Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
File:                     FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json)
Hash identifier:          avddSVbf4PKbyd2VBYEUcxMPqYQx24L7fRvEW/tV7V8=
Subject key identifier:   42:25:8C:10:3E:BE:01:A4:C8:94:50:D6:3C:B1:12:D8:85:94:FC:74
Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95
Certificate issuer:       /CN=1492a20754c9a7650b8279b9390689c469d73595
Certificate serial:       01A0CE247C9DCFE8D02729311279B7B7DC99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
Manifest number:          1A6D
Signing time:             Wed 23 Sep 2026 12:01:32 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:32 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:32 +0000
Files and hashes:         1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: bmwT0zkIoHxI06W/a9QyzbZ4SGXe1qGj/uji6sU5FCE=)
                          2: UTis-WRbY-GU5C280jtcweSQcGM.roa (hash: nSL7O1zv/Owqh3yoxdhgakgYNvWvR6WzZovijGhXAe0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:7c:9d:cf:e8:d0:27:29:31:12:79:b7:b7:dc:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595
        Validity
            Not Before: Sep 23 12:01:32 2026 GMT
            Not After : Sep 24 12:01:32 2026 GMT
        Subject: CN=42258c103ebe01a4c89450d63cb112d88594fc74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:de:1d:f3:94:37:92:f4:00:b5:46:b4:57:
                    dd:cb:b3:fb:c8:a2:f6:1c:cf:9a:4d:9a:d3:5d:9d:
                    b0:bd:57:89:ba:09:0e:c4:9c:11:14:57:5c:23:c9:
                    9e:1b:54:28:55:fb:20:07:2a:1d:76:17:2d:4e:86:
                    8b:ae:19:93:66:b3:6f:70:37:83:05:8f:5a:6f:ca:
                    6e:ed:67:61:da:5d:68:7c:55:40:5c:e7:a4:8b:d6:
                    f6:d6:2a:37:ce:03:35:82:d7:a3:31:bb:68:ae:d2:
                    44:43:a4:c2:1b:6a:58:a3:48:da:8e:f7:c8:54:07:
                    77:75:1a:d2:b8:c3:65:00:dd:0f:54:ce:e9:bb:d7:
                    7c:d6:e8:9b:ad:72:d0:7f:f1:66:0a:da:9a:70:fa:
                    7a:de:d4:f4:97:98:24:4b:c0:b3:ba:b5:33:bf:2b:
                    b1:47:a4:4a:30:36:df:45:61:f9:12:46:13:a9:0c:
                    b0:4c:25:fb:81:5b:1a:c8:13:25:65:73:71:6f:2d:
                    a1:0b:da:9d:89:14:e9:03:fe:23:2f:35:39:4d:2b:
                    81:16:e2:29:33:ab:52:6a:8f:02:49:1e:30:13:8f:
                    ab:04:0b:4c:21:78:39:3a:fb:21:04:97:0e:14:37:
                    2c:b0:c2:50:98:a3:a9:0d:db:f3:e0:be:28:5b:5f:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:25:8C:10:3E:BE:01:A4:C8:94:50:D6:3C:B1:12:D8:85:94:FC:74
            X509v3 Authority Key Identifier:
                keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0d:0c:34:fd:9a:65:d7:25:27:ef:1d:14:1f:4d:21:e1:14:
         a3:50:21:54:a9:0d:9c:21:10:e5:46:42:31:ea:1b:1e:d4:f7:
         b1:2b:8a:3f:ff:a2:4d:fb:cf:cc:fd:4a:fb:40:b6:3f:1d:80:
         68:87:0e:05:43:c5:b3:01:53:df:1f:ff:4b:5c:1c:e8:a7:fa:
         e6:fa:14:fa:0a:7d:b3:1f:f7:79:25:c6:dd:e2:2b:6a:b8:f2:
         14:2f:33:2c:2f:51:16:3b:21:99:1b:ae:99:45:54:4d:07:8f:
         01:2a:6e:e2:c9:96:e9:e9:6d:52:b0:9a:61:7e:b0:32:3b:42:
         5d:18:1c:59:2d:8d:d6:64:bf:a1:71:25:83:0f:65:94:c0:86:
         a1:ae:ae:2d:a6:45:8f:25:92:a2:c4:b9:4f:f8:4b:5a:8e:1d:
         2e:46:0c:d3:50:bd:5c:1e:d3:53:d1:e2:56:c0:98:52:65:5e:
         a4:ae:05:33:42:29:77:4d:b6:fd:b2:90:e8:54:ba:9b:26:a2:
         e5:d4:b1:15:41:f1:bc:ba:f5:1e:22:06:89:0f:da:b9:32:b0:
         77:0a:84:f7:43:48:62:24:d7:0a:d1:25:93:c0:ef:76:38:af:
         96:dc:22:f0:77:21:d4:e2:01:2a:70:b7:de:01:0f:49:4d:a9:
         e2:c2:55:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOJHydz+jQJykxEnm3t9yZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk
NzM1OTUwHhcNMjYwOTIzMTIwMTMyWhcNMjYwOTI0MTIwMTMyWjAzMTEwLwYDVQQD
Eyg0MjI1OGMxMDNlYmUwMWE0Yzg5NDUwZDYzY2IxMTJkODg1OTRmYzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD7eHfOUN5L0ALVGtFfdy7P7yKL2
HM+aTZrTXZ2wvVeJugkOxJwRFFdcI8meG1QoVfsgByoddhctToaLrhmTZrNvcDeD
BY9ab8pu7Wdh2l1ofFVAXOeki9b21io3zgM1gtejMbtortJEQ6TCG2pYo0jajvfI
VAd3dRrSuMNlAN0PVM7pu9d81uibrXLQf/FmCtqacPp63tT0l5gkS8CzurUzvyux
R6RKMDbfRWH5EkYTqQywTCX7gVsayBMlZXNxby2hC9qdiRTpA/4jLzU5TSuBFuIp
M6tSao8CSR4wE4+rBAtMIXg5OvshBJcOFDcssMJQmKOpDdvz4L4oW19+9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIljBA+vgGkyJRQ1jyxEtiFlPx0MB8GA1UdIwQY
MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt
Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm
LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABA0MNP2a
ZdclJ+8dFB9NIeEUo1AhVKkNnCEQ5UZCMeobHtT3sSuKP/+iTfvPzP1K+0C2Px2A
aIcOBUPFswFT3x//S1wc6Kf65voU+gp9sx/3eSXG3eIrarjyFC8zLC9RFjshmRuu
mUVUTQePASpu4smW6eltUrCaYX6wMjtCXRgcWS2N1mS/oXElgw9llMCGoa6uLaZF
jyWSosS5T/hLWo4dLkYM01C9XB7TU9HiVsCYUmVepK4FM0Ipd022/bKQ6FS6myai
5dSxFUHxvLr1HiIGiQ/auTKwdwqE90NIYiTXCtElk8Dvdjivltwi8Hch1OIBKnC3
3gEPSU2p4sJVEg==
-----END CERTIFICATE-----
Generated at Wed Sep 23 18:19:25 2026 by rpki-client