Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
File:                     fFkLczxW4U66xp97RNS8lU6TcOM.mft (raw, json)
Hash identifier:          Pr1EF80j53xh9Yhffls+LNNNcTvlArqK3y6AwN0iWM4=
Subject key identifier:   D6:BD:72:D0:47:8C:8D:31:21:63:09:39:4A:F1:0A:CA:94:4B:52:25
Authority key identifier: 7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3
Certificate issuer:       /CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
Certificate serial:       019D97E2481A09839D0E3A5C0FD1A9311864
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
Manifest number:          1596
Signing time:             Thu 16 Apr 2026 20:01:22 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:22 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:22 +0000
Files and hashes:         1: D4LM_-yMapw5el8niCLWD3O15zs.roa (hash: fm1csnGJtCUdbxvyMsvPSvwlp32QsYfLZeDz4aX3VyA=)
                          2: fFkLczxW4U66xp97RNS8lU6TcOM.crl (hash: XlzUZXviIKVFVINxw+LQOVJ3GjgpuqA7pSyB00pDKjg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:48:1a:09:83:9d:0e:3a:5c:0f:d1:a9:31:18:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c590b733c56e14ebac69f7b44d4bc954e9370e3
        Validity
            Not Before: Apr 16 20:01:22 2026 GMT
            Not After : Apr 17 20:01:22 2026 GMT
        Subject: CN=d6bd72d0478c8d31216309394af10aca944b5225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:65:22:85:54:15:38:e2:b6:1d:20:c0:32:
                    98:0c:ae:65:be:ed:84:4b:d5:1c:8b:f7:0a:9a:60:
                    89:d6:6a:8f:b8:70:8d:de:24:54:b1:15:87:5d:39:
                    aa:16:1e:e8:8c:a3:61:34:22:17:b0:90:b5:a1:bf:
                    39:3e:7e:71:34:3f:d3:38:f8:c3:d9:fb:97:27:9c:
                    0b:b2:cd:cf:b7:29:7f:cb:dd:cf:cd:85:7b:d1:5a:
                    44:90:a0:8c:4e:e8:24:86:76:59:f7:33:f8:5d:74:
                    d2:c9:48:0c:e8:a9:d7:5f:58:36:6b:2a:0b:ea:03:
                    e6:54:39:ac:c5:90:60:a2:c5:20:4e:92:be:da:75:
                    c4:49:36:0c:78:35:8b:9b:75:f9:12:53:20:ff:23:
                    1e:99:d2:52:18:67:66:de:56:f5:b8:a5:47:bd:e9:
                    bb:b8:c6:80:10:55:b3:72:25:29:fb:9a:64:c3:70:
                    48:b9:79:d2:7e:20:9b:cd:f6:7c:58:8b:18:33:fb:
                    6e:5c:92:8a:50:55:95:df:ee:b2:f7:19:e4:ea:66:
                    6d:e0:6a:9d:ea:5e:ba:96:d7:51:77:ef:fd:d2:b9:
                    ba:69:2d:b3:bc:4a:da:a6:20:c3:d3:ff:df:3d:55:
                    55:e6:4f:37:50:bd:2c:e4:0c:f5:1b:f1:13:4c:c3:
                    99:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:BD:72:D0:47:8C:8D:31:21:63:09:39:4A:F1:0A:CA:94:4B:52:25
            X509v3 Authority Key Identifier:
