Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
File:                     FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json)
Hash identifier:          WbBRCGIOdBT/JzJDryECH69NwtIk0h4VT4WWE2p/pPw=
Subject key identifier:   C2:44:E7:EA:62:A1:B8:49:49:EE:F8:66:19:D0:89:D8:24:9F:24:E3
Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6
Certificate issuer:       /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
Certificate serial:       019D98502438821199849290865850DCEA56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
Manifest number:          18D6
Signing time:             Thu 16 Apr 2026 22:01:22 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:22 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:22 +0000
Files and hashes:         1: 9Z9moOZMdjY1r0zisn1yG40T_Cs.roa (hash: 4qv97AavysG7gQ9zDpXhKGyy5MypOYdpddszCCL6JGA=)
                          2: Ax8-r-En_jV12HWCMP3xAmC-QDo.roa (hash: DTlvOtpcsab+lqdAbmVznR+Ar32K7k6eVkxqJFUVOG0=)
                          3: ChgBgVFuABIzwh66-TkKdZEX1iA.roa (hash: SVqR9Q8a5Hcp/asmqFGw5DEUG2TomIZWg2fteQrE3uY=)
                          4: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: kXJl4U6tAHNP0cj6DUymN6wCs/qPaGmpQQxOX2v7qbU=)
                          5: M4VIxAsjnWUbH6wj5hZONC0aLhc.roa (hash: gupzBjiIjp4MhIgh1kYK1O3xRS4nwuhoT78Vii8+xOk=)
                          6: M4YwzZnQpTpEIjJJQTa20n-PbwA.roa (hash: X4daXjz6hYdjbJNKtkZTJmDcLRTv0QGjJCHi4DW4ijk=)
                          7: NaxJ_NtLLDPENMvIhnNYLJraogc.roa (hash: 9owN2kSmqV6nvpiOXXWT2m/HU07KMLcW8IIUJ10ZKd0=)
                          8: YPx2c3RYrM8Uay8p-Jhbf6qFkfY.roa (hash: jPgFrnzK9XdaahAH17/G4k3SsWjfA1hQSptv2wqHEDM=)
                          9: f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa (hash: EgTfusTv2nkLjwq0TfPSW/EGFdZmepXuwghsp1RK2Ig=)
                          10: fF_JColRqe6k3b-dBUqfmSs3itY.roa (hash: QBb4ezm0BlO8dOz2Yfe88q5rYV5TSLEjJ01d5h6AZcw=)
                          11: hJODD-xae4GPfgCvm7u_1biBHW8.roa (hash: bwel4sYC9ovxgVCjU95RSPer2KsFebCbfOZutFD0aHE=)
                          12: ls2jvaZs7k_InUrbbNoPbvZ36vk.roa (hash: fIXofnEy1iYP/NYn3TCqqqwLir6u1PH+g1WJfBcU9ns=)
                          13: qPCjKFrGlCNUHjx_vor1JA3jHb8.roa (hash: l+K/oYAVSbzs8nUlzmSSgb/G/fJy3yi4irQ8IvElAgY=)
                          14: s7oo8h_lGdHA5B183SrGieJU08Y.roa (hash: jWktarjEvs1eZ/T6K2gwxO8ZGGgdn9UvYfnH2e8sE8Q=)
                          15: uJw0ADc8Jn_tUrRAslqVcsOv5r4.roa (hash: tvo4GlgyFEqW+8NWX03vTaovLhf5PDKLye47pitknWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:24:38:82:11:99:84:92:90:86:58:50:dc:ea:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6
        Validity
            Not Before: Apr 16 22:01:22 2026 GMT
            Not After : Apr 17 22:01:22 2026 GMT
        Subject: CN=c244e7ea62a1b84949eef86619d089d8249f24e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:b4:be:26:50:39:4d:dc:ed:0d:e4:f1:b2:
                    9a:ab:40:33:5f:5f:77:0f:a7:d9:92:48:37:e3:7b:
                    5d:19:5d:ce:77:99:9b:96:77:60:93:25:7c:d1:d3:
                    50:9d:b8:d6:2b:66:08:ee:c3:4a:b4:13:2a:05:e5:
                    3e:0b:87:a5:60:b4:fc:cf:40:68:c9:6f:b5:e9:1f:
                    52:64:4c:3d:c0:95:39:19:08:51:d7:9b:a8:be:d5:
