Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
File:                     fpCf6oHjmP7ZMEndegB-_