Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File:                     FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier:          SP7W+58PGK5GhnnNI/G2gYkyD6xQtO4XJzLr8KRsqLc=
Subject key identifier:   34:89:C3:4E:5B:4D:D1:77:DF:44:D8:7E:BA:CD:50:1E:55:05:24:61
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer:       /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial:       019FA899F2F681C0FA1F65B9F66DB12DCE60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 12:01:29 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:29 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:29 +0000
Files and hashes:         1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: K6Gf656P9kkdpMh3m/EWhLY/JFBBandyehcUVMHj0ek=)
                          2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:f2:f6:81:c0:fa:1f:65:b9:f6:6d:b1:2d:ce:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
        Validity
            Not Before: Jul 28 12:01:29 2026 GMT
            Not After : Jul 29 12:01:29 2026 GMT
        Subject: CN=3489c34e5b4dd177df44d87ebacd501e55052461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:a1:98:e4:5a:65:9f:ad:85:20:d1:15:d7:
                    84:df:1a:a1:56:1e:74:ce:4a:78:e2:17:53:0e:7b:
                    60:f9:e3:ac:9c:8d:b8:3b:91:32:e2:ff:47:05:29:
                    13:26:70:87:e3:ca:82:2d:51:6b:10:ee:d1:0b:2c:
                    cf:4f:4e:81:97:6e:9a:2b:61:c5:fd:e9:2d:b6:8d:
                    36:36:a0:1e:c9:80:59:b8:7f:4a:8c:7b:f7:c7:00:
                    0d:bd:a5:87:53:c8:fc:9a:fd:1a:7f:d8:5a:1a:c0:
                    5d:9c:b4:1a:db:c9:49:ff:23:a3:68:1e:5c:b9:70:
                    be:7d:51:d4:f1:8c:24:d3:66:b2:68:4c:89:81:bd:
                    54:8b:21:dc:70:a2:f4:0a:4d:09:b3:af:3f:4e:fe:
                    64:cd:a0:57:72:92:d9:46:95:cd:2f:7e:5e:38:27:
                    22:ce:82:f5:a0:a3:da:20:3f:e5:b0:cc:16:36:1e:
                    ec:25:40:9d:58:d3:58:76:44:03:ed:90:c4:b9:a5:
                    4c:1a:df:ee:88:ca:de:f1:a3:b9:94:2a:01:83:86:
                    1d:e1:70:ce:cb:e0:cb:4d:be:c2:98:5c:25:00:b3:
                    c0:38:78:9d:60:20:73:85:4b:c5:70:b9:a3:0d:f1:
                    3b:bb:a6:10:ae:a7:c9:eb:8a:76:38:31:fd:b4:11:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:89:C3:4E:5B:4D:D1:77:DF:44:D8:7E:BA:CD:50:1E:55:05:24:61
            X509v3 Authority Key Identifier:
                keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:71:ca:26:ed:fe:7e:3b:dd:98:ce:b7:30:26:f1:90:3d:dd:
         b2:96:5b:1d:cb:01:29:e0:ea:78:d4:a5:43:16:4e:aa:55:c6:
         e5:e9:59:aa:e5:6d:8d:38:db:af:cb:ac:b1:42:cf:76:4b:25:
         e4:6f:25:49:ad:dc:64:ab:a7:83:f8:3a:fc:15:61:c0:ff:b6:
         19:73:ee:f3:08:76:f3:8e:51:ef:b1:2b:dd:d0:4c:d1:1e:dc:
         fa:cc:d2:06:09:15:0c:6d:f9:4d:50:05:9c:e4:c3:c2:93:e1:
         36:2e:47:4c:64:39:db:aa:95:67:ae:c3:3d:79:f1:44:f4:d1:
         c6:98:40:a8:10:bb:b6:53:54:22:67:89:0d:0f:d5:61:f0:9c:
         f2:bd:31:03:cf:af:b6:0e:b5:39:82:9b:45:e8:65:96:7b:5f:
         1c:b2:64:06:54:39:d3:64:c5:d5:a3:38:85:9f:3f:77:69:7d:
         88:42:db:82:65:14:bc:f4:0e:be:6e:fa:82:50:69:a7:7a:9b:
         a1:22:cc:ca:60:02:f5:bd:42:ff:42:70:7a:8c:97:87:5a:1c:
         f5:a6:75:22:78:f1:dd:5f:a6:25:f4:48:91:87:a2:7b:a7:ef:
         80:df:78:24:e1:47:18:07:62:f9:d0:58:8d:6d:f4:2e:6f:ed:
         cd:8f:21:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omfL2gcD6H2W59m2xLc5gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk
NzM1OTUwHhcNMjYwNzI4MTIwMTI5WhcNMjYwNzI5MTIwMTI5WjAzMTEwLwYDVQQD
EygzNDg5YzM0ZTViNGRkMTc3ZGY0NGQ4N2ViYWNkNTAxZTU1MDUyNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquuhmORaZZ+thSDRFdeE3xqhVh50
zkp44hdTDntg+eOsnI24O5Ey4v9HBSkTJnCH48qCLVFrEO7RCyzPT06Bl26aK2HF
/ektto02NqAeyYBZuH9KjHv3xwANvaWHU8j8mv0af9haGsBdnLQa28lJ/yOjaB5c
uXC+fVHU8Ywk02ayaEyJgb1UiyHccKL0Ck0Js68/Tv5kzaBXcpLZRpXNL35eOCci
zoL1oKPaID/lsMwWNh7sJUCdWNNYdkQD7ZDEuaVMGt/uiMre8aO5lCoBg4Yd4XDO
y+DLTb7CmFwlALPAOHidYCBzhUvFcLmjDfE7u6YQrqfJ64p2ODH9tBHeIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSJw05bTdF330TYfrrNUB5VBSRhMB8GA1UdIwQY
MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt
Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm
LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq3HKJu3+
fjvdmM63MCbxkD3dspZbHcsBKeDqeNSlQxZOqlXG5elZquVtjTjbr8ussULPdksl
5G8lSa3cZKung/g6/BVhwP+2GXPu8wh2845R77Er3dBM0R7c+szSBgkVDG35TVAF
nOTDwpPhNi5HTGQ526qVZ67DPXnxRPTRxphAqBC7tlNUImeJDQ/VYfCc8r0xA8+v
tg61OYKbRehllntfHLJkBlQ502TF1aM4hZ8/d2l9iELbgmUUvPQOvm76glBpp3qb
oSLMymAC9b1C/0JweoyXh1oc9aZ1Injx3V+mJfRIkYeie6fvgN94JOFHGAdi+dBY
jW30Lm/tzY8hYg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:00:52 2026 by rpki-client