Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File:                     sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier:          vMRaxLHzByW0BLasAGOrcbqMDubN4thPvE0jATpKt80=
Subject key identifier:   91:39:0E:CE:7A:A1:49:0A:DE:65:AE:48:35:F8:5A:9B:03:73:46:C7
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer:       /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial:       01A0C0D5DCE592828BD12371F8A99AB42231
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number:          1821
Signing time:             Sun 20 Sep 2026 22:00:36 +0000
Manifest this update:     Sun 20 Sep 2026 22:00:36 +0000
Manifest next update:     Mon 21 Sep 2026 22:00:36 +0000
Files and hashes:         1: CqjI4xZEaKoR3ZVD6UTJCsw8xz4.roa (hash: FOqlEPlc3OzHiMCxxnmni+Z4xjjrux0nAUj5xIZ7570=)
                          2: RSgAiFfFUDOLRRmOCmbncd53Jto.roa (hash: R29MYZiBKSn2Fy47uX6Yiye7bvq2OW5L5W2duo3Eaes=)
                          3: p16cU-7zatx3ndSU5oxcouZGGsA.asa (hash: 2m9k8zrzrHn7HIAqTxycPMDWckYHPav0fwCmzqUUYGo=)
                          4: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: 4ODRDH6ow+0SJUJPO9Rnt4NzvRntpfGh2AiVixI9XnY=)
                          5: zQ__yCcwrvF4SpWJekyRseIBHM0.asa (hash: 5Ccdj50AwmV19PztW4Q1959SDmAm1f7TUTOUsxH1IQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:d5:dc:e5:92:82:8b:d1:23:71:f8:a9:9a:b4:22:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
        Validity
            Not Before: Sep 20 22:00:36 2026 GMT
            Not After : Sep 21 22:00:36 2026 GMT
        Subject: CN=91390ece7aa1490ade65ae4835f85a9b037346c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:4a:d1:4a:18:02:83:cf:09:fb:a2:f1:a9:
                    3b:55:e4:92:5e:f7:15:27:cf:81:21:78:5a:32:6a:
                    1c:ee:b5:d4:45:42:f1:1c:a9:87:d7:e3:46:26:0a:
                    e8:57:97:62:f1:9f:e5:74:c0:43:da:43:2f:33:32:
                    af:68:89:e8:58:68:cb:f2:7e:f8:bb:0a:e8:0e:fa:
                    35:0b:a2:31:31:57:4f:ec:7d:30:96:d5:e2:48:f6:
                    06:90:d4:e6:b6:cf:93:16:7b:a9:9b:37:4d:95:88:
                    f2:27:95:cd:b2:ea:ee:e8:ce:ba:6d:37:79:40:e5:
                    01:5d:5b:b2:0e:23:ed:18:c4:f5:e3:1e:a8:50:2d:
                    0a:4f:fe:cc:c3:b1:e9:ae:22:da:0b:e7:f6:d6:70:
                    bd:82:1d:46:ba:87:72:70:5d:5e:fc:99:a6:4e:22:
                    f1:93:58:98:7b:e4:8e:82:10:75:04:4b:2e:61:fa:
                    a5:a9:f5:2e:3c:77:30:a0:be:b3:23:8c:ed:46:7f:
                    20:ae:5b:74:a5:c3:cb:46:18:59:a4:d0:fe:5b:67:
                    b4:31:46:a3:2a:83:7b:3d:8d:a5:80:d2:09:a7:1e:
                    37:98:cb:84:4f:87:45:79:b8:c7:da:d5:ff:86:d6:
