Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
File:                     FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft (raw, json)
Hash identifier:          AQjYz4xK5ghoo5ERvQQMTKWlJdo1ocvrv+MceqqIi/o=
Subject key identifier:   AD:08:51:F2:3F:62:17:74:4C:1D:E2:58:F1:59:42:5D:E5:03:37:52
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Certificate issuer:       /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial:       019D269608AE987331A80BCF8D2550586A21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
Manifest number:          0B55
Signing time:             Wed 25 Mar 2026 20:00:59 +0000
Manifest this update:     Wed 25 Mar 2026 20:00:59 +0000
Manifest next update:     Thu 26 Mar 2026 20:00:59 +0000
Files and hashes:         1: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl (hash: vPWMot0xG7W37PFxogsJa9s5i5cu5VpNF98rXW+9ei4=)
                          2: dK5xl69D2qaQ1GI8cpwqmA8ljfo.roa (hash: TibVb3pro9xYgz32FM9o4Gl6dJankSy+fx99rC3V6b8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:08:ae:98:73:31:a8:0b:cf:8d:25:50:58:6a:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
        Validity
            Not Before: Mar 25 20:00:59 2026 GMT
            Not After : Mar 26 20:00:59 2026 GMT
        Subject: CN=ad0851f23f6217744c1de258f159425de5033752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:19:c5:92:d2:01:5e:23:e6:2d:3e:44:0a:
                    33:3b:d8:64:74:be:32:72:46:c9:8d:04:ac:a3:f8:
                    ce:1c:e6:e5:3f:4b:36:53:d4:00:90:5e:df:46:0d:
                    d2:e9:4c:85:7b:fa:54:6c:2d:dc:5f:5c:3e:ec:c5:
                    00:40:8d:b3:3c:2a:fd:85:9b:97:a4:89:6c:78:f4:
                    1d:a9:e7:a8:99:ca:74:03:26:58:8b:36:c7:79:c2:
                    97:6a:60:14:30:76:9f:e4:61:79:47:78:2c:fc:55:
                    fd:e4:61:e1:98:ae:ef:fd:34:45:70:1c:8a:64:02:
                    2f:28:7a:d1:56:68:82:34:81:d6:ab:c2:ec:f8:f6:
                    60:25:22:3b:17:73:ab:98:5e:60:9a:49:e1:09:2c:
                    37:8a:b2:2a:b4:43:a6:a5:2c:9b:ab:dc:f9:a6:ed:
                    d8:2f:e4:d6:b8:cb:b0:ed:dd:14:f9:44:a3:be:30:
                    e2:a9:a1:81:dc:80:4c:e5:80:f7:87:7c:ff:22:98:
                    c5:75:e4:f1:d8:93:e7:16:fa:21:96:17:88:ab:e5:
                    13:02:dd:a4:79:b2:b4:ae:dc:5f:dd:07:f1:af:1a:
                    cc:c1:6a:25:2c:0e:df:73:d8:01:5e:33:75:c8:d3:
                    f5:62:ce:d1:67:e1:9f:73:20:5c:8d:2b:c3:9b:cd:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:08:51:F2:3F:62:17:74:4C:1D:E2:58:F1:59:42:5D:E5:03:37:52
            X509v3 Authority Key Identifier:
                keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:56:0e:d6:80:a4:b1:d1:80:6f:28:78:b5:82:6d:db:55:b1:
         cc:75:0f:be:02:2a:0b:2d:7f:a7:67:d2:e5:87:f5:18:3f:80:
         b1:07:80:ec:79:ce:b9:88:1a:f3:e3:b9:c7:3e:34:7e:1c:83:
         88:01:aa:ce:bd:7c:f0:16:dc:72:9c:6b:b7:31:2e:c2:ab:6e:
         4e:8b:83:e2:f7:b2:40:fd:3a:e1:f6:e8:7e:8b:14:8f:4f:af:
         9f:c6:7f:c6:e7:eb:78:2c:41:2c:cb:4b:63:c1:76:1e:70:e9:
         69:ea:54:d0:a6:b4:de:c7:75:59:f5:4e:24:76:dc:0a:e3:e5:
         4c:49:19:a9:4c:8d:f0:7c:f3:0d:42:bd:29:74:c6:90:42:d9:
         e0:00:55:e9:ff:6e:20:0d:ca:47:6f:71:5e:f7:e7:47:c1:52:
         34:c1:93:89:35:96:dd:e7:e4:b5:80:7b:76:49:cd:4b:c3:c7:
         32:23:27:9c:d6:a3:e5:d1:dc:92:c7:96:0c:ce:90:cf:9a:74:
         a1:ff:11:e3:cd:97:95:50:1e:1b:02:3f:a4:62:60:45:b5:90:
         04:00:5f:4d:58:a5:f8:ba:a8:98:f0:0f:b3:ef:f0:62:48:dc:
         cf:3b:bf:0b:62:bd:a2:d8:32:05:a8:7d:c8:ec:4b:06:03:db:
         f8:30:2b:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlgiumHMxqAvPjSVQWGohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDEzMDI0NTUyOTQyY2VhZjY4YzY3ZTAxMjhkZmY0Yjll
Zjc0OWMwHhcNMjYwMzI1MjAwMDU5WhcNMjYwMzI2MjAwMDU5WjAzMTEwLwYDVQQD
EyhhZDA4NTFmMjNmNjIxNzc0NGMxZGUyNThmMTU5NDI1ZGU1MDMzNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNwZxZLSAV4j5i0+RAozO9hkdL4y
ckbJjQSso/jOHOblP0s2U9QAkF7fRg3S6UyFe/pUbC3cX1w+7MUAQI2zPCr9hZuX
pIlsePQdqeeomcp0AyZYizbHecKXamAUMHaf5GF5R3gs/FX95GHhmK7v/TRFcByK
ZAIvKHrRVmiCNIHWq8Ls+PZgJSI7F3OrmF5gmknhCSw3irIqtEOmpSybq9z5pu3Y
L+TWuMuw7d0U+USjvjDiqaGB3IBM5YD3h3z/IpjFdeTx2JPnFvohlheIq+UTAt2k
ebK0rtxf3QfxrxrMwWolLA7fc9gBXjN1yNP1Ys7RZ+GfcyBcjSvDm806BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0IUfI/Yhd0TB3iWPFZQl3lAzdSMB8GA1UdIwQY
MBaAFBUBMCRVKULOr2jGfgEo3/S573ScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82NTg1MmItZmE3ZS00YWQ3LWIzZWIt
NzBmYzRiMDhmMDBiLzEvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82NTg1MmItZmE3ZS00YWQ3LWIzZWItNzBmYzRiMDhmMDBi
LzEvRlFFd0pGVXBRczZ2YU1aLUFTamY5TG52ZEp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVYO1oCk
sdGAbyh4tYJt21WxzHUPvgIqCy1/p2fS5Yf1GD+AsQeA7HnOuYga8+O5xz40fhyD
iAGqzr188BbccpxrtzEuwqtuTouD4veyQP064fbofosUj0+vn8Z/xufreCxBLMtL
Y8F2HnDpaepU0Ka03sd1WfVOJHbcCuPlTEkZqUyN8HzzDUK9KXTGkELZ4ABV6f9u
IA3KR29xXvfnR8FSNMGTiTWW3efktYB7dknNS8PHMiMnnNaj5dHckseWDM6Qz5p0
of8R482XlVAeGwI/pGJgRbWQBABfTVil+LqomPAPs+/wYkjczzu/C2K9otgyBah9
yOxLBgPb+DAroQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:12 2026 by rpki-client