Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
File:                     ffkEqxQGbHqf5hpSHVSSoOUpZco.mft (raw, json)
Hash identifier:          //jkONy1kyg5C8tb34OwZSWtKzGJHHihBor5I4wXKRg=
Subject key identifier:   18:71:75:A6:5D:08:0D:F2:F0:08:13:5B:71:74:BE:28:4A:47:59:62
Authority key identifier: 7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA
Certificate issuer:       /CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
Certificate serial:       019E1F11148EB98E1012C6099B459DE8007B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
Manifest number:          09C2
Signing time:             Wed 13 May 2026 02:01:13 +0000
Manifest this update:     Wed 13 May 2026 02:01:13 +0000
Manifest next update:     Thu 14 May 2026 02:01:13 +0000
Files and hashes:         1: 1W82at7mSiuchX3iCzO6G2WZfjs.roa (hash: OyjiciJl+n/aBNYiJh6cnpdIClbp0Z2IycUrjNfaQ1s=)
                          2: ffkEqxQGbHqf5hpSHVSSoOUpZco.crl (hash: BvQdnSMSj7NkIkUp2KOWhbGbxnMUxXMBZYdYNv1JR3E=)
                          3: qk4P-ShbIUszUZ3eawMDtsRg7tc.roa (hash: +N2IDtopIma7I39gXcMi4uOgHoRzGLXkf14n2SLetxs=)
                          4: xsaLPUS_EPRPzM8NWjyE1aTWHX4.roa (hash: dBX6NfyeptV43b7aTbE31Dh+/tXWuq6hyAQ37G7Hits=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:14:8e:b9:8e:10:12:c6:09:9b:45:9d:e8:00:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df904ab14066c7a9fe61a521d5492a0e52965ca
        Validity
            Not Before: May 13 02:01:13 2026 GMT
            Not After : May 14 02:01:13 2026 GMT
        Subject: CN=187175a65d080df2f008135b7174be284a475962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:03:f0:0f:5a:8e:75:99:cf:bd:89:27:b9:
                    fd:b6:e5:d0:c6:14:16:e5:1f:52:cc:ea:fc:e8:7d:
                    2e:4d:83:22:b8:bf:f6:48:7c:0e:c7:e6:66:1d:fb:
                    b1:cb:1c:5e:82:3b:35:05:38:c4:f7:ef:1e:28:62:
                    e1:73:d0:3e:d2:9b:13:98:1a:e0:91:47:bd:93:64:
                    e5:4f:96:a6:3d:65:47:4b:75:1e:fd:9f:ec:75:e9:
                    80:65:ee:9c:83:d9:fd:13:c4:14:5f:3b:10:db:69:
                    0d:a4:04:b0:89:bb:a5:da:10:dc:40:f1:76:69:43:
                    bd:ba:02:8d:e8:c9:a5:6d:b9:13:fb:18:c0:38:02:
                    be:28:d3:04:6e:90:b0:7a:01:09:84:38:37:c1:69:
                    6b:bc:66:31:19:2f:e8:87:55:24:d9:ad:3c:b5:52:
                    ef:ec:e5:31:ef:87:f9:82:97:1f:18:99:c0:2c:54:
                    96:ff:09:0b:de:21:22:df:71:ec:9e:9c:60:53:9f:
                    2c:0d:89:3e:6c:8b:57:18:34:88:5f:c4:8d:83:7e:
                    7b:da:8e:38:46:f5:8f:56:97:5b:fb:89:09:3c:49:
                    56:b3:be:7a:39:38:06:bb:b4:11:d4:57:2d:22:e6:
                    db:aa:6a:83:26:97:c7:d0:ae:3d:26:7b:28:d0:21:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:71:75:A6:5D:08:0D:F2:F0:08:13:5B:71:74:BE:28:4A:47:59:62
