Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
File:                     flyFKPgXh8SJxUqZODkmn1prH5Q.mft (raw, json)
Hash identifier:          SZoeO03mUh31xuICCQX5hSGVNe15YFNJO+knvu4YRtQ=
Subject key identifier:   28:42:EE:C2:91:9A:8F:08:81:DD:E2:38:19:C2:E5:6A:A9:B8:79:01
Authority key identifier: 7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94
Certificate issuer:       /CN=7e5c8528f81787c489c54a993839269f5a6b1f94
Certificate serial:       019EC0DB4E9AA6BE7E6D80C3B360AB4FB3A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 12:00:58 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:58 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:58 +0000
Files and hashes:         1: 3VErUqcZv3DSzuiOHFJ4NhVe-Sk.roa (hash: BPPxG6OZWKRPZ5HBoMHDDf4oiJwnIpeguHXGGr8zBaE=)
                          2: ADyxeKRZORLqwi8LQj6fHp5wGLo.roa (hash: KI7QNZ1tpSlDspBRe6V1C2CDD2eifh8F15Hlgzqa5Lo=)
                          3: flyFKPgXh8SJxUqZODkmn1prH5Q.crl (hash: BGqOTGWm3H/p+QsFLwLuWcEMh8mTvnkBz3AvVjMrr9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:4e:9a:a6:be:7e:6d:80:c3:b3:60:ab:4f:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e5c8528f81787c489c54a993839269f5a6b1f94
        Validity
            Not Before: Jun 13 12:00:58 2026 GMT
            Not After : Jun 14 12:00:58 2026 GMT
        Subject: CN=2842eec2919a8f0881dde23819c2e56aa9b87901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:99:c7:5d:85:0b:e9:ac:a9:8c:61:3e:c2:
                    33:8e:25:9e:6a:c6:e7:8b:a3:31:2e:49:f9:5e:15:
                    8b:56:b6:e2:a4:85:ec:de:3d:79:be:88:86:f8:d0:
                    38:bd:7d:f6:71:86:70:bc:14:98:2e:dc:7b:c8:ab:
                    6d:ac:40:16:d7:e7:2a:b3:13:0c:7c:0b:03:11:6d:
                    90:b8:65:8b:21:33:e4:7b:f1:9c:7c:19:1d:26:af:
                    84:07:56:9e:8d:99:fb:60:d2:73:6e:19:c8:b1:48:
                    e4:08:d4:02:d0:b5:25:c3:3b:f7:dd:eb:a9:ab:a3:
                    6c:3f:c0:b8:a1:76:9a:bd:6d:25:3a:82:2f:3e:75:
                    31:96:e2:76:1b:a9:64:79:5b:55:34:63:14:f4:d1:
                    5f:f0:4d:b8:71:cd:97:3f:66:44:6d:0e:01:fd:5c:
                    54:08:44:18:bc:ca:5d:73:97:e1:47:b6:9d:3d:31:
                    27:22:c9:d7:c3:97:6e:b8:c5:5c:24:e9:15:5b:4c:
                    75:47:9b:a9:41:18:0e:8f:a8:8d:8c:42:ea:29:b9:
                    9e:40:f1:d9:c1:cd:aa:1d:ab:67:79:58:d7:42:36:
                    1b:a8:78:1f:17:43:51:48:e3:14:9e:23:f2:b3:15:
                    cf:5d:a4:cf:0f:82:2a:d7:a6:3a:d8:ab:a4:29:24:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:42:EE:C2:91:9A:8F:08:81:DD:E2:38:19:C2:E5:6A:A9:B8:79:01
            X509v3 Authority Key Identifier:
                keyid:7E:5C:85:28:F8:17:87:C4:89:C5:4A:99:38:39:26:9F:5A:6B:1F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flyFKPgXh8SJxUqZODkmn1prH5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/ea10b5-21f6-46b9-aad6-3f7a3e025e8b/1/flyFKPgXh8SJxUqZODkmn1prH5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8e:c5:eb:14:f8:4c:2b:a6:5a:ac:51:48:55:4d:c8:2e:22:
         78:dc:cc:35:ae:88:68:04:e9:eb:5d:62:8a:70:cd:3c:b6:85:
         c2:4a:ad:54:d8:a1:0f:d1:ee:2f:66:e7:42:0b:4a:2f:c6:28:
         a3:25:97:b7:f4:62:a1:ad:e4:b4:e4:80:3b:06:79:1f:a2:6d:
         c8:f3:34:72:03:07:b0:7d:e7:a3:d2:33:d1:cd:85:3f:f8:fe:
         0a:32:23:1a:a4:a7:76:4e:1c:05:60:03:9a:fd:28:33:9e:72:
         8f:d3:f8:ad:14:e5:73:c1:16:e5:48:8f:96:c7:bb:87:e8:4e:
         0f:35:08:9c:71:ec:0d:8f:03:d9:8a:c0:70:30:02:5a:8a:e9:
         63:05:9e:3b:ec:68:c8:cd:58:31:65:50:06:8a:55:9a:65:3d:
         55:6d:98:7d:5c:fc:d0:4f:5e:c3:91:c4:e7:d1:4a:25:70:40:
         96:df:26:be:7f:c1:47:bf:e5:b9:c6:5d:29:9f:42:4a:22:83:
         c4:72:09:82:31:d2:17:d6:c2:4e:51:1c:c8:3c:85:9d:ac:d8:
         ea:e8:c3:56:23:b5:52:72:54:a7:dc:98:16:f3:54:de:4a:27:
         18:5b:54:f0:2c:a0:ad:3e:63:0f:cf:01:96:f4:d5:3f:8b:45:
         27:38:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:23:11 2026 by rpki-client