Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
File:                     FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft (raw, json)
Hash identifier:          YIiNcD5IifYh/vgdY81TSUFN3mUVVlVxSvUJ0fQML4Y=
Subject key identifier:   94:42:89:1C:D5:49:BA:8B:2A:22:52:FA:22:CC:41:AC:52:0F:2D:89
Authority key identifier: 14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A
Certificate issuer:       /CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
Certificate serial:       019FA93E14941FF274388C2E7B6B70E6FB4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
Manifest number:          0CF4
Signing time:             Tue 28 Jul 2026 15:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:45 +0000
Files and hashes:         1: Afr0mV20pbPHdZnpWYatELuCEvo.asa (hash: owfqUhE14A6UilAazSw974fh+e2NlWVeQw7fmwItRO4=)
                          2: FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl (hash: M1j9WyGsRMsIn4F1EzwaNiWnxV4MseLWoRr2F45I/Ps=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:14:94:1f:f2:74:38:8c:2e:7b:6b:70:e6:fb:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c735259fdb7b83f277adf12d08cc98b5a6100a
        Validity
            Not Before: Jul 28 15:00:45 2026 GMT
            Not After : Jul 29 15:00:45 2026 GMT
        Subject: CN=9442891cd549ba8b2a2252fa22cc41ac520f2d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9f:75:1e:9b:ea:00:30:47:38:a7:35:31:c8:
                    71:c4:55:53:93:ed:88:32:34:39:62:5f:64:54:63:
                    3f:13:3c:29:69:97:e8:9c:da:f3:25:75:00:a7:0d:
                    0d:26:67:40:d9:e7:d9:6a:f9:ca:86:b0:fa:07:96:
                    07:9b:f7:00:ec:0d:ad:bb:d3:03:e5:5d:eb:39:a2:
                    74:09:14:f9:cb:1b:ee:d4:39:f7:e9:1c:bc:e2:17:
                    20:5c:6e:b8:0a:01:77:ad:44:53:1c:e0:74:3a:a7:
                    61:e2:28:c0:39:ca:17:20:c8:c8:a1:fa:34:06:8a:
                    ea:06:7a:ac:b5:9b:d1:f4:bf:26:51:50:6c:f3:96:
                    4e:60:af:23:a8:af:bb:85:18:0d:03:bf:eb:6b:b9:
                    15:63:4c:3b:3c:f7:f4:16:c9:f8:ce:6d:fb:b7:de:
                    4f:52:ab:db:70:7d:2d:ed:61:ad:ef:77:18:cb:2f:
                    0d:23:5b:ac:e5:db:ff:95:d5:24:36:45:e9:f7:49:
                    42:65:ac:35:be:09:ef:08:f2:c2:36:31:e5:18:4f:
                    da:42:87:9d:f9:7c:3c:67:9c:7e:8a:cb:88:2a:03:
                    44:9f:af:c0:e7:42:9f:cb:c1:4c:79:ba:37:70:19:
                    4c:f6:14:bb:82:70:df:ec:be:00:17:c3:50:3c:1d:
                    24:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:42:89:1C:D5:49:BA:8B:2A:22:52:FA:22:CC:41:AC:52:0F:2D:89
            X509v3 Authority Key Identifier:
                keyid:14:C7:35:25:9F:DB:7B:83:F2:77:AD:F1:2D:08:CC:98:B5:A6:10:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMc1JZ_be4Pyd63xLQjMmLWmEAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/de2b16-fa2b-4a11-95ab-dbeaf784817a/1/FMc1JZ_be4Pyd63xLQjMmLWmEAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:bf:ac:88:9e:20:b2:27:6e:cb:ca:e6:f5:1a:71:ed:87:97:
         9a:cf:1a:4c:8f:2c:28:dd:1e:28:62:49:c6:3c:5c:40:16:2a:
         bb:52:2a:ab:d5:5b:4b:5c:8c:87:ac:10:c8:dd:82:4d:6c:4a:
         fe:fd:eb:ab:9e:7d:7d:61:15:64:16:9a:ef:26:86:12:23:f7:
         dd:51:85:e9:46:3d:f3:46:b3:8e:a1:bf:e1:3c:68:0f:76:c4:
         c9:ec:2e:ac:67:8f:a5:99:b7:33:4a:eb:3a:af:47:2f:de:f1:
         d6:e7:60:5c:78:04:08:58:f6:a4:74:ed:8c:8d:38:91:28:37:
         d2:fa:19:eb:62:a1:90:bf:22:2b:0e:76:17:9c:76:87:fc:89:
         11:74:b1:7e:24:a8:36:df:c5:98:94:0b:47:6d:66:b0:35:df:
         19:b8:b3:c1:c7:f3:a6:91:b8:2d:6d:4e:b2:c7:f9:56:9e:14:
         b3:9c:fd:e2:20:73:89:2b:9e:17:72:7e:5f:e6:fb:0c:26:9f:
         d6:25:e6:b5:a3:17:f4:5e:d8:d1:ea:64:3d:4c:43:d6:fa:1a:
         ec:6f:83:24:cf:95:d9:60:07:4c:5a:6a:3b:7f:64:b1:cd:40:
         fd:6f:8b:ce:91:b9:82:97:9b:81:ad:a2:3a:6a:93:ef:a4:a0:
         28:08:91:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:25 2026 by rpki-client