                    5c:72:65:63:b8:d0:fc:a5:0f:69:b8:e7:68:23:61:
                    16:1c:e4:53:dd:12:1c:01:31:bd:f4:c1:db:78:14:
                    e0:b6:a4:00:21:19:07:9b:32:e3:cb:1c:02:5c:c6:
                    fb:78:8d:e8:a2:d3:64:10:26:26:ee:88:30:3e:6a:
                    ed:86:3b:f4:29:af:62:32:09:92:25:a3:e7:b2:c3:
                    ca:83:a3:6d:1c:21:7b:fb:ce:a4:da:d1:c0:04:e5:
                    cd:49:a7:22:bc:b2:c7:9a:b2:f7:ec:d9:80:7b:12:
                    6e:5c:f5:ee:09:e9:2c:87:e8:34:89:8a:5a:bb:35:
                    07:f2:ed:88:f3:13:59:0d:34:9e:b5:80:b6:7d:78:
                    7b:d6:6e:dd:db:a2:51:6d:fc:b2:20:6a:f6:fa:26:
                    cf:4f:c3:df:1e:fe:cb:df:44:37:3b:5b:13:0e:ec:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:44:E7:EA:62:A1:B8:49:49:EE:F8:66:19:D0:89:D8:24:9F:24:E3
            X509v3 Authority Key Identifier:
                keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3c:c1:88:d7:dc:88:87:5e:e3:d1:28:1a:e4:9e:b6:37:1f:
         a3:18:8a:cf:fd:fd:7d:51:74:b7:32:6b:fa:bb:af:3c:35:f3:
         dc:2b:98:de:fe:db:96:88:f6:04:5f:50:60:20:db:72:52:dc:
         c8:bc:0b:f3:35:60:16:85:7e:15:6b:0b:63:f9:c6:02:d3:cc:
         83:55:55:54:3e:41:ba:a8:9d:fa:54:c3:c4:c4:11:4d:3d:01:
         69:a4:db:25:22:14:50:f9:b2:87:a3:b8:b8:ab:19:86:38:21:
         b5:f6:3d:12:d0:7e:22:a0:00:0e:40:03:f6:93:50:86:33:7d:
         8f:39:00:48:43:23:71:fc:e5:3f:a6:95:fb:39:22:34:fc:c5:
         48:ab:a3:05:ae:2b:88:07:34:73:b7:46:3a:11:26:e2:78:5d:
         69:1b:eb:b0:31:4e:0c:41:24:60:83:a1:ae:95:b8:b6:86:a7:
         db:f4:9f:a5:8b:68:18:0c:d9:e3:a6:5e:b5:26:96:3f:f8:f1:
         bf:27:fd:2a:42:43:5a:44:af:dd:94:13:ef:39:40:b6:7c:4c:
         6d:77:11:33:53:92:a2:9e:9d:cc:12:83:4f:2f:7c:1e:0f:d7:
         fc:6e:a3:5a:fb:53:ba:a7:e6:3e:44:65:b8:cc:04:e4:df:d0:
         e2:da:e7:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUCQ4ghGZhJKQhlhQ3OpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk
MTRjYzYwHhcNMjYwNDE2MjIwMTIyWhcNMjYwNDE3MjIwMTIyWjAzMTEwLwYDVQQD
EyhjMjQ0ZTdlYTYyYTFiODQ5NDllZWY4NjYxOWQwODlkODI0OWYyNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgq0viZQOU3c7Q3k8bKaq0AzX193
D6fZkkg343tdGV3Od5mblndgkyV80dNQnbjWK2YI7sNKtBMqBeU+C4elYLT8z0Bo
yW+16R9SZEw9wJU5GQhR15uovtVccmVjuND8pQ9puOdoI2EWHORT3RIcATG99MHb
eBTgtqQAIRkHmzLjyxwCXMb7eI3ootNkECYm7ogwPmrthjv0Ka9iMgmSJaPnssPK
g6NtHCF7+86k2tHABOXNSacivLLHmrL37NmAexJuXPXuCeksh+g0iYpauzUH8u2I
8xNZDTSetYC2fXh71m7d26JRbfyyIGr2+ibPT8PfHv7L30Q3O1sTDuzqeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJE5+piobhJSe74ZhnQidgknyTjMB8GA1UdIwQY
MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt
ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx
LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjzzBiNfc
iIde49EoGuSetjcfoxiKz/39fVF0tzJr+ruvPDXz3CuY3v7bloj2BF9QYCDbclLc
yLwL8zVgFoV+FWsLY/nGAtPMg1VVVD5Buqid+lTDxMQRTT0BaaTbJSIUUPmyh6O4
uKsZhjghtfY9EtB+IqAADkAD9pNQhjN9jzkASEMjcfzlP6aV+zkiNPzFSKujBa4r
iAc0c7dGOhEm4nhdaRvrsDFODEEkYIOhrpW4toan2/SfpYtoGAzZ46ZetSaWP/jx
vyf9KkJDWkSv3ZQT7zlAtnxMbXcRM1OSop6dzBKDTy98Hg/X/G6jWvtTuqfmPkRl
uMwE5N/Q4trn+w==
-----END CERTIFICATE-----
Generated at Thu Apr 16 23:56:33 2026 by rpki-client