Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
File:                     1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft (raw, json)
Hash identifier:          yX8ju7nO0dTUShMA1m+KC5BY0cxx0n43pheU4PFwHPI=
Subject key identifier:   5C:DA:AB:45:35:CA:D0:C0:A9:9A:35:D5:6C:27:74:BA:A0:7E:8B:6A
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Certificate issuer:       /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial:       019CAAFD0EC37DE414BB5A2949771AD428AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
Manifest number:          17D2
Signing time:             Sun 01 Mar 2026 20:00:36 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:36 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:36 +0000
Files and hashes:         1: 1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl (hash: rnsZ1HwaUS0R+p5n/IVZaPmD/exC1aMUZQZtGgaqPRU=)
                          2: OEcoV0x2ZiERZGgDrlv6frQzG3o.roa (hash: Fnf+bBSZRAjDDHsRlYG1QWMEEm9hP4YKSKPdjjCMdQc=)
                          3: U_Ta6twf7MIhtnzsm8wlRfxOJjw.roa (hash: ynlZLfA1KKQGA9ays2zyoOPFiR0SmVJSMZZfG1zu6sk=)
                          4: f_5BjnEr80pGWfL1w3q_5fZIFf4.roa (hash: RpdasGSTz3LwfRMX6VuVLK5/qxPoIGc1oN473heL/WE=)
                          5: mtPVSWGGA9av5jGLn16eQn0UQjc.roa (hash: rVQVTg7c8+hdflSpxdf+lr1Hlsinw9GyRMav2V9r1s8=)
                          6: pK6hDJxmfZUaCBepnWZvEBb9jQ8.roa (hash: +OSS7va6u+BokiYgs5Z+5mtwaa42GT6KDBzxwPZg2k4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fd:0e:c3:7d:e4:14:bb:5a:29:49:77:1a:d4:28:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
        Validity
            Not Before: Mar  1 20:00:36 2026 GMT
            Not After : Mar  2 20:00:36 2026 GMT
        Subject: CN=5cdaab4535cad0c0a99a35d56c2774baa07e8b6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4b:a7:df:80:fa:3b:7c:67:c0:d4:92:a0:a3:
                    ce:73:5f:c6:fb:bb:a9:43:59:64:90:1c:19:0d:a2:
                    2c:e2:ce:e5:62:3e:69:cb:32:07:52:c7:40:fe:13:
                    4a:7f:86:7b:83:5d:9e:bb:cc:64:04:10:ea:1f:f1:
                    10:11:52:fd:38:67:6c:8e:fe:6e:c7:32:a3:a0:9b:
                    c4:4a:e6:bd:ed:ed:95:49:6e:f1:c5:e3:fb:8e:e2:
                    81:a4:3a:ca:50:37:64:dd:d0:d6:bf:16:b5:e2:19:
                    a6:de:0e:3f:eb:e2:b0:2b:38:df:29:39:78:59:b0:
                    95:c3:41:10:dc:24:69:2d:22:7b:6e:83:b2:67:67:
                    90:4a:99:29:43:9c:b3:92:8c:66:a1:fa:01:d8:95:
                    19:4c:45:a5:5a:3a:0b:7c:93:54:d4:58:e5:88:a3:
                    b0:29:f9:44:f3:e2:a5:51:2b:c5:26:45:e7:ae:bf:
                    53:47:47:7e:97:fd:5d:56:61:09:72:88:68:83:05:
                    e7:a5:bb:64:1e:87:b7:d7:79:fb:2f:37:a4:b5:18:
                    87:0b:5d:de:20:f8:66:04:99:af:00:83:f7:5e:7e:
                    5c:17:a0:07:2a:45:b8:27:b1:81:65:7f:1a:82:f7:
