Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
File:                     FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json)
Hash identifier:          Ics2G5tGDMVkjobXnW5Mf2MW/Y7uQ6vAjkTQG8YD6NU=
Subject key identifier:   C9:12:32:B0:BC:C7:2D:D1:82:E6:48:09:EA:3F:38:49:84:4F:E0:D3
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Certificate issuer:       /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial:       019D992B774016B5959656CC43DADFAC94C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
Manifest number:          0B65
Signing time:             Fri 17 Apr 2026 02:00:55 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:55 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:55 +0000
Files and hashes:         1: 1uN-f7Pe3Yoax_Gy67R47bHTZtU.roa (hash: MsQhz6+if76h/AmIW7u+uBAwg92G7zeCMFsByKAoJ9g=)
                          2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: jECTpgC5vcLy/GsJ45nzjF9YGZYr7qD5yvR642zGLTs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:77:40:16:b5:95:96:56:cc:43:da:df:ac:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
        Validity
            Not Before: Apr 17 02:00:55 2026 GMT
            Not After : Apr 18 02:00:55 2026 GMT
        Subject: CN=c91232b0bcc72dd182e64809ea3f3849844fe0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f5:a2:35:1b:91:ac:e8:61:f9:95:b0:99:9e:
                    f8:05:92:75:98:41:cf:04:d5:d8:88:40:e0:d0:74:
                    88:ca:5b:cf:e3:11:15:a3:6a:e1:be:d4:aa:bb:a8:
                    c5:15:42:2c:16:79:1f:cb:56:b7:f3:61:bf:27:7e:
                    20:59:27:f4:cd:0b:8b:03:2c:37:62:fc:8d:0d:b8:
                    80:5f:28:1e:b5:84:c5:34:83:d6:c1:0f:b7:e3:c1:
                    04:e8:00:4f:b2:87:a6:30:b3:18:f4:a1:63:88:31:
                    e6:73:6c:7a:28:fb:c2:40:c4:3a:61:32:9e:8f:ff:
                    3e:3e:b9:92:bb:5e:f1:53:ca:df:df:45:18:39:2b:
                    dc:df:e4:8d:ad:10:da:a8:2b:6b:7e:ad:22:2f:ff:
                    53:a2:5d:47:a1:af:82:ee:91:55:91:7a:f0:ca:a5:
                    d3:75:3a:ae:9a:1d:85:3f:81:5e:d5:98:33:fd:81:
                    bf:1b:8a:cd:89:64:dc:76:19:21:1c:35:d1:58:fb:
                    30:6c:35:3c:bc:c8:e9:e2:14:64:98:32:ca:41:55:
                    18:22:13:6d:ba:c4:0f:ce:4b:55:bd:f9:68:db:f1:
                    0f:39:5e:dc:ed:d4:37:1f:7a:78:a7:e5:8b:a1:13:
                    1c:f1:70:21:8e:60:94:44:f2:7a:fb:42:d0:18:b9:
                    e5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:12:32:B0:BC:C7:2D:D1:82:E6:48:09:EA:3F:38:49:84:4F:E0:D3
            X509v3 Authority Key Identifier:
                keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:60:da:34:e3:fa:95:8e:d4:f1:77:e6:e6:90:53:a3:f4:33:
         ea:ba:bf:1f:b4:1f:98:01:bd:3c:fb:3e:6a:d6:33:2e:6a:b7:
         6b:e8:9b:fd:06:e7:e6:b6:2d:cc:ee:f0:72:29:ae:0e:38:dc:
         f8:a2:97:56:8c:75:81:00:08:06:ed:71:65:ad:19:cb:30:9e:
         1a:c3:eb:cf:cf:8e:b4:30:23:71:c3:e8:fb:03:89:44:34:c8:
         c9:c5:c6:9e:a0:28:fd:bf:41:cf:ab:d1:40:90:a8:e9:05:a2:
         17:e5:9e:e5:0b:50:cd:bf:d1:ab:45:63:6e:3c:22:e1:d5:90:
         a8:43:2f:a2:8c:d6:81:3f:02:c0:87:8e:5d:0f:b9:92:e7:22:
         9b:8c:71:d7:78:28:b7:c7:61:03:54:fc:21:bd:da:3b:a6:80:
         69:44:22:2e:49:3f:bc:be:a0:ca:7b:d8:83:ff:05:ad:68:c9:
         69:e6:a7:d7:c9:8f:71:16:06:12:9a:c7:22:f0:b5:82:b9:2f:
         46:f0:f3:39:c6:ef:40:08:01:a4:c3:85:b2:24:ed:aa:2a:6d:
         92:70:8c:a2:e5:0b:ff:20:c4:77:d8:91:43:e9:42:36:e4:6c:
         da:dc:fe:1a:b9:54:35:dd:f4:b9:c8:fc:6d:46:f2:e5:7d:0f:
         74:23:a2:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZK3dAFrWVllbMQ9rfrJTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzNmMjk5ZWE5YTJkYjgyYjAwNDM1ZDRiM2QxNjBlYzQz
YzQyZDYwHhcNMjYwNDE3MDIwMDU1WhcNMjYwNDE4MDIwMDU1WjAzMTEwLwYDVQQD
EyhjOTEyMzJiMGJjYzcyZGQxODJlNjQ4MDllYTNmMzg0OTg0NGZlMGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vWiNRuRrOhh+ZWwmZ74BZJ1mEHP
BNXYiEDg0HSIylvP4xEVo2rhvtSqu6jFFUIsFnkfy1a382G/J34gWSf0zQuLAyw3
YvyNDbiAXygetYTFNIPWwQ+348EE6ABPsoemMLMY9KFjiDHmc2x6KPvCQMQ6YTKe
j/8+PrmSu17xU8rf30UYOSvc3+SNrRDaqCtrfq0iL/9Tol1Hoa+C7pFVkXrwyqXT
dTqumh2FP4Fe1Zgz/YG/G4rNiWTcdhkhHDXRWPswbDU8vMjp4hRkmDLKQVUYIhNt
usQPzktVvflo2/EPOV7c7dQ3H3p4p+WLoRMc8XAhjmCURPJ6+0LQGLnljwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMkSMrC8xy3RguZICeo/OEmET+DTMB8GA1UdIwQY
MBaAFBYz8pnqmi24KwBDXUs9Fg7EPELWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEt
NzlhODI5MWIxNTdmLzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEtNzlhODI5MWIxNTdm
LzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2DaNOP6
lY7U8Xfm5pBTo/Qz6rq/H7QfmAG9PPs+atYzLmq3a+ib/Qbn5rYtzO7wcimuDjjc
+KKXVox1gQAIBu1xZa0ZyzCeGsPrz8+OtDAjccPo+wOJRDTIycXGnqAo/b9Bz6vR
QJCo6QWiF+We5QtQzb/Rq0Vjbjwi4dWQqEMvoozWgT8CwIeOXQ+5kucim4xx13go
t8dhA1T8Ib3aO6aAaUQiLkk/vL6gynvYg/8FrWjJaean18mPcRYGEprHIvC1grkv
RvDzOcbvQAgBpMOFsiTtqiptknCMouUL/yDEd9iRQ+lCNuRs2tz+GrlUNd30ucj8
bUby5X0PdCOixA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:20:05 2026 by rpki-client