Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
File:                     fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json)
Hash identifier:          cCeVPUJuUeMfP+KP23SaGuvDsrg7lg3yw7usrQlu+hI=
Subject key identifier:   48:BC:19:30:51:66:3E:91:70:24:9A:15:44:F2:B8:1E:54:D1:A9:23
Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC
Certificate issuer:       /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
Certificate serial:       019D9A7507E46D6A96F1F1B50B9034E94BF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
Manifest number:          05A9
Signing time:             Fri 17 Apr 2026 08:00:54 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:54 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:54 +0000
Files and hashes:         1: btFTz2r_BesZJN2u_oCmJMOAwZk.roa (hash: 0LBuX7o2jR543EQsgYTaLGtgZY2hOEDSxDyt/nU6qa0=)
                          2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: jAHKWqYZoMY2+W7KA+BkbHwfhOuVQIfl/VABGvvKDPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:07:e4:6d:6a:96:f1:f1:b5:0b:90:34:e9:4b:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc
        Validity
            Not Before: Apr 17 08:00:54 2026 GMT
            Not After : Apr 18 08:00:54 2026 GMT
        Subject: CN=48bc193051663e9170249a1544f2b81e54d1a923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8b:fd:55:82:e4:52:d7:2a:a2:e3:3c:af:20:
                    53:c2:63:0c:de:f6:a2:e9:c5:dd:ba:bd:a2:72:98:
                    24:5d:12:be:69:cc:85:ba:b6:c0:c1:bb:3d:e4:99:
                    64:bd:0d:98:5e:1d:3b:38:10:e3:78:ef:fa:1e:a9:
                    6b:d2:f6:95:06:ae:aa:09:34:49:5c:e6:48:bc:2d:
                    58:ee:43:2b:db:09:09:f8:27:26:5c:da:80:bd:c4:
                    32:00:01:d8:fc:39:f2:fa:e6:cb:95:a4:c0:75:60:
                    a6:bd:e8:c3:d6:c0:59:fc:c0:97:ba:42:77:aa:64:
                    36:89:15:84:86:e1:51:6a:1d:38:d3:b5:a5:d9:f8:
                    0f:92:e2:6a:d5:94:b0:27:0f:56:37:fc:b1:a4:f3:
                    c9:52:d7:59:d0:25:77:bb:ac:80:d4:81:c1:ba:46:
                    37:e1:ad:fd:36:35:d4:4f:f6:0e:18:76:a3:9b:5b:
                    fb:76:db:e9:1b:44:58:b3:92:78:82:39:98:c4:15:
                    eb:ad:a8:e9:5e:11:dc:16:cc:7c:37:52:75:1a:e1:
                    23:84:4e:43:2e:e9:cc:20:45:2d:5f:27:b7:3e:a8:
                    27:93:0a:d9:13:97:19:df:99:52:e3:84:9e:02:e0:
                    a3:37:7b:bd:c7:98:a5:65:f5:d7:87:5e:06:af:de:
                    af:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:BC:19:30:51:66:3E:91:70:24:9A:15:44:F2:B8:1E:54:D1:A9:23
            X509v3 Authority Key Identifier:
                keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:74:34:4d:7e:fd:3a:05:ec:6a:29:f0:04:f3:3c:41:64:48:
         cc:00:7a:38:86:d6:56:cc:3e:77:d3:d0:1b:a8:8d:18:b0:72:
         7c:6d:c2:1b:79:27:a7:5c:b5:37:f9:93:e3:33:82:f6:5c:d5:
         15:70:a4:4a:b4:87:71:d8:e9:0b:d4:16:88:1e:c1:50:a9:de:
         43:17:5d:6f:9c:f4:43:32:f1:45:a5:dc:36:9f:28:1a:d7:72:
         32:3a:e5:e6:56:3b:f6:b2:78:82:59:9b:21:ff:61:c6:bd:82:
         1f:79:14:66:cd:73:fd:76:5e:6e:17:51:72:0c:01:07:88:11:
         2e:8e:c7:72:76:44:f5:c9:a1:19:27:8f:b2:d9:85:d2:99:c4:
         af:30:5c:ac:ae:ce:a0:8f:ed:db:20:d8:e9:20:6f:d9:7c:87:
         10:5f:f0:82:06:a7:49:ab:d1:b4:01:ea:a1:1a:9d:85:28:5e:
         7d:5a:62:e2:9f:d5:4d:a1:ce:b2:3e:29:79:21:cf:7d:fd:24:
         4d:47:23:ac:c5:93:c6:64:d3:2e:be:e8:e7:16:d3:b2:51:be:
         9e:c5:32:13:5e:46:cf:d5:b7:b6:dc:d6:30:be:30:1f:fa:21:
         2e:ca:f8:1d:30:7e:34:60:78:26:6e:d1:da:e2:de:f4:ac:bb:
         4d:28:6e:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adQfkbWqW8fG1C5A06UvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYWM2NmZjMjIzMWNiMjY1NmU3NTMzNWExZmQ2Njc3MWY1
N2E5Y2MwHhcNMjYwNDE3MDgwMDU0WhcNMjYwNDE4MDgwMDU0WjAzMTEwLwYDVQQD
Eyg0OGJjMTkzMDUxNjYzZTkxNzAyNDlhMTU0NGYyYjgxZTU0ZDFhOTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Iv9VYLkUtcqouM8ryBTwmMM3vai
6cXdur2icpgkXRK+acyFurbAwbs95JlkvQ2YXh07OBDjeO/6Hqlr0vaVBq6qCTRJ
XOZIvC1Y7kMr2wkJ+CcmXNqAvcQyAAHY/Dny+ubLlaTAdWCmvejD1sBZ/MCXukJ3
qmQ2iRWEhuFRah0407Wl2fgPkuJq1ZSwJw9WN/yxpPPJUtdZ0CV3u6yA1IHBukY3
4a39NjXUT/YOGHajm1v7dtvpG0RYs5J4gjmYxBXrrajpXhHcFsx8N1J1GuEjhE5D
LunMIEUtXye3PqgnkwrZE5cZ35lS44SeAuCjN3u9x5ilZfXXh14Gr96v8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEi8GTBRZj6RcCSaFUTyuB5U0akjMB8GA1UdIwQY
MBaAFH6sZvwiMcsmVudTNaH9ZncfV6nMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUt
NDZjZTVjODI0MWRiLzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUtNDZjZTVjODI0MWRi
LzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXQ0TX79
OgXsainwBPM8QWRIzAB6OIbWVsw+d9PQG6iNGLByfG3CG3knp1y1N/mT4zOC9lzV
FXCkSrSHcdjpC9QWiB7BUKneQxddb5z0QzLxRaXcNp8oGtdyMjrl5lY79rJ4glmb
If9hxr2CH3kUZs1z/XZebhdRcgwBB4gRLo7HcnZE9cmhGSePstmF0pnErzBcrK7O
oI/t2yDY6SBv2XyHEF/wgganSavRtAHqoRqdhShefVpi4p/VTaHOsj4peSHPff0k
TUcjrMWTxmTTLr7o5xbTslG+nsUyE15Gz9W3ttzWML4wH/ohLsr4HTB+NGB4Jm7R
2uLe9Ky7TShu/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:24 2026 by rpki-client