Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File:                     FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier:          l5kMsNgKRkmxNIvLBoW1WCdpeR4cOpGlJZbzRc+2nPc=
Subject key identifier:   FE:20:67:90:DE:B7:70:67:2F:D0:29:7D:9D:53:24:FB:8F:85:E2:3A
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer:       /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial:       019EC0DAE3CFABA3F34E1D8BDE896AF0F434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 12:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:31 +0000
Files and hashes:         1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: Sc6/jKdxyfkBSuyPOA+xcbiltxw/9U5JU4BIksHLgB8=)
                          2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:e3:cf:ab:a3:f3:4e:1d:8b:de:89:6a:f0:f4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
        Validity
            Not Before: Jun 13 12:00:31 2026 GMT
            Not After : Jun 14 12:00:31 2026 GMT
        Subject: CN=fe206790deb770672fd0297d9d5324fb8f85e23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:61:5c:1b:8e:80:16:e8:1a:4e:4c:b9:f0:2b:
                    f9:55:ba:da:c1:ab:98:35:ee:e6:b3:d2:3f:72:8a:
                    80:20:dc:8b:22:4a:18:61:59:97:0f:6c:ab:37:26:
                    56:0f:f7:13:87:42:a1:15:4d:41:4a:c5:31:a0:24:
                    8b:66:6b:bf:c8:96:c1:ba:c2:b3:43:b8:31:3a:8c:
                    8f:27:05:ec:7c:e4:9b:32:92:f5:5c:80:2d:db:b0:
                    e0:b7:c7:83:9f:7e:b5:d0:99:d8:e3:7f:2d:2b:c4:
                    58:b7:5b:d3:5a:2f:4b:34:e3:5b:2f:dd:ce:eb:a2:
                    c6:4f:24:cd:a3:5d:00:3d:f0:86:6a:d7:af:00:2f:
                    5e:30:3f:93:69:f3:1a:d1:ba:e9:e4:94:03:11:e9:
                    e3:5b:ed:02:0d:b5:9d:28:eb:c2:de:5b:ed:a6:57:
                    66:f5:e3:b0:1b:87:dd:06:8c:af:e4:d2:b8:8f:5a:
                    45:8e:8f:e9:25:5d:ec:f2:15:c7:5d:33:b3:5b:55:
                    c9:a6:3d:78:ea:98:47:e2:e9:3e:73:83:90:c2:36:
                    f4:a1:53:55:d0:6e:40:fa:6f:5c:12:b1:52:36:53:
                    fb:b8:4e:2e:5f:b5:e1:b4:67:84:e5:c1:c2:c1:a7:
                    bb:f6:26:e9:5a:41:7f:43:2d:ae:71:e8:de:ea:44:
                    db:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:20:67:90:DE:B7:70:67:2F:D0:29:7D:9D:53:24:FB:8F:85:E2:3A
            X509v3 Authority Key Identifier:
                keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:f8:da:1c:95:1d:55:d7:5e:ad:7e:ca:f4:1f:40:59:f3:1a:
         5d:08:98:a4:ca:14:c0:b7:46:fa:a0:d7:cd:06:ef:46:3b:54:
         0f:3f:7e:3d:aa:33:5b:07:47:45:7e:31:dd:48:34:33:94:ed:
         d4:a2:c1:92:34:c0:ea:37:72:13:9e:36:d9:45:53:cd:17:82:
         96:6b:83:21:21:3e:bc:a7:e1:32:f6:c1:09:1d:46:68:7c:53:
         5a:35:f8:3d:4e:bc:56:ae:0b:8d:69:47:d1:c5:fb:87:39:f5:
         7f:19:48:76:ed:4e:8a:ec:c5:d6:eb:43:2c:7e:1c:e4:12:21:
         11:42:77:e5:b0:13:7d:c2:74:8a:12:c6:cd:ca:2a:73:02:cb:
         ee:a0:10:17:64:c8:1f:97:38:7f:b9:0d:63:6b:68:12:c6:dd:
         b2:2f:ba:c1:61:13:24:9d:9c:68:26:68:26:de:59:33:e6:5f:
         18:f0:a9:2b:5b:2a:55:8e:f9:bb:a7:5f:4c:12:b4:f8:c2:d9:
         9e:cb:9d:c0:27:9d:06:04:38:10:8a:70:ce:d2:aa:e6:6b:f2:
         ce:71:a7:61:d0:e4:de:21:d1:15:2d:ec:bf:23:59:65:4d:69:
         a8:16:75:2f:5a:fe:8c:63:51:33:68:48:df:22:64:37:4d:1a:
         8e:6b:78:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2uPPq6PzTh2L3olq8PQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk
NzM1OTUwHhcNMjYwNjEzMTIwMDMxWhcNMjYwNjE0MTIwMDMxWjAzMTEwLwYDVQQD
EyhmZTIwNjc5MGRlYjc3MDY3MmZkMDI5N2Q5ZDUzMjRmYjhmODVlMjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2FcG46AFugaTky58Cv5VbrawauY
Ne7ms9I/coqAINyLIkoYYVmXD2yrNyZWD/cTh0KhFU1BSsUxoCSLZmu/yJbBusKz
Q7gxOoyPJwXsfOSbMpL1XIAt27Dgt8eDn3610JnY438tK8RYt1vTWi9LNONbL93O
66LGTyTNo10APfCGatevAC9eMD+TafMa0brp5JQDEenjW+0CDbWdKOvC3lvtpldm
9eOwG4fdBoyv5NK4j1pFjo/pJV3s8hXHXTOzW1XJpj146phH4uk+c4OQwjb0oVNV
0G5A+m9cErFSNlP7uE4uX7XhtGeE5cHCwae79ibpWkF/Qy2uceje6kTbLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4gZ5Det3BnL9ApfZ1TJPuPheI6MB8GA1UdIwQY
MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt
Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm
LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPjaHJUd
VdderX7K9B9AWfMaXQiYpMoUwLdG+qDXzQbvRjtUDz9+PaozWwdHRX4x3Ug0M5Tt
1KLBkjTA6jdyE5422UVTzReClmuDISE+vKfhMvbBCR1GaHxTWjX4PU68Vq4LjWlH
0cX7hzn1fxlIdu1OiuzF1utDLH4c5BIhEUJ35bATfcJ0ihLGzcoqcwLL7qAQF2TI
H5c4f7kNY2toEsbdsi+6wWETJJ2caCZoJt5ZM+ZfGPCpK1sqVY75u6dfTBK0+MLZ
nsudwCedBgQ4EIpwztKq5mvyznGnYdDk3iHRFS3svyNZZU1pqBZ1L1r+jGNRM2hI
3yJkN00ajmt41Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:30 2026 by rpki-client