                    7d:20:dd:4e:08:ad:33:90:f2:09:ee:43:fc:65:34:
                    f0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:39:0E:CE:7A:A1:49:0A:DE:65:AE:48:35:F8:5A:9B:03:73:46:C7
            X509v3 Authority Key Identifier:
                keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:79:cf:24:f2:c4:ec:b1:1c:59:03:d3:af:23:fa:b0:14:95:
         6c:fe:fb:15:09:bb:64:8d:36:ea:f8:31:c6:15:02:b4:7c:eb:
         04:c9:3d:2d:c5:59:c1:27:be:fa:7d:0e:39:67:48:0a:74:55:
         48:b2:dd:6e:c7:db:a4:3d:39:bf:8d:86:28:24:57:04:0c:7a:
         15:24:90:d3:99:98:db:6f:a5:6c:7c:a9:9b:6c:f6:69:3f:8c:
         a4:52:21:61:40:97:96:1b:b1:94:65:ed:4b:c6:bf:44:78:f5:
         f8:b6:7c:77:ca:5b:4e:aa:70:ce:50:d0:b9:02:9b:43:1f:59:
         3d:0b:30:9d:7a:94:ea:8e:b3:7a:55:47:fd:32:f8:85:83:87:
         08:f4:a0:ff:70:0e:29:37:47:3a:cb:7a:5b:80:0f:a8:49:37:
         12:8a:48:0b:11:96:42:44:fa:85:c3:07:0c:68:67:4d:80:da:
         60:49:9a:3b:58:e2:37:9c:b1:61:7b:6f:37:a4:51:c2:fb:db:
         ba:26:70:bf:10:52:ad:d6:64:ba:e7:6d:8c:d9:fe:2a:ee:ee:
         ea:d0:10:64:8f:93:35:b5:18:d3:23:d2:d5:e8:47:38:e3:81:
         bb:dc:6c:45:f1:96:c3:11:41:48:28:e2:5b:32:97:c9:a5:e2:
         6b:8f:4e:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDA1dzlkoKL0SNx+KmatCIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNTQ0MmM0ZmZlOWMxZDc2MWU3YzU2OTM2MGVhZDA0MjQz
OGY5MDMwHhcNMjYwOTIwMjIwMDM2WhcNMjYwOTIxMjIwMDM2WjAzMTEwLwYDVQQD
Eyg5MTM5MGVjZTdhYTE0OTBhZGU2NWFlNDgzNWY4NWE5YjAzNzM0NmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HVK0UoYAoPPCfui8ak7VeSSXvcV
J8+BIXhaMmoc7rXURULxHKmH1+NGJgroV5di8Z/ldMBD2kMvMzKvaInoWGjL8n74
uwroDvo1C6IxMVdP7H0wltXiSPYGkNTmts+TFnupmzdNlYjyJ5XNsuru6M66bTd5
QOUBXVuyDiPtGMT14x6oUC0KT/7Mw7HpriLaC+f21nC9gh1GuodycF1e/JmmTiLx
k1iYe+SOghB1BEsuYfqlqfUuPHcwoL6zI4ztRn8grlt0pcPLRhhZpND+W2e0MUaj
KoN7PY2lgNIJpx43mMuET4dFebjH2tX/htZ9IN1OCK0zkPIJ7kP8ZTTwAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJE5Ds56oUkK3mWuSDX4WpsDc0bHMB8GA1UdIwQY
MBaAFLBUQsT/6cHXYefFaTYOrQQkOPkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGIt
NmVkMzMxZjMxZTA5LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGItNmVkMzMxZjMxZTA5
LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHnPJPLE
7LEcWQPTryP6sBSVbP77FQm7ZI026vgxxhUCtHzrBMk9LcVZwSe++n0OOWdICnRV
SLLdbsfbpD05v42GKCRXBAx6FSSQ05mY22+lbHypm2z2aT+MpFIhYUCXlhuxlGXt
S8a/RHj1+LZ8d8pbTqpwzlDQuQKbQx9ZPQswnXqU6o6zelVH/TL4hYOHCPSg/3AO
KTdHOst6W4APqEk3EopICxGWQkT6hcMHDGhnTYDaYEmaO1jiN5yxYXtvN6RRwvvb
uiZwvxBSrdZkuudtjNn+Ku7u6tAQZI+TNbUY0yPS1ehHOOOBu9xsRfGWwxFBSCji
WzKXyaXia49OtA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:17:18 2026 by rpki-client