Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
File:                     FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json)
Hash identifier:          1TgX4Pt3N4P1QxrEKRi2xudkYewkqvfNZJrkauXhuYE=
Subject key identifier:   C4:54:7C:59:E3:8C:75:17:F9:9A:8B:88:14:D6:6A:F7:29:9F:39:F9
Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Certificate issuer:       /CN=16914c51d031411c1340171593603163c3d4a08e
Certificate serial:       01A0DFBCCD08F91215BF57C1DC1DEE3A0AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
Manifest number:          0726
Signing time:             Sat 26 Sep 2026 22:01:27 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:27 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:27 +0000
Files and hashes:         1: 1-Gi0WglfPEDkKdexDXnKU5N07dg.roa (hash: 6gCrfLIveiynT67NWLBkqnoTcS/eVVpbgxDQ/v8TVK4=)
                          2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: mbVuFoAAIdb5lg/4mmXGjRc4YS3pn25ofL7oQd6y3AE=)
                          3: f84vJw7wG4ISORQxAMD5iiMwEgg.roa (hash: XaUoU6IIIIA7AtaKVBXhP/8omy3ZC6BdNEc6ogpNveA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bc:cd:08:f9:12:15:bf:57:c1:dc:1d:ee:3a:0a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16914c51d031411c1340171593603163c3d4a08e
        Validity
            Not Before: Sep 26 22:01:27 2026 GMT
            Not After : Sep 27 22:01:27 2026 GMT
        Subject: CN=c4547c59e38c7517f99a8b8814d66af7299f39f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:0e:e3:16:fb:c3:02:e3:6f:bc:05:57:6b:
                    a9:0f:26:0e:11:d4:98:6a:0e:ae:86:f3:b5:e7:a2:
                    96:d3:b6:20:21:3b:5a:57:cb:b8:51:31:21:2b:ea:
                    10:7f:3b:55:3a:d6:97:61:2a:b2:18:63:43:43:89:
                    3c:75:5c:6d:aa:b0:61:7e:5c:7a:6c:66:65:b5:7f:
                    f1:72:95:9b:44:f0:96:e7:32:da:6c:98:69:bb:20:
                    da:15:38:26:c1:93:65:19:67:c9:f5:48:37:e3:9c:
                    96:3b:7b:7e:a5:92:b0:87:db:db:3a:68:5d:c8:7f:
                    27:f3:42:2c:7e:a4:c1:d7:9d:4d:c9:f8:f5:7c:4c:
                    c0:66:fb:cb:6c:9f:94:56:d7:eb:db:ab:c0:2c:73:
                    c8:fa:ae:f2:c9:5c:96:d7:2d:0a:22:94:e8:d0:aa:
                    47:33:7a:59:77:f0:8b:02:f5:17:59:97:48:f0:e8:
                    4e:11:52:83:48:66:7b:0b:f5:a9:de:6e:02:e6:34:
                    b1:e2:f7:3f:a9:66:2d:90:2e:89:91:50:e5:53:68:
                    ef:6e:da:a2:91:e6:cc:57:cc:0c:1a:01:87:7b:a0:
                    ac:87:e6:a8:9c:77:5a:dd:b4:47:d5:53:60:62:fb:
                    96:52:99:4c:8f:cc:1c:1b:d5:db:3e:08:11:ce:b3:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:54:7C:59:E3:8C:75:17:F9:9A:8B:88:14:D6:6A:F7:29:9F:39:F9
            X509v3 Authority Key Identifier:
                keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f3:49:1a:0e:e9:db:4b:f1:b2:c9:63:80:62:0a:b5:aa:70:
         5a:d3:0e:1c:95:7d:af:7c:0a:cd:b4:ce:f2:b7:ee:28:35:aa:
         a1:23:74:ca:34:0a:7a:29:29:18:64:f5:a4:21:db:d0:b4:4b:
         6c:a5:c4:e3:3f:a3:a3:c6:fc:1a:86:bc:40:10:a3:27:21:c7:
         6b:e9:ef:48:62:f6:a5:2b:28:1d:46:6f:13:dc:97:74:93:df:
         2e:b7:7c:be:f3:db:02:de:55:1a:43:e3:ef:97:21:3b:b4:98:
         80:5d:ad:87:17:50:2b:41:87:11:ef:c0:f6:7b:ce:1e:43:3e:
         e3:34:7b:c0:86:be:af:51:84:a4:93:8f:37:94:4a:8e:a2:54:
         b5:61:b4:3c:9d:81:51:31:5c:02:36:31:da:aa:03:db:07:ee:
         33:68:ce:89:14:df:9b:98:15:32:66:b1:f1:b4:c8:9e:05:e8:
         ed:d6:85:86:8a:53:c1:2c:91:dc:90:af:7a:81:4a:33:11:31:
         21:98:df:d7:d5:a5:14:39:1e:dc:10:b5:06:e8:55:8b:09:fd:
         6a:01:62:e1:63:31:50:0d:67:3c:3f:40:73:df:00:aa:51:c9:
         2c:a5:e0:7c:2a:20:34:15:fc:39:36:07:11:51:fc:da:a5:e6:
         25:9b:d3:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvM0I+RIVv1fB3B3uOgrVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTE0YzUxZDAzMTQxMWMxMzQwMTcxNTkzNjAzMTYzYzNk
NGEwOGUwHhcNMjYwOTI2MjIwMTI3WhcNMjYwOTI3MjIwMTI3WjAzMTEwLwYDVQQD
EyhjNDU0N2M1OWUzOGM3NTE3Zjk5YThiODgxNGQ2NmFmNzI5OWYzOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YAO4xb7wwLjb7wFV2upDyYOEdSY
ag6uhvO156KW07YgITtaV8u4UTEhK+oQfztVOtaXYSqyGGNDQ4k8dVxtqrBhflx6
bGZltX/xcpWbRPCW5zLabJhpuyDaFTgmwZNlGWfJ9Ug345yWO3t+pZKwh9vbOmhd
yH8n80IsfqTB151Nyfj1fEzAZvvLbJ+UVtfr26vALHPI+q7yyVyW1y0KIpTo0KpH
M3pZd/CLAvUXWZdI8OhOEVKDSGZ7C/Wp3m4C5jSx4vc/qWYtkC6JkVDlU2jvbtqi
kebMV8wMGgGHe6Csh+aonHda3bRH1VNgYvuWUplMj8wcG9XbPggRzrPPWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRUfFnjjHUX+ZqLiBTWavcpnzn5MB8GA1UdIwQY
MBaAFBaRTFHQMUEcE0AXFZNgMWPD1KCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmIt
MDlmMTljNmU1MWIyLzEvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmItMDlmMTljNmU1MWIy
LzEvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbfNJGg7p
20vxssljgGIKtapwWtMOHJV9r3wKzbTO8rfuKDWqoSN0yjQKeikpGGT1pCHb0LRL
bKXE4z+jo8b8Goa8QBCjJyHHa+nvSGL2pSsoHUZvE9yXdJPfLrd8vvPbAt5VGkPj
75chO7SYgF2thxdQK0GHEe/A9nvOHkM+4zR7wIa+r1GEpJOPN5RKjqJUtWG0PJ2B
UTFcAjYx2qoD2wfuM2jOiRTfm5gVMmax8bTIngXo7daFhopTwSyR3JCveoFKMxEx
IZjf19WlFDke3BC1BuhViwn9agFi4WMxUA1nPD9Ac98AqlHJLKXgfCogNBX8OTYH
EVH82qXmJZvTSQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:27:26 2026 by rpki-client