                keyid:7C:59:0B:73:3C:56:E1:4E:BA:C6:9F:7B:44:D4:BC:95:4E:93:70:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFkLczxW4U66xp97RNS8lU6TcOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e3b6fc-ef63-4c06-a304-f3b5e80250dd/1/fFkLczxW4U66xp97RNS8lU6TcOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:54:d4:6d:7a:db:5d:0f:76:00:99:ee:f0:52:da:9c:b1:d7:
         a1:ec:0b:25:59:18:41:ab:b0:23:ab:21:af:4c:b4:2a:af:9a:
         11:84:f7:e7:da:6c:e5:67:c7:3b:27:6a:13:79:2e:fc:fe:e5:
         6c:51:fc:ef:41:74:b0:f8:10:e9:f9:e8:6c:bc:19:0e:60:8d:
         91:f3:9d:bc:bd:a0:76:7b:de:8b:69:60:f0:96:5d:ca:fe:8d:
         6a:c7:11:fc:b9:0d:1c:b6:16:ed:99:af:3b:9a:d2:c7:ad:74:
         04:a6:b6:1a:ab:5e:ae:f5:6d:f2:b8:d2:48:4b:a4:db:35:58:
         84:9a:f6:dd:a2:7d:a9:28:0a:59:30:05:75:14:18:60:ff:ec:
         6a:81:bb:02:bb:3b:90:02:81:3b:cd:7e:e4:46:a5:ae:8f:86:
         6d:1e:2a:2f:cb:71:4e:82:31:82:0d:f6:83:66:8e:de:9d:7d:
         0b:0b:ab:05:27:f3:e0:39:ba:93:fe:fa:23:26:d8:3b:d0:9f:
         3b:9c:24:77:1c:9b:cd:1a:bc:92:a0:78:09:37:05:15:29:d9:
         f7:ee:07:d6:be:3d:9c:67:49:07:15:9e:6c:bc:91:9d:24:24:
         f5:10:dc:3b:cb:fa:f5:89:37:44:53:f0:2e:51:c3:a2:e3:05:
         17:58:c9:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2X4kgaCYOdDjpcD9GpMRhkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNTkwYjczM2M1NmUxNGViYWM2OWY3YjQ0ZDRiYzk1NGU5
MzcwZTMwHhcNMjYwNDE2MjAwMTIyWhcNMjYwNDE3MjAwMTIyWjAzMTEwLwYDVQQD
EyhkNmJkNzJkMDQ3OGM4ZDMxMjE2MzA5Mzk0YWYxMGFjYTk0NGI1MjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSNlIoVUFTjith0gwDKYDK5lvu2E
S9Uci/cKmmCJ1mqPuHCN3iRUsRWHXTmqFh7ojKNhNCIXsJC1ob85Pn5xND/TOPjD
2fuXJ5wLss3Ptyl/y93PzYV70VpEkKCMTugkhnZZ9zP4XXTSyUgM6KnXX1g2ayoL
6gPmVDmsxZBgosUgTpK+2nXESTYMeDWLm3X5ElMg/yMemdJSGGdm3lb1uKVHvem7
uMaAEFWzciUp+5pkw3BIuXnSfiCbzfZ8WIsYM/tuXJKKUFWV3+6y9xnk6mZt4Gqd
6l66ltdRd+/90rm6aS2zvErapiDD0//fPVVV5k83UL0s5Az1G/ETTMOZxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNa9ctBHjI0xIWMJOUrxCsqUS1IlMB8GA1UdIwQY
MBaAFHxZC3M8VuFOusafe0TUvJVOk3DjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQt
ZjNiNWU4MDI1MGRkLzEvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lM2I2ZmMtZWY2My00YzA2LWEzMDQtZjNiNWU4MDI1MGRk
LzEvZkZrTGN6eFc0VTY2eHA5N1JOUzhsVTZUY09NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuFTUbXrb
XQ92AJnu8FLanLHXoewLJVkYQauwI6shr0y0Kq+aEYT359ps5WfHOydqE3ku/P7l
bFH870F0sPgQ6fnobLwZDmCNkfOdvL2gdnvei2lg8JZdyv6NascR/LkNHLYW7Zmv
O5rSx610BKa2GqtervVt8rjSSEuk2zVYhJr23aJ9qSgKWTAFdRQYYP/saoG7Ars7
kAKBO81+5Ealro+GbR4qL8txToIxgg32g2aO3p19CwurBSfz4Dm6k/76IybYO9Cf
O5wkdxybzRq8kqB4CTcFFSnZ9+4H1r49nGdJBxWebLyRnSQk9RDcO8v69Yk3RFPw
LlHDouMFF1jJow==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:47 2026 by rpki-client