Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
File:                     FFAQ3dLG97ZEpQAsseTuFixj0dc.mft (raw, json)
Hash identifier:          q/8BpVmbf+uNYxe9W5Zk43dq+Ms8D01o+kL2PxIzBu0=
Subject key identifier:   58:8D:3C:8A:9C:2E:4A:85:D7:33:AB:1E:D5:B9:3C:1A:3A:2B:82:BA
Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7
Certificate issuer:       /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
Certificate serial:       019EC0DB65381697A248ED11EA6C7254C305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
Manifest number:          015F
Signing time:             Sat 13 Jun 2026 12:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 12:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 12:01:04 +0000
Files and hashes:         1: FFAQ3dLG97ZEpQAsseTuFixj0dc.crl (hash: RWyGDK1hX05eomnJdfP56kQtb8KT22o1KhVrcZzqsGg=)
                          2: vq82IEcQtF-WpfPnhIhgfebzHDk.roa (hash: 1OV+pDCPKjRkZqon595wjlus9Od7oqEkMW7DsdSGgek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:65:38:16:97:a2:48:ed:11:ea:6c:72:54:c3:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7
        Validity
            Not Before: Jun 13 12:01:04 2026 GMT
            Not After : Jun 14 12:01:04 2026 GMT
        Subject: CN=588d3c8a9c2e4a85d733ab1ed5b93c1a3a2b82ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:7d:f8:30:a9:4c:48:09:64:97:58:45:ee:
                    00:a5:af:1c:bb:54:29:ca:db:fb:e1:64:4d:84:74:
                    f1:9b:63:b3:a7:f2:38:db:c9:84:5e:35:91:38:5b:
                    e8:5b:eb:9b:ea:9e:14:20:df:89:17:19:7c:89:76:
                    57:81:36:50:b9:ed:df:13:6b:b7:01:e3:05:1c:f8:
                    b6:71:e1:a2:d2:89:d4:08:a7:3a:ef:c5:aa:36:7e:
                    f7:0d:ef:ae:95:4b:bd:a9:24:9f:09:2c:4d:96:6b:
                    a2:70:64:13:30:81:e3:50:4c:ac:94:fc:e4:53:d1:
                    fa:fb:39:52:9c:fb:89:0e:87:29:3c:ba:46:38:e6:
                    47:eb:05:24:a7:36:1d:01:c3:b4:98:96:7b:4b:d3:
                    e8:d2:89:32:04:6e:8e:a3:74:a0:55:f3:92:97:c3:
                    cf:c2:ea:8d:4b:d5:ef:df:34:fa:5b:a5:cb:3d:5c:
                    93:20:b5:1b:1d:77:78:68:cf:39:6b:e2:c5:08:df:
                    c9:15:75:db:fd:9e:f9:00:40:bd:3c:7d:05:cd:f2:
                    13:37:c7:50:38:56:e1:a5:f3:d7:57:34:7b:39:5a:
                    02:6a:d6:bf:e0:3d:d7:07:70:92:cc:07:24:03:17:
                    be:a1:14:cd:41:f9:97:f7:38:14:94:fb:5f:18:01:
                    26:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8D:3C:8A:9C:2E:4A:85:D7:33:AB:1E:D5:B9:3C:1A:3A:2B:82:BA
            X509v3 Authority Key Identifier:
                keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f1:76:2c:eb:96:6d:d3:4d:d6:be:8e:14:53:ed:85:4b:4b:
         8c:67:75:5f:41:86:eb:97:bd:90:da:53:52:f7:15:fd:90:d4:
         27:23:f4:fc:b6:57:45:dd:34:82:2a:fc:f3:25:a2:08:9b:de:
         aa:32:17:55:5e:b9:7a:3b:34:2e:b2:ea:a8:2a:5f:83:3d:af:
         8e:3e:cb:df:2b:98:9b:13:b2:1c:b8:a3:96:c1:7e:e3:27:61:
         3b:af:57:c1:7b:16:4e:24:38:91:76:6c:8e:c0:a9:cf:fe:c4:
         89:64:a0:6a:cc:d0:34:83:7d:b2:78:65:40:44:cd:69:3a:11:
         1b:33:61:1c:bb:e4:ca:58:77:91:2a:33:91:9c:d8:a3:70:53:
         d7:d2:fa:fd:02:2d:9d:7b:66:db:5c:94:f6:a4:3a:cf:38:d4:
         57:ad:30:0f:7e:bf:1d:77:49:dd:d9:d4:80:d1:c6:83:a6:3a:
         ff:fb:17:a8:29:7c:93:28:11:9c:0a:b0:21:7f:fd:14:98:d6:
         44:e8:c4:d3:68:4a:c6:aa:ce:f9:3d:4f:5f:e9:cf:95:90:9d:
         bd:65:5e:16:49:d9:45:94:8b:5e:b6:22:08:f8:5b:05:c8:f9:
         1f:52:0b:42:18:dc:53:b7:7a:62:c4:9d:fb:f0:a9:e8:f3:ef:
         ec:8a:4f:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A22U4FpeiSO0R6mxyVMMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NTAxMGRkZDJjNmY3YjY0NGE1MDAyY2IxZTRlZTE2MmM2
M2QxZDcwHhcNMjYwNjEzMTIwMTA0WhcNMjYwNjE0MTIwMTA0WjAzMTEwLwYDVQQD
Eyg1ODhkM2M4YTljMmU0YTg1ZDczM2FiMWVkNWI5M2MxYTNhMmI4MmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApel9+DCpTEgJZJdYRe4Apa8cu1Qp
ytv74WRNhHTxm2Ozp/I428mEXjWROFvoW+ub6p4UIN+JFxl8iXZXgTZQue3fE2u3
AeMFHPi2ceGi0onUCKc678WqNn73De+ulUu9qSSfCSxNlmuicGQTMIHjUEyslPzk
U9H6+zlSnPuJDocpPLpGOOZH6wUkpzYdAcO0mJZ7S9Po0okyBG6Oo3SgVfOSl8PP
wuqNS9Xv3zT6W6XLPVyTILUbHXd4aM85a+LFCN/JFXXb/Z75AEC9PH0FzfITN8dQ
OFbhpfPXVzR7OVoCata/4D3XB3CSzAckAxe+oRTNQfmX9zgUlPtfGAEm7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiNPIqcLkqF1zOrHtW5PBo6K4K6MB8GA1UdIwQY
MBaAFBRQEN3Sxve2RKUALLHk7hYsY9HXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkZBUTNkTEc5N1pFcFFBc3NlVHVGaXhqMGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOWRiMGUtZjg1Ni00NDZhLTg0Zjgt
NjZkZmY2MDk1MGRhLzEvRkZBUTNkTEc5N1pFcFFBc3NlVHVGaXhqMGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iOWRiMGUtZjg1Ni00NDZhLTg0ZjgtNjZkZmY2MDk1MGRh
LzEvRkZBUTNkTEc5N1pFcFFBc3NlVHVGaXhqMGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWfF2LOuW
bdNN1r6OFFPthUtLjGd1X0GG65e9kNpTUvcV/ZDUJyP0/LZXRd00gir88yWiCJve
qjIXVV65ejs0LrLqqCpfgz2vjj7L3yuYmxOyHLijlsF+4ydhO69XwXsWTiQ4kXZs
jsCpz/7EiWSgaszQNIN9snhlQETNaToRGzNhHLvkylh3kSozkZzYo3BT19L6/QIt
nXtm21yU9qQ6zzjUV60wD36/HXdJ3dnUgNHGg6Y6//sXqCl8kygRnAqwIX/9FJjW
ROjE02hKxqrO+T1PX+nPlZCdvWVeFknZRZSLXrYiCPhbBcj5H1ILQhjcU7d6YsSd
+/Cp6PPv7IpPkw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:58:04 2026 by rpki-client