            X509v3 Authority Key Identifier:
                keyid:7D:F9:04:AB:14:06:6C:7A:9F:E6:1A:52:1D:54:92:A0:E5:29:65:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffkEqxQGbHqf5hpSHVSSoOUpZco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/53fb34-25db-4684-984f-3b445f29f5b7/1/ffkEqxQGbHqf5hpSHVSSoOUpZco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:36:72:ee:d7:2a:4b:3e:6d:94:11:14:c0:66:3b:05:b6:b6:
         07:72:a3:28:0a:6b:f9:83:c4:1e:00:9d:f7:68:cf:4e:e3:71:
         f7:f9:4c:7f:27:43:f2:83:e8:15:a7:9b:95:be:0b:46:04:42:
         f6:2a:9d:a1:27:81:44:37:f0:44:39:5b:d0:a9:bd:1e:46:b8:
         fe:43:15:7e:e8:36:2b:78:59:f1:07:68:c5:cb:63:70:66:c8:
         b4:62:e0:09:6b:f3:9e:b7:51:a2:78:ef:5f:ab:55:e0:5f:78:
         11:64:ed:c9:6e:ee:48:53:f2:c5:33:cc:f3:1f:a2:a7:6e:f6:
         23:1b:e4:c8:77:1d:30:db:8e:90:b2:d2:ba:9c:ce:50:29:83:
         93:f6:b7:a3:16:2e:0e:af:ec:8b:0e:a3:cd:f6:4b:9a:85:b5:
         20:fa:2f:38:3f:a6:3b:41:d5:6e:70:28:ae:d8:e6:30:61:25:
         ef:d0:26:8a:78:8f:96:71:ea:e7:70:c1:85:91:07:22:da:3a:
         c4:29:a8:78:1a:87:52:91:69:2a:91:67:35:e5:0e:e5:67:96:
         e9:8a:92:62:24:cc:cc:74:76:7b:83:8a:4c:4b:7b:19:cf:a4:
         96:25:0e:f8:10:4b:9b:a2:16:ac:b0:11:b7:d0:70:14:c8:26:
         60:4d:67:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fERSOuY4QEsYJm0Wd6AB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZjkwNGFiMTQwNjZjN2E5ZmU2MWE1MjFkNTQ5MmEwZTUy
OTY1Y2EwHhcNMjYwNTEzMDIwMTEzWhcNMjYwNTE0MDIwMTEzWjAzMTEwLwYDVQQD
EygxODcxNzVhNjVkMDgwZGYyZjAwODEzNWI3MTc0YmUyODRhNDc1OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOID8A9ajnWZz72JJ7n9tuXQxhQW
5R9SzOr86H0uTYMiuL/2SHwOx+ZmHfuxyxxegjs1BTjE9+8eKGLhc9A+0psTmBrg
kUe9k2TlT5amPWVHS3Ue/Z/sdemAZe6cg9n9E8QUXzsQ22kNpASwibul2hDcQPF2
aUO9ugKN6MmlbbkT+xjAOAK+KNMEbpCwegEJhDg3wWlrvGYxGS/oh1Uk2a08tVLv
7OUx74f5gpcfGJnALFSW/wkL3iEi33HsnpxgU58sDYk+bItXGDSIX8SNg3572o44
RvWPVpdb+4kJPElWs756OTgGu7QR1FctIubbqmqDJpfH0K49Jnso0CE/0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhxdaZdCA3y8AgTW3F0vihKR1liMB8GA1UdIwQY
MBaAFH35BKsUBmx6n+YaUh1UkqDlKWXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYt
M2I0NDVmMjlmNWI3LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS81M2ZiMzQtMjVkYi00Njg0LTk4NGYtM2I0NDVmMjlmNWI3
LzEvZmZrRXF4UUdiSHFmNWhwU0hWU1NvT1VwWmNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPzZy7tcq
Sz5tlBEUwGY7Bba2B3KjKApr+YPEHgCd92jPTuNx9/lMfydD8oPoFaeblb4LRgRC
9iqdoSeBRDfwRDlb0Km9Hka4/kMVfug2K3hZ8QdoxctjcGbItGLgCWvznrdRonjv
X6tV4F94EWTtyW7uSFPyxTPM8x+ip272IxvkyHcdMNuOkLLSupzOUCmDk/a3oxYu
Dq/siw6jzfZLmoW1IPovOD+mO0HVbnAortjmMGEl79AminiPlnHq53DBhZEHIto6
xCmoeBqHUpFpKpFnNeUO5WeW6YqSYiTMzHR2e4OKTEt7Gc+kliUO+BBLm6IWrLAR
t9BwFMgmYE1now==
-----END CERTIFICATE-----
Generated at Wed May 13 05:23:19 2026 by rpki-client