Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File:                     FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier:          HdLA+AAtNHlkCPmFDBxWgw021o7T65zx2c4S71M/aL8=
Subject key identifier:   5F:53:A7:27:86:C9:6F:2C:B1:9C:81:12:DD:ED:88:34:F4:6C:83:8E
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer:       /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial:       019CACEB9E87793E36CB941C2991FA63DBCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number:          1848
Signing time:             Mon 02 Mar 2026 05:00:48 +0000
Manifest this update:     Mon 02 Mar 2026 05:00:48 +0000
Manifest next update:     Tue 03 Mar 2026 05:00:48 +0000
Files and hashes:         1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: QoX+/yVj26U7gQhrXWeY5IFqpeaKOuhx67//oceBOQY=)
                          2: JmBNmBKIgqKO_ZhjRd9uDlu62G4.roa (hash: BFiumCe31FgvogRmYhZXe4XUH4NFOPl+f+uzimA8KGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:9e:87:79:3e:36:cb:94:1c:29:91:fa:63:db:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
        Validity
            Not Before: Mar  2 05:00:48 2026 GMT
            Not After : Mar  3 05:00:48 2026 GMT
        Subject: CN=5f53a72786c96f2cb19c8112dded8834f46c838e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:14:db:42:69:38:fc:32:93:28:3a:8f:e6:4e:
                    2d:9c:19:19:3a:d4:36:23:ee:54:64:ba:37:ae:0a:
                    f7:37:e4:f4:8d:a9:cc:36:17:8b:a6:a4:29:df:7e:
                    01:35:44:dc:7f:91:0d:9c:e3:a6:cf:03:e8:6b:19:
                    10:94:60:1b:9a:14:b9:b3:97:cf:ea:5a:66:aa:c1:
                    24:ca:3c:32:fd:0f:ee:bc:a1:80:b6:07:5e:21:ea:
                    7f:08:5c:15:10:b8:69:e2:e8:f3:f1:73:5a:46:d2:
                    27:73:5e:47:99:ac:e0:8e:5f:af:1f:25:e2:e8:e5:
                    dd:eb:56:19:b3:11:41:af:5e:fd:9e:60:81:19:8e:
                    4e:61:15:21:73:67:9e:4a:0d:ac:5d:75:f6:b1:eb:
                    a4:6f:28:2f:36:05:fe:d1:f7:1f:ad:95:3a:eb:c0:
                    e7:1b:54:27:08:ee:5f:fc:80:e0:7f:a5:e3:ec:2a:
                    a2:38:8f:1c:2f:ae:4c:0d:26:e8:20:cc:14:be:75:
                    4c:0e:69:55:58:b0:43:d5:f6:79:04:68:33:64:9b:
                    a6:78:66:81:b6:67:7f:4b:8c:5c:50:46:cd:b1:a3:
                    19:0b:12:95:62:ea:a3:e1:f4:3f:c1:7f:1d:f3:b1:
                    a6:9a:9c:da:5c:04:2b:97:39:5c:2c:ef:0a:34:80:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:53:A7:27:86:C9:6F:2C:B1:9C:81:12:DD:ED:88:34:F4:6C:83:8E
            X509v3 Authority Key Identifier:
                keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:dd:4c:21:24:f3:c7:61:56:1e:59:e3:ef:30:bb:c3:f8:c8:
         4d:ee:77:c9:3e:16:98:91:8d:d0:0e:2d:24:39:0c:cc:ec:b6:
         4e:46:37:04:4a:80:fb:2a:54:d9:61:e1:bc:1b:28:07:45:ec:
         35:5a:63:f6:c1:d0:44:06:fc:0a:ad:e3:78:97:1c:05:d9:7f:
         e2:60:17:1f:1b:c4:ec:a6:bd:7a:e5:08:80:45:da:46:8b:2f:
         65:81:e6:ad:13:eb:ca:86:06:8d:9c:0a:d9:a0:c9:bf:ad:bc:
         da:4a:95:81:69:f0:af:4f:84:ce:74:17:27:fc:78:19:83:69:
         c7:45:7d:b2:7a:bb:7a:a2:39:5a:98:44:cb:42:4f:44:2f:0c:
         f6:a2:cd:4d:a1:39:6f:ce:4e:84:aa:e0:95:14:96:c2:f3:24:
         b0:c0:3d:07:45:8d:78:c0:14:ef:e4:ad:9e:5f:e5:61:6c:52:
         1e:78:d8:f5:d7:ed:f8:26:d9:aa:8b:7b:e2:ff:34:49:cd:96:
         93:31:48:fe:fb:d5:da:20:a8:08:20:fa:0a:d8:ec:38:a0:90:
         27:d5:1b:6f:13:36:a5:1d:86:88:b0:34:d8:8c:eb:61:a6:30:
         17:85:d8:6b:57:60:fa:26:43:54:f8:a1:ca:aa:a6:92:f3:2f:
         87:d9:fe:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys656HeT42y5QcKZH6Y9vPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWYxMmJjMjhhMDYwYjU5YTJiMzBhZjI3NDNjOWRjYmQ3
NDhlM2EwHhcNMjYwMzAyMDUwMDQ4WhcNMjYwMzAzMDUwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZjUzYTcyNzg2Yzk2ZjJjYjE5YzgxMTJkZGVkODgzNGY0NmM4MzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxTbQmk4/DKTKDqP5k4tnBkZOtQ2
I+5UZLo3rgr3N+T0janMNheLpqQp334BNUTcf5ENnOOmzwPoaxkQlGAbmhS5s5fP
6lpmqsEkyjwy/Q/uvKGAtgdeIep/CFwVELhp4ujz8XNaRtInc15Hmazgjl+vHyXi
6OXd61YZsxFBr179nmCBGY5OYRUhc2eeSg2sXXX2seukbygvNgX+0fcfrZU668Dn
G1QnCO5f/IDgf6Xj7CqiOI8cL65MDSboIMwUvnVMDmlVWLBD1fZ5BGgzZJumeGaB
tmd/S4xcUEbNsaMZCxKVYuqj4fQ/wX8d87GmmpzaXAQrlzlcLO8KNID/3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9TpyeGyW8ssZyBEt3tiDT0bIOOMB8GA1UdIwQY
MBaAFBSvErwooGC1miswrydDydy9dI46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjct
NTRlZTZjNTEzZmY5LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjctNTRlZTZjNTEzZmY5
LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd91MISTz
x2FWHlnj7zC7w/jITe53yT4WmJGN0A4tJDkMzOy2TkY3BEqA+ypU2WHhvBsoB0Xs
NVpj9sHQRAb8Cq3jeJccBdl/4mAXHxvE7Ka9euUIgEXaRosvZYHmrRPryoYGjZwK
2aDJv6282kqVgWnwr0+EznQXJ/x4GYNpx0V9snq7eqI5WphEy0JPRC8M9qLNTaE5
b85OhKrglRSWwvMksMA9B0WNeMAU7+Stnl/lYWxSHnjY9dft+CbZqot74v80Sc2W
kzFI/vvV2iCoCCD6CtjsOKCQJ9UbbxM2pR2GiLA02IzrYaYwF4XYa1dg+iZDVPih
yqqmkvMvh9n+8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:28:14 2026 by rpki-client