Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
File:                     FV9JSb982s8-nUZXsIzYR4DUF0U.mft (raw, json)
Hash identifier:          fr2Z2I5maa/5u6yCJtMjlvcx+u4iWh+FGp05065Nulc=
Subject key identifier:   4E:5E:46:D6:08:69:7E:A6:35:17:0B:42:13:89:72:43:45:BB:FF:44
Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45
Certificate issuer:       /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
Certificate serial:       019D2AA9DDC4133FCCF24DC9A4FF0A3DF247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
Manifest number:          0DD8
Signing time:             Thu 26 Mar 2026 15:01:08 +0000
Manifest this update:     Thu 26 Mar 2026 15:01:08 +0000
Manifest next update:     Fri 27 Mar 2026 15:01:08 +0000
Files and hashes:         1: FV9JSb982s8-nUZXsIzYR4DUF0U.crl (hash: 4wxqRUac720xp8ZN5VZbPrvJn3cDA+P9bwc10Huwuq8=)
                          2: W58XMgZh9lZ_P5m3yj1yWR948AE.roa (hash: /DZnUsMGqFUioz1rHfXRehgQ0Epro6BcGMD4flzo29I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:a9:dd:c4:13:3f:cc:f2:4d:c9:a4:ff:0a:3d:f2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745
        Validity
            Not Before: Mar 26 15:01:08 2026 GMT
            Not After : Mar 27 15:01:08 2026 GMT
        Subject: CN=4e5e46d608697ea635170b421389724345bbff44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3c:4a:50:c6:2d:f6:09:a8:37:08:3b:03:55:
                    6b:c5:99:4c:b5:ea:3c:58:f7:e4:b7:41:58:93:b2:
                    f1:2c:f3:5c:cd:1d:34:76:67:03:7a:fb:56:4a:fe:
                    e1:4e:f8:56:e8:8a:b8:b9:14:40:b7:34:19:67:c3:
                    f7:74:58:dc:cc:1a:8a:41:fc:84:49:c9:78:c0:15:
                    a6:2b:54:1d:86:f2:20:82:72:7e:a3:bc:09:62:32:
                    58:7b:16:8e:52:be:90:be:43:d3:cc:b0:ec:95:47:
                    31:10:42:83:d2:42:6b:cc:fb:f2:d7:9b:c5:a7:41:
                    6c:4a:89:58:68:7c:c8:53:2d:34:8d:4b:87:33:12:
                    c9:6b:fa:dc:bf:ee:3c:42:17:0f:03:47:98:dc:2c:
                    4b:c0:17:f7:9b:d8:2c:d6:6d:f3:8b:4b:bc:7e:44:
                    d4:93:0f:7a:ee:8f:99:f3:bd:7e:75:c0:a8:49:a6:
                    f0:a6:eb:3e:fb:9d:a5:c3:d7:06:80:49:d0:6b:00:
                    80:51:b0:45:c8:37:aa:e5:df:db:df:0a:9d:99:a7:
                    99:3d:b9:ac:8c:18:5e:68:db:5a:6a:ac:01:5f:a3:
                    bb:c7:64:0c:1e:b7:4a:fc:50:d4:35:4a:cb:e7:8b:
                    5b:87:87:16:86:2a:e6:68:50:49:18:42:d0:bf:71:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5E:46:D6:08:69:7E:A6:35:17:0B:42:13:89:72:43:45:BB:FF:44
            X509v3 Authority Key Identifier:
                keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c4:ff:db:89:43:50:c9:9c:f2:df:6a:1a:74:5d:62:cb:ac:
         3a:69:48:52:e9:4b:8a:1e:88:d2:fb:13:98:88:f7:5b:45:fa:
         c3:7f:f6:9e:5a:21:de:80:2c:3b:1b:52:f6:86:7a:b1:40:e2:
         77:91:bd:19:fc:59:03:21:9d:17:b5:71:16:b1:d7:de:53:04:
         4a:d5:b2:85:7b:3a:3c:53:8d:cc:a8:c6:36:a9:b9:ab:10:8e:
         0c:07:69:eb:46:78:22:74:ff:94:07:64:61:b1:19:e7:a0:40:
         27:57:4c:88:a4:35:ea:a0:fb:1d:50:bf:53:84:75:c5:44:f5:
         5e:ac:ba:ba:60:0b:7f:87:ce:61:81:50:85:0d:fc:d2:3b:59:
         cc:5f:e5:82:ce:b1:6b:3a:d7:fb:5c:8c:d9:d2:bb:30:c9:c4:
         ca:1a:38:da:14:25:31:dc:8c:f3:22:fa:b7:a2:77:f5:aa:c5:
         3d:39:16:d3:ac:6d:37:6f:17:8e:5a:d1:5e:b3:2a:e3:a4:72:
         49:8c:e5:59:73:69:40:be:0b:ac:5c:52:97:e5:4c:a4:ef:25:
         58:f9:8b:24:45:c4:9f:66:bd:56:19:4a:f9:11:49:24:32:a9:
         03:5d:78:c7:93:8e:91:0a:63:ca:8e:ed:52:4c:1e:1b:ba:e2:
         a3:04:03:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqd3EEz/M8k3JpP8KPfJHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NWY0OTQ5YmY3Y2RhY2YzZTlkNDY1N2IwOGNkODQ3ODBk
NDE3NDUwHhcNMjYwMzI2MTUwMTA4WhcNMjYwMzI3MTUwMTA4WjAzMTEwLwYDVQQD
Eyg0ZTVlNDZkNjA4Njk3ZWE2MzUxNzBiNDIxMzg5NzI0MzQ1YmJmZjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jxKUMYt9gmoNwg7A1VrxZlMteo8
WPfkt0FYk7LxLPNczR00dmcDevtWSv7hTvhW6Iq4uRRAtzQZZ8P3dFjczBqKQfyE
Scl4wBWmK1QdhvIggnJ+o7wJYjJYexaOUr6QvkPTzLDslUcxEEKD0kJrzPvy15vF
p0FsSolYaHzIUy00jUuHMxLJa/rcv+48QhcPA0eY3CxLwBf3m9gs1m3zi0u8fkTU
kw967o+Z871+dcCoSabwpus++52lw9cGgEnQawCAUbBFyDeq5d/b3wqdmaeZPbms
jBheaNtaaqwBX6O7x2QMHrdK/FDUNUrL54tbh4cWhirmaFBJGELQv3HbZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5eRtYIaX6mNRcLQhOJckNFu/9EMB8GA1UdIwQY
MBaAFBVfSUm/fNrPPp1GV7CM2EeA1BdFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUt
MWJjZTNiYzY3OGVkLzEvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUtMWJjZTNiYzY3OGVk
LzEvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcT/24lD
UMmc8t9qGnRdYsusOmlIUulLih6I0vsTmIj3W0X6w3/2nloh3oAsOxtS9oZ6sUDi
d5G9GfxZAyGdF7VxFrHX3lMEStWyhXs6PFONzKjGNqm5qxCODAdp60Z4InT/lAdk
YbEZ56BAJ1dMiKQ16qD7HVC/U4R1xUT1Xqy6umALf4fOYYFQhQ380jtZzF/lgs6x
azrX+1yM2dK7MMnEyho42hQlMdyM8yL6t6J39arFPTkW06xtN28XjlrRXrMq46Ry
SYzlWXNpQL4LrFxSl+VMpO8lWPmLJEXEn2a9VhlK+RFJJDKpA114x5OOkQpjyo7t
UkweG7riowQDhw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:24:18 2026 by rpki-client