Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
File:                     FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft (raw, json)
Hash identifier:          mo1TsCtbMayJRA5WF+MZYpkWws/L8Y15IhGBJ76vZkQ=
Subject key identifier:   6A:A7:22:7E:F5:A2:0D:96:2E:C6:89:28:64:4A:8E:99:9B:83:1A:E0
Authority key identifier: 15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE
Certificate issuer:       /CN=159366259f9bae7c37337b515fa5bee05f53abce
Certificate serial:       019EC29263C6E33CB0B1633CAC157DA45CA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
Manifest number:          1248
Signing time:             Sat 13 Jun 2026 20:00:34 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:34 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:34 +0000
Files and hashes:         1: FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl (hash: mNGEj4+aO5uSvn14sFGynPXiQcF/ML3J1ZXumy3g7u4=)
                          2: exDfA3mCHQ1z62LVEBj8dbMqjBw.roa (hash: h0eFc4WnqVvrrFgk4ids9kPIM8haBt0nOdB208QxxSg=)
                          3: vhNThqSAy5954A66ZAELAQvQDDs.roa (hash: gLwZkYW6p55DWlKg23Na3S6CUGHIHQi2tyQWg7l4acM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 19:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:63:c6:e3:3c:b0:b1:63:3c:ac:15:7d:a4:5c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159366259f9bae7c37337b515fa5bee05f53abce
        Validity
            Not Before: Jun 13 20:00:34 2026 GMT
            Not After : Jun 14 20:00:34 2026 GMT
        Subject: CN=6aa7227ef5a20d962ec68928644a8e999b831ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:7e:6b:d1:5f:fe:d6:39:35:75:dd:a7:38:
                    95:70:92:3d:ba:e7:46:60:9a:b9:86:78:18:3d:f8:
                    69:90:42:5f:eb:eb:ad:69:b9:a8:e2:fd:75:ad:05:
                    8f:69:8b:05:ff:f4:75:38:34:ef:aa:26:e5:c3:c0:
                    ce:87:a1:a6:84:97:3f:1d:e4:8f:e6:8c:80:52:d2:
                    51:7e:31:51:f1:cb:34:cd:57:37:9a:3d:d4:92:c6:
                    dc:b1:b1:c9:d1:d4:da:c8:31:d7:71:11:87:05:77:
                    6f:6e:1c:a0:84:25:c6:05:52:20:d7:c6:42:e3:05:
                    cf:28:64:58:3e:af:33:90:f9:a1:3e:2f:d7:87:94:
                    ed:cb:88:99:c2:8c:76:16:c2:03:20:68:8b:4f:ba:
                    e0:8f:05:b3:17:10:df:a5:59:2d:5d:25:5b:67:8e:
                    8e:01:b4:76:c8:56:c9:11:a9:da:77:54:81:38:06:
                    98:73:37:e9:e3:f7:77:4a:ed:82:98:1f:6d:91:85:
                    88:d3:6c:f8:6f:91:e5:a7:48:57:e1:7b:d5:22:66:
                    c4:1b:87:eb:ca:b8:a1:b2:c4:38:d8:22:96:a8:7d:
                    6d:e6:94:fc:6b:1c:99:5c:b3:85:4d:58:2e:04:98:
                    51:f3:01:f3:1b:4e:6f:6b:30:df:0b:1c:ea:74:ce:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A7:22:7E:F5:A2:0D:96:2E:C6:89:28:64:4A:8E:99:9B:83:1A:E0
            X509v3 Authority Key Identifier:
                keyid:15:93:66:25:9F:9B:AE:7C:37:33:7B:51:5F:A5:BE:E0:5F:53:AB:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZNmJZ-brnw3M3tRX6W-4F9Tq84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/108f45-3e70-4dac-9341-f954002f5245/1/FZNmJZ-brnw3M3tRX6W-4F9Tq84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4a:89:a9:65:17:50:99:2d:e4:e6:c0:0e:8d:16:98:97:39:
         6b:57:04:39:11:17:2f:cc:d7:59:a6:72:10:4d:63:43:d7:3d:
         59:32:c6:03:e2:8d:8c:ea:29:5f:e0:6d:0f:5e:cf:32:3f:6e:
         8c:88:7f:b5:5a:2d:3f:17:0b:14:56:5d:c5:7c:33:f6:8b:88:
         c0:34:a1:bc:80:c3:b3:0a:b4:d9:7d:5d:02:46:7f:07:75:cd:
         3d:3d:14:12:40:f0:3f:93:66:3c:41:be:0a:02:96:73:f2:58:
         57:c4:9a:8a:d0:2a:63:1a:70:bf:47:98:2c:15:76:77:19:67:
         bd:90:02:43:72:05:87:f8:c0:1b:25:40:28:fc:93:eb:45:bf:
         da:4c:22:80:5f:4d:b4:50:ab:ff:17:1e:c0:84:98:7c:f3:27:
         35:f2:5f:ab:6f:b5:98:31:1e:c7:6b:c1:28:85:7d:b5:ca:60:
         c9:be:75:46:61:8e:01:8f:f4:e7:b5:14:42:2c:e8:22:36:a4:
         f4:f6:fa:fb:d8:bb:c5:17:52:5a:dc:ea:99:cc:75:f9:0e:4a:
         a4:63:15:1d:f7:02:0e:41:66:44:b8:9f:84:f0:a7:fd:01:eb:
         13:c9:b5:6b:a3:f3:56:38:ca:e7:0e:87:c6:7b:7d:26:e2:cd:
         6a:07:2c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:24 2026 by rpki-client