:d8:b1:d5:e9:d9:7e:bc:f1:db:85:
                    6c:a9:0d:8c:12:1d:3b:2b:e4:fb:31:0b:4e:f6:83:
                    77:cf:0f:a7:d8:a8:1b:0b:b2:6b:d9:27:56:b4:57:
                    74:71:0f:43:65:e2:bd:cc:83:9d:69:f3:5c:a9:76:
                    74:9f:41:89:51:59:1d:42:f7:ee:01:b5:0e:5d:30:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3A:42:71:10:0F:7F:51:55:8A:0A:E6:C8:07:24:3C:7D:51:8E:19
            X509v3 Authority Key Identifier:
                keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:61:e3:f1:ba:ec:a2:65:ab:3e:a4:60:18:77:ca:3e:f2:00:
         59:f6:07:f8:b9:6a:ab:20:50:fa:89:0f:b3:0e:ba:12:13:7a:
         b4:5e:97:00:86:7f:65:56:59:f3:5d:18:d0:f0:24:e9:2d:0a:
         16:af:69:37:16:ea:ea:d9:8d:5b:cb:f8:75:d0:a0:89:d9:09:
         f7:be:59:26:62:0b:17:1a:8c:c4:46:bf:f1:a6:f7:d8:2f:0c:
         3b:d3:2a:67:ec:9f:ab:f3:f7:1e:73:9c:7a:64:5a:fe:95:01:
         67:87:34:d6:42:d3:b1:a7:29:a6:b8:46:c1:a3:f6:69:51:64:
         34:ec:7d:91:91:bf:6c:be:77:ed:2a:fb:8f:8a:c6:37:27:fa:
         cd:2c:45:e2:2c:1d:1e:cf:37:2e:30:01:37:01:b5:5f:d5:6c:
         0e:a5:65:ae:2f:f2:ac:2e:02:8b:ef:a4:61:60:6c:41:8f:82:
         a5:15:20:c7:f4:c2:6b:53:82:12:5d:b3:01:83:13:4b:36:a9:
         56:fa:3a:e1:c7:34:41:e7:50:f0:fe:61:67:af:2d:72:b9:c7:
         25:68:0d:a2:73:e9:5d:c5:08:a0:16:ee:ca:7d:da:af:54:89:
         00:88:9e:70:ba:4d:75:d2:f4:cc:13:0d:de:fe:e0:ec:71:1b:
         37:be:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:34:10 2026 by rpki-client