Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
File:                     FLcYAN3cSX9g-e23gzyUlzq33Bw.mft (raw, json)
Hash identifier:          sHz4ZBoNTknN87b40m7J38zMFIk1rq4Uj2mkxMW1f54=
Subject key identifier:   C9:9A:B6:C4:DF:8A:58:F0:B5:24:95:84:F7:E2:5A:8A:39:2A:C6:B4
Authority key identifier: 14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C
Certificate issuer:       /CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
Certificate serial:       01A10693E62EE08F9193D235F9FD938A3165
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
Manifest number:          1974
Signing time:             Sun 04 Oct 2026 11:01:58 +0000
Manifest this update:     Sun 04 Oct 2026 11:01:58 +0000
Manifest next update:     Mon 05 Oct 2026 11:01:58 +0000
Files and hashes:         1: CmtFVtO9hzZe40i8krBc2erjmj0.roa (hash: zXgMe4Op7B660E2hvvLX+Q3KPKDasJwTTDrEF1VufuM=)
                          2: FLcYAN3cSX9g-e23gzyUlzq33Bw.crl (hash: FwnghdQzvPg+P/Y6Uqa+CXbZoWKQPf3E6qU316GsAZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:93:e6:2e:e0:8f:91:93:d2:35:f9:fd:93:8a:31:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14b71800dddc497f60f9edb7833c94973ab7dc1c
        Validity
            Not Before: Oct  4 11:01:58 2026 GMT
            Not After : Oct  5 11:01:58 2026 GMT
        Subject: CN=c99ab6c4df8a58f0b5249584f7e25a8a392ac6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cc:29:d7:09:d6:24:b2:9a:65:df:04:79:0f:
                    c9:70:29:3c:16:8d:bb:15:e8:36:06:8c:c7:12:ed:
                    2d:63:14:29:fd:e0:e4:00:f7:0a:e7:22:f0:07:a2:
                    60:3e:44:99:40:39:dc:1a:de:e4:5a:23:52:c5:20:
                    ab:ef:7f:ca:94:e5:c2:be:46:49:6a:d7:eb:1e:11:
                    a1:f4:dc:32:86:73:be:b4:65:ce:e8:82:ae:7a:d4:
                    2c:cf:80:c6:eb:f9:b4:1c:3e:c2:39:c2:cc:9c:41:
                    cf:e2:6d:d5:da:b9:f9:b6:a5:68:2b:82:68:56:c4:
                    43:e7:8a:f8:1a:7a:c5:f0:9b:66:ae:0d:67:47:d8:
                    1f:ff:86:29:e3:7d:b4:a7:af:df:8d:dd:ae:31:a1:
                    ac:62:19:46:bb:db:ed:f0:97:f6:95:30:33:62:78:
                    84:da:d3:22:8e:68:45:3c:61:5e:42:7f:a9:41:25:
                    77:07:8b:76:56:74:f4:8a:ac:d6:35:17:1c:a5:c6:
                    8d:d8:0f:22:58:7e:75:7a:d4:c9:b9:34:f7:fe:bc:
                    81:8d:45:82:69:62:02:cc:a1:d7:eb:96:ff:00:7e:
                    42:79:c4:1f:2a:93:4e:ef:df:93:b9:84:3e:72:df:
                    cc:f0:d2:a0:17:76:5a:76:7a:43:93:62:7d:f6:d3:
                    4a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9A:B6:C4:DF:8A:58:F0:B5:24:95:84:F7:E2:5A:8A:39:2A:C6:B4
            X509v3 Authority Key Identifier:
                keyid:14:B7:18:00:DD:DC:49:7F:60:F9:ED:B7:83:3C:94:97:3A:B7:DC:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FLcYAN3cSX9g-e23gzyUlzq33Bw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/415d4b-f7a6-49d6-a7ad-ddf0b8b09616/1/FLcYAN3cSX9g-e23gzyUlzq33Bw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:ea:e5:f8:62:b7:4b:69:52:3f:7a:bc:cb:9f:02:69:54:b6:
         b2:81:1e:14:ed:68:19:24:b1:5d:2e:0c:cb:36:5e:f7:21:d0:
         8c:3d:a8:f8:fe:20:e5:b9:33:77:23:af:e2:e0:5e:af:e0:21:
         bd:28:c4:ca:45:f1:2a:b5:d0:0b:a0:ae:af:75:7c:15:df:5b:
         c6:63:a6:a3:3c:cc:d0:c3:70:e5:31:81:f1:d8:aa:d5:c5:79:
         a5:6c:9b:32:4b:23:88:8a:5e:ef:cd:c2:17:ad:40:08:34:56:
         64:0a:f9:46:5d:ec:bf:24:b1:f7:9d:eb:3a:8d:33:cc:3e:f7:
         9e:1f:fd:c1:bc:c8:b8:68:1a:3d:53:0a:c0:c3:c5:0c:42:de:
         0e:fd:ed:ea:f4:1b:73:4f:15:80:41:c4:b3:15:d9:7c:b1:b1:
         2b:54:43:75:71:40:67:c9:5f:f6:aa:e1:df:de:1d:3b:8b:c5:
         5f:69:29:ff:e0:01:29:24:a1:b3:96:49:db:8c:1b:97:36:18:
         8d:20:e1:90:fc:fb:9d:4d:0a:4e:ef:a7:b4:ab:ae:7f:4a:bf:
         7c:57:2c:ff:66:f4:42:19:5d:83:f7:3a:80:37:bc:73:51:58:
         8d:53:a8:7c:f6:64:11:60:14:28:be:8c:47:c4:33:ba:54:50:
         9a:c2:22:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGk+Yu4I+Rk9I1+f2TijFlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YjcxODAwZGRkYzQ5N2Y2MGY5ZWRiNzgzM2M5NDk3M2Fi
N2RjMWMwHhcNMjYxMDA0MTEwMTU4WhcNMjYxMDA1MTEwMTU4WjAzMTEwLwYDVQQD
EyhjOTlhYjZjNGRmOGE1OGYwYjUyNDk1ODRmN2UyNWE4YTM5MmFjNmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArswp1wnWJLKaZd8EeQ/JcCk8Fo27
Feg2BozHEu0tYxQp/eDkAPcK5yLwB6JgPkSZQDncGt7kWiNSxSCr73/KlOXCvkZJ
atfrHhGh9NwyhnO+tGXO6IKuetQsz4DG6/m0HD7COcLMnEHP4m3V2rn5tqVoK4Jo
VsRD54r4GnrF8Jtmrg1nR9gf/4Yp4320p6/fjd2uMaGsYhlGu9vt8Jf2lTAzYniE
2tMijmhFPGFeQn+pQSV3B4t2VnT0iqzWNRccpcaN2A8iWH51etTJuTT3/ryBjUWC
aWICzKHX65b/AH5CecQfKpNO79+TuYQ+ct/M8NKgF3ZadnpDk2J99tNKkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmatsTfiljwtSSVhPfiWoo5Ksa0MB8GA1UdIwQY
MBaAFBS3GADd3El/YPntt4M8lJc6t9wcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80MTVkNGItZjdhNi00OWQ2LWE3YWQt
ZGRmMGI4YjA5NjE2LzEvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80MTVkNGItZjdhNi00OWQ2LWE3YWQtZGRmMGI4YjA5NjE2
LzEvRkxjWUFOM2NTWDlnLWUyM2d6eVVsenEzM0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+rl+GK3
S2lSP3q8y58CaVS2soEeFO1oGSSxXS4MyzZe9yHQjD2o+P4g5bkzdyOv4uBer+Ah
vSjEykXxKrXQC6Cur3V8Fd9bxmOmozzM0MNw5TGB8diq1cV5pWybMksjiIpe783C
F61ACDRWZAr5Rl3svySx953rOo0zzD73nh/9wbzIuGgaPVMKwMPFDELeDv3t6vQb
c08VgEHEsxXZfLGxK1RDdXFAZ8lf9qrh394dO4vFX2kp/+ABKSShs5ZJ24wblzYY
jSDhkPz7nU0KTu+ntKuuf0q/fFcs/2b0Qhldg/c6gDe8c1FYjVOofPZkEWAUKL6M
R8QzulRQmsIi4Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:14:13 2026 by rpki-client