Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
File:                     FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json)
Hash identifier:          7ZDhaLBAXpQY3f5jwYHggWZ5RuCe2Uhexqrws1SqchE=
Subject key identifier:   DD:21:16:6A:6F:82:46:48:D1:18:EE:F7:F7:D0:B5:BD:9D:71:3C:04
Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68
Certificate issuer:       /CN=146170cb906ef42d097c6402d83eec3d92677a68
Certificate serial:       019E1EDA2964A931FAE650C689AB97181B2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 01:01:14 +0000
Manifest this update:     Wed 13 May 2026 01:01:14 +0000
Manifest next update:     Thu 14 May 2026 01:01:14 +0000
Files and hashes:         1: 6MT8gBwfYHWN7Sq2KVrJZlNQ-Ps.roa (hash: DvaijMExSYKtFCkDw2S7VYWVS8RZwCohsUuXaIZZ+u0=)
                          2: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: V1a5dBtBLEWa5u/7LnwVA/eIRYEo5cCcC1DY4xHrIj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:29:64:a9:31:fa:e6:50:c6:89:ab:97:18:1b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68
        Validity
            Not Before: May 13 01:01:14 2026 GMT
            Not After : May 14 01:01:14 2026 GMT
        Subject: CN=dd21166a6f824648d118eef7f7d0b5bd9d713c04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:52:c7:77:a2:4d:4c:f1:34:af:0b:fe:86:2e:
                    03:54:f1:19:23:67:c7:28:db:87:82:74:cc:46:63:
                    0d:02:73:fb:ea:88:84:f0:b7:d9:18:1c:ae:fd:2c:
                    e1:b3:c8:a2:3c:09:36:3d:6b:58:97:94:22:fb:79:
                    2e:b7:61:1f:f2:c1:8e:b6:74:e4:2a:78:bd:6f:c0:
                    19:e5:81:d2:f0:56:21:9a:14:a6:01:bf:ce:bb:27:
                    dd:3e:1d:35:f9:9f:4f:45:87:22:3d:3b:ca:3b:4d:
                    eb:92:98:44:16:84:bd:6b:5d:ab:cb:b5:31:b3:13:
                    7a:80:28:f4:e9:99:82:47:ee:73:fa:88:9b:9c:f5:
                    7a:0d:e0:32:14:9d:43:0a:dc:3a:2e:3a:91:c8:ff:
                    a2:d1:e1:3f:55:d4:72:dc:d8:25:88:e7:b9:76:c1:
                    2b:43:34:bf:dc:31:b1:55:0c:84:b7:8c:7b:15:fb:
                    aa:fb:12:f3:9b:8e:8b:7f:87:74:23:a5:1d:79:c4:
                    86:ed:9f:c8:15:cd:f4:cb:2c:00:24:87:bd:84:0a:
                    75:71:23:f4:f7:61:34:40:5b:62:62:96:d0:a3:79:
                    98:f3:f9:ae:88:83:48:50:39:16:f6:e6:d6:75:2b:
                    bc:7d:e0:fc:79:7a:42:22:78:d5:54:4d:3b:9a:89:
                    32:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:21:16:6A:6F:82:46:48:D1:18:EE:F7:F7:D0:B5:BD:9D:71:3C:04
            X509v3 Authority Key Identifier:
                keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:36:22:d6:18:2e:c7:02:90:d5:1a:73:73:fb:5f:06:28:a8:
         5e:d9:c7:5d:b8:2d:72:36:7a:a6:1b:2f:0e:a4:9d:6d:7d:c1:
         43:43:a3:3e:fd:7e:2a:7a:e5:0a:85:7d:3b:ae:bc:fb:08:d6:
         c1:a7:22:2a:28:4f:54:50:ba:83:49:52:3f:8f:3e:dd:94:4a:
         b8:8b:ad:b9:15:04:b8:22:77:93:cf:62:2b:2d:b6:1c:4b:44:
         57:07:44:12:df:99:33:9c:9b:18:6d:1b:37:14:60:a0:af:54:
         cf:d2:75:54:b9:fb:5f:c0:bb:b1:96:ba:1c:55:6f:df:b6:07:
         de:7d:80:38:2f:9b:26:65:8e:be:48:92:3f:fc:08:be:87:41:
         3f:ff:5c:77:b2:0c:b9:de:f6:6e:6d:72:3b:50:96:c5:1f:e5:
         f2:c6:e2:be:04:96:c4:2b:54:d1:3a:e4:e3:82:73:9a:bc:19:
         d6:43:ca:f5:7e:eb:37:50:fc:c4:7b:21:9f:cb:3b:1c:9f:0a:
         17:f5:0e:0a:2d:d4:5b:ef:7e:3b:7b:b2:c2:67:de:79:cc:00:
         d3:60:2c:6d:c2:2e:e1:01:bf:8f:1f:c2:74:2b:27:84:9f:fe:
         69:69:68:9b:49:a6:8d:18:6d:d5:60:be:d9:d6:14:b4:04:68:
         e7:24:66:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2ilkqTH65lDGiauXGBstMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NjE3MGNiOTA2ZWY0MmQwOTdjNjQwMmQ4M2VlYzNkOTI2
NzdhNjgwHhcNMjYwNTEzMDEwMTE0WhcNMjYwNTE0MDEwMTE0WjAzMTEwLwYDVQQD
EyhkZDIxMTY2YTZmODI0NjQ4ZDExOGVlZjdmN2QwYjViZDlkNzEzYzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FLHd6JNTPE0rwv+hi4DVPEZI2fH
KNuHgnTMRmMNAnP76oiE8LfZGByu/Szhs8iiPAk2PWtYl5Qi+3kut2Ef8sGOtnTk
Kni9b8AZ5YHS8FYhmhSmAb/OuyfdPh01+Z9PRYciPTvKO03rkphEFoS9a12ry7Ux
sxN6gCj06ZmCR+5z+oibnPV6DeAyFJ1DCtw6LjqRyP+i0eE/VdRy3NgliOe5dsEr
QzS/3DGxVQyEt4x7Ffuq+xLzm46Lf4d0I6UdecSG7Z/IFc30yywAJIe9hAp1cSP0
92E0QFtiYpbQo3mY8/muiINIUDkW9ubWdSu8feD8eXpCInjVVE07mokywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN0hFmpvgkZI0Rju9/fQtb2dcTwEMB8GA1UdIwQY
MBaAFBRhcMuQbvQtCXxkAtg+7D2SZ3poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkdGd3k1QnU5QzBKZkdRQzJEN3NQWkpuZW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MDJhNzItMzExMi00ZDlmLWJiYTkt
ODAzNGUyZDA1ZDM5LzEvRkdGd3k1QnU5QzBKZkdRQzJEN3NQWkpuZW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MDJhNzItMzExMi00ZDlmLWJiYTktODAzNGUyZDA1ZDM5
LzEvRkdGd3k1QnU5QzBKZkdRQzJEN3NQWkpuZW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVDYi1hgu
xwKQ1Rpzc/tfBiioXtnHXbgtcjZ6phsvDqSdbX3BQ0OjPv1+KnrlCoV9O668+wjW
waciKihPVFC6g0lSP48+3ZRKuIutuRUEuCJ3k89iKy22HEtEVwdEEt+ZM5ybGG0b
NxRgoK9Uz9J1VLn7X8C7sZa6HFVv37YH3n2AOC+bJmWOvkiSP/wIvodBP/9cd7IM
ud72bm1yO1CWxR/l8sbivgSWxCtU0Trk44JzmrwZ1kPK9X7rN1D8xHshn8s7HJ8K
F/UOCi3UW+9+O3uywmfeecwA02AsbcIu4QG/jx/CdCsnhJ/+aWlom0mmjRht1WC+
2dYUtARo5yRmrw==
-----END CERTIFICATE-----
Generated at Wed May 13 07:53:45 2026 by rpki-client