                    56:c8:c3:e5:3a:67:9b:e9:9d:f8:f7:69:32:4f:5c:
                    93:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:DA:AB:45:35:CA:D0:C0:A9:9A:35:D5:6C:27:74:BA:A0:7E:8B:6A
            X509v3 Authority Key Identifier:
                keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:59:16:7b:53:5d:13:74:dc:1b:79:f2:d2:8b:97:d8:ab:12:
         89:0d:97:67:5f:ab:6e:e1:f2:73:8d:68:18:fb:18:8e:e7:f6:
         02:ed:4c:87:fa:57:e4:5d:7d:bd:d6:25:b1:02:2d:f8:3f:53:
         ce:be:95:43:3b:11:69:ef:cc:40:9f:5d:55:50:53:36:09:46:
         d3:4d:17:cd:de:3d:b6:48:05:9d:e0:6d:68:c6:66:71:69:4b:
         c4:66:67:34:b0:30:69:1f:c1:7a:a9:59:49:19:32:51:b4:91:
         46:36:2c:23:d1:f7:82:bc:92:b2:65:d8:67:e7:6a:ba:b0:c6:
         1d:3e:a3:ee:6a:3f:40:b6:1e:ed:c1:37:db:c1:82:c0:07:53:
         33:02:1d:a1:70:72:32:3d:a3:51:b2:69:ef:3f:13:36:14:d1:
         ed:6d:cd:e2:f0:48:71:0e:e4:8a:bb:f1:96:4d:e6:44:dc:2a:
         ba:48:4f:0f:ba:79:b5:61:dd:86:6e:8c:1f:76:f5:4a:ea:21:
         23:c0:dc:bb:57:5a:d9:30:c9:cf:e1:ec:4b:0b:7e:7e:4a:05:
         50:62:4c:04:68:fb:b1:df:11:6e:c0:7f:7f:78:4f:5c:eb:81:
         bb:f7:14:0a:f4:77:2f:fd:11:70:82:49:c0:44:0a:7a:fd:18:
         e5:cf:7b:ad
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZyq/Q7DfeQUu1opSXca1CirMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYWM1MGYxOWQ5OTMwYWVlYzA5Y2QyN2Y1MDhmYzUwMmVh
MTRkMWYwHhcNMjYwMzAxMjAwMDM2WhcNMjYwMzAyMjAwMDM2WjAzMTEwLwYDVQQD
Eyg1Y2RhYWI0NTM1Y2FkMGMwYTk5YTM1ZDU2YzI3NzRiYWEwN2U4YjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkun34D6O3xnwNSSoKPOc1/G+7up
Q1lkkBwZDaIs4s7lYj5pyzIHUsdA/hNKf4Z7g12eu8xkBBDqH/EQEVL9OGdsjv5u
xzKjoJvESua97e2VSW7xxeP7juKBpDrKUDdk3dDWvxa14hmm3g4/6+KwKzjfKTl4
WbCVw0EQ3CRpLSJ7boOyZ2eQSpkpQ5yzkoxmofoB2JUZTEWlWjoLfJNU1FjliKOw
KflE8+KlUSvFJkXnrr9TR0d+l/1dVmEJcohogwXnpbtkHoe313n7LzektRiHC13e
IPhmBJmvAIP3Xn5cF6AHKkW4J7GBZX8agvdWyMPlOmeb6Z3492kyT1yTsQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFFzaq0U1ytDAqZo11WwndLqgfotqMB8GA1UdIwQY
MBaAFPusUPGdmTCu7AnNJ/UI/FAuoU0fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02eFE4WjJaTUs3c0NjMG45UWo4VUM2aFRSOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvOGZjMDlkLTdkMjUtNDI1Yy04Yjkx
LWQ2MmU0NTRiZjM3Zi8xLzEtNnhROFoyWk1LN3NDYzBuOVFqOFVDNmhUUjgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzRlLzhmYzA5ZC03ZDI1LTQyNWMtOGI5MS1kNjJlNDU0YmYz
N2YvMS8xLTZ4UThaMlpNSzdzQ2MwbjlRajhVQzZoVFI4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1kW
e1NdE3TcG3ny0ouX2KsSiQ2XZ1+rbuHyc41oGPsYjuf2Au1Mh/pX5F19vdYlsQIt
+D9Tzr6VQzsRae/MQJ9dVVBTNglG000Xzd49tkgFneBtaMZmcWlLxGZnNLAwaR/B
eqlZSRkyUbSRRjYsI9H3grySsmXYZ+dqurDGHT6j7mo/QLYe7cE328GCwAdTMwId
oXByMj2jUbJp7z8TNhTR7W3N4vBIcQ7kirvxlk3mRNwqukhPD7p5tWHdhm6MH3b1
SuohI8Dcu1da2TDJz+HsSwt+fkoFUGJMBGj7sd8RbsB/f3hPXOuBu/cUCvR3L/0R
cIJJwEQKev0Y5c97rQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:04:13 2026 by rpki-client