Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          RrH01mU0/HNWtgn6v9uNo5En1dZyUEHHAV46Rra4erE=
Subject key identifier:   F8:82:C2:E5:F5:21:31:25:80:7D:7C:92:E3:7D:8C:2F:AC:56:E4:2C
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       019EBF5ADBBC8AA11132F1A2AFE7B05139E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          09B6
Signing time:             Sat 13 Jun 2026 05:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:03 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: qMzsQZ9LKKh1KSo2BNvj3VwBvuMju1egj8asGwZwWlg=)
                          2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
                          3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
                          4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
                          5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
                          6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
                          7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:db:bc:8a:a1:11:32:f1:a2:af:e7:b0:51:39:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Jun 13 05:01:03 2026 GMT
            Not After : Jun 14 05:01:03 2026 GMT
        Subject: CN=f882c2e5f5213125807d7c92e37d8c2fac56e42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c1:c6:28:ca:94:34:5d:53:82:c2:1c:45:2d:
                    bf:e0:23:b5:74:0e:cb:06:3e:b5:9d:c0:83:d6:ee:
                    00:bb:b1:77:9b:f2:f6:34:fa:d6:55:c3:bf:e1:e9:
                    03:fb:b9:b8:e7:35:37:65:0b:13:b6:17:a5:65:a6:
                    fa:fb:c9:a8:f9:8b:06:de:55:f1:cb:9f:6b:d0:8e:
                    33:ee:7e:f8:a4:34:bf:42:ff:76:b0:84:88:5e:8d:
                    30:69:df:13:3a:93:56:56:bd:48:63:b9:6d:54:57:
                    91:69:a0:01:ce:35:1f:3d:da:fd:5a:97:15:3c:7d:
                    74:a7:8f:2e:fd:4e:4e:f6:89:24:41:5d:6d:2a:26:
                    a5:27:f1:f9:f2:6b:6e:76:fb:6b:2b:b2:94:b5:1d:
                    7b:58:42:6f:fd:82:71:88:f6:5e:12:c9:8b:a5:db:
                    8a:2e:27:fd:f8:8d:10:44:b2:a8:66:ec:16:f5:f4:
                    64:59:98:bb:c6:96:0a:d8:14:a8:09:91:f3:a3:0f:
                    fc:40:e9:6d:a7:3e:a5:ea:13:a5:75:4f:08:62:37:
                    5d:8d:4e:26:c2:2f:88:7f:64:73:74:93:ae:f1:d5:
                    82:c1:77:18:72:da:8c:c8:eb:52:bb:b2:db:70:bd:
                    bd:05:c3:0b:34:68:5b:0b:83:d0:20:14:2d:7c:18:
                    74:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:82:C2:E5:F5:21:31:25:80:7D:7C:92:E3:7D:8C:2F:AC:56:E4:2C
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:42:3b:5e:e1:87:de:94:5f:83:f8:66:9b:19:3e:61:f8:47:
         7e:84:89:a1:c5:8c:31:84:57:fc:01:16:9d:d2:ea:e5:37:d2:
         16:4d:8c:db:71:a6:25:22:3d:04:80:fd:f9:b0:9a:86:d7:a2:
         a0:e0:a1:d0:b8:a0:52:f2:e4:f8:52:97:c7:50:b0:d4:19:35:
         dc:b4:54:b3:bf:d5:be:2d:bd:bd:62:8c:f4:18:5c:17:8c:6f:
         57:41:2b:a3:bc:ab:09:61:51:02:b9:38:43:11:e7:fc:dd:d9:
         52:5f:1f:e9:83:39:5f:4c:ee:ab:0e:b9:22:b1:87:0a:00:47:
         44:6e:08:c4:85:7e:a5:26:52:00:10:28:c7:be:cc:56:25:01:
         2c:86:d1:35:6a:89:9b:5d:b4:cd:fc:e2:0f:8b:01:33:93:f8:
         bb:37:e9:48:48:94:f7:7a:be:a1:97:f6:e0:6d:f7:f7:c3:4d:
         f2:31:f9:db:0a:e8:b8:a4:40:f8:e8:00:23:50:e8:68:f0:b8:
         04:bb:25:5b:2d:57:39:b3:06:8c:9e:4e:1d:3d:89:76:22:77:
         0b:06:61:d9:b3:34:e6:81:40:0b:a7:82:b5:76:8f:57:40:b4:
         06:36:40:ae:e6:e5:b1:ed:d7:4c:dc:45:da:54:07:6d:af:20:
         9c:8e:a7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:56 2026 by rpki-client