Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
File:                     fhFniG2oFSRDG78u-wVykUtobrw.mft (raw, json)
Hash identifier:          TL8kp43ZHRNltrqeoXJ8eGSbHaS7KWFMV1wNzSfecKI=
Subject key identifier:   55:04:74:1B:40:80:FE:76:90:D5:60:86:EE:C8:02:EE:BE:B1:E9:A2
Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC
Certificate issuer:       /CN=7e1167886da81524431bbf2efb0572914b686ebc
Certificate serial:       019D9A74CB418DEDDC76AC0DBB2103E78274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
Manifest number:          0EB9
Signing time:             Fri 17 Apr 2026 08:00:38 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:38 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:38 +0000
Files and hashes:         1: 6TdIaoE-7jQiTNh_dWHlpwe6UDo.roa (hash: j4t4I6cY/9eHSVrCrZ3KgotxYKtqwlRdd6z9B4fKbI4=)
                          2: 8jiMmtjBP-Nl5CilvW2gvoNo4Kk.roa (hash: wwioWnWaBsWC9aXvqkrOolVE9wvD6iqSMIbgZIUy8Z0=)
                          3: M-CNQ4sKZCkmxmSMpP77FW0ZRzE.roa (hash: UdJnYqAMGHmI8rbxklRX18DI3O/ycqsbsTsYHZeAV1g=)
                          4: bPn6Pnrnq_fR0whtvig8NC0wE0s.roa (hash: h+p2mlfebNvV+IBAlzDzoCLea72ZuA/UCOZBu/ku9aE=)
                          5: fhFniG2oFSRDG78u-wVykUtobrw.crl (hash: W9O6J6v05bc2ki3qcxQMGqMBrGTq1LYdVHUo8fPpETI=)
                          6: ywfKrP4cRTy2QlVvbLFd6cmyt18.roa (hash: Gmr+SV2YTd76CuhRcbMnXPX7jhYpfpofEYm1FZomnvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:74:cb:41:8d:ed:dc:76:ac:0d:bb:21:03:e7:82:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc
        Validity
            Not Before: Apr 17 08:00:38 2026 GMT
            Not After : Apr 18 08:00:38 2026 GMT
        Subject: CN=5504741b4080fe7690d56086eec802eebeb1e9a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b8:f3:c7:36:85:96:c7:8d:7b:c2:0c:3d:99:
                    f1:3d:8b:0c:83:40:69:72:cd:1f:e5:b1:7e:7d:f1:
                    ec:32:bc:38:1e:c9:5c:e5:0e:68:c1:98:3a:98:de:
                    c0:cf:a4:c8:76:1d:6d:27:94:62:db:f0:3c:f9:f9:
                    6c:e0:8e:74:70:0c:3b:bc:e5:fc:aa:a1:e8:63:2a:
                    41:47:19:7a:60:15:7d:fb:03:31:80:15:48:62:e2:
                    d1:b1:bf:d8:1b:e7:17:d7:cc:0c:d4:9c:a6:83:15:
                    f0:02:b1:39:a9:e8:75:45:52:4f:a9:71:80:b1:6a:
                    64:59:bc:31:db:a1:58:94:2e:79:d3:a3:29:31:37:
                    ad:df:86:8e:70:f8:a6:d5:af:73:16:de:59:1a:2b:
                    71:2a:c8:0d:18:45:6a:98:1a:0c:af:a3:94:10:3f:
                    4a:f9:40:bb:df:dc:19:ff:47:65:77:02:87:3e:64:
                    22:3e:bd:c4:71:f2:b7:57:ef:de:5d:86:39:05:90:
                    35:3f:48:d3:90:01:17:7e:5a:db:71:cb:f2:d1:4f:
                    89:04:65:e6:89:de:c2:bf:51:d9:0c:ae:85:3f:c2:
                    8e:76:86:7d:38:ed:93:ed:f9:97:97:86:6a:7f:dd:
                    7f:19:77:db:68:cc:9e:34:ff:9b:7e:6a:1e:b0:4d:
                    d1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:04:74:1B:40:80:FE:76:90:D5:60:86:EE:C8:02:EE:BE:B1:E9:A2
            X509v3 Authority Key Identifier:
                keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:29:a2:0c:3e:a3:e6:86:51:8f:b2:ff:d3:66:a9:46:df:7f:
         ac:9e:c8:08:bb:ee:83:fc:07:5f:cb:f1:64:8e:c3:c2:ef:35:
         98:0b:75:87:a2:a1:58:23:77:b0:7c:a4:1f:59:ac:8e:6b:f6:
         2c:c6:f4:e0:7c:66:5a:02:47:b1:f2:e2:c9:f8:ff:c9:6b:f7:
         58:88:d6:a1:80:e5:15:63:29:f1:29:76:5a:fe:80:88:3e:3f:
         d4:e4:e1:75:d1:8d:bd:ec:7a:6b:44:ec:23:ec:63:ff:7a:76:
         2a:bb:23:2f:26:c5:86:53:2e:1a:9e:a2:3e:19:a4:d4:97:50:
         2b:dc:b9:65:f6:e2:df:85:e6:3b:83:9b:10:f5:e9:c7:a7:24:
         3f:be:dd:74:8a:1e:b6:6d:c1:0d:19:fa:43:46:cb:b2:7a:3c:
         0c:be:1b:a2:d2:e9:45:d2:9b:09:a0:f0:af:ce:da:45:70:0a:
         0b:28:75:7f:30:a7:75:69:c2:23:56:48:de:7f:23:e6:ce:aa:
         fa:0d:c0:ac:58:7f:c2:7f:29:93:97:26:ba:12:91:f2:4c:6e:
         92:bc:72:51:39:11:b4:ca:11:90:0e:4e:8b:c0:e9:ae:61:4c:
         72:c4:61:fb:06:24:43:ee:0c:90:83:c2:86:55:64:10:a6:89:
         a1:38:2a:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adMtBje3cdqwNuyED54J0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTE2Nzg4NmRhODE1MjQ0MzFiYmYyZWZiMDU3MjkxNGI2
ODZlYmMwHhcNMjYwNDE3MDgwMDM4WhcNMjYwNDE4MDgwMDM4WjAzMTEwLwYDVQQD
Eyg1NTA0NzQxYjQwODBmZTc2OTBkNTYwODZlZWM4MDJlZWJlYjFlOWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybjzxzaFlseNe8IMPZnxPYsMg0Bp
cs0f5bF+ffHsMrw4Hslc5Q5owZg6mN7Az6TIdh1tJ5Ri2/A8+fls4I50cAw7vOX8
qqHoYypBRxl6YBV9+wMxgBVIYuLRsb/YG+cX18wM1JymgxXwArE5qeh1RVJPqXGA
sWpkWbwx26FYlC5506MpMTet34aOcPim1a9zFt5ZGitxKsgNGEVqmBoMr6OUED9K
+UC739wZ/0dldwKHPmQiPr3EcfK3V+/eXYY5BZA1P0jTkAEXflrbccvy0U+JBGXm
id7Cv1HZDK6FP8KOdoZ9OO2T7fmXl4Zqf91/GXfbaMyeNP+bfmoesE3R1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFUEdBtAgP52kNVghu7IAu6+semiMB8GA1UdIwQY
MBaAFH4RZ4htqBUkQxu/LvsFcpFLaG68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYt
OWIyODJjNjQzMjU2LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYtOWIyODJjNjQzMjU2
LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjCmiDD6j
5oZRj7L/02apRt9/rJ7ICLvug/wHX8vxZI7Dwu81mAt1h6KhWCN3sHykH1msjmv2
LMb04HxmWgJHsfLiyfj/yWv3WIjWoYDlFWMp8Sl2Wv6AiD4/1OThddGNvex6a0Ts
I+xj/3p2KrsjLybFhlMuGp6iPhmk1JdQK9y5Zfbi34XmO4ObEPXpx6ckP77ddIoe
tm3BDRn6Q0bLsno8DL4botLpRdKbCaDwr87aRXAKCyh1fzCndWnCI1ZI3n8j5s6q
+g3ArFh/wn8pk5cmuhKR8kxukrxyUTkRtMoRkA5Oi8DprmFMcsRh+wYkQ+4MkIPC
hlVkEKaJoTgq1w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:34:11 2026 by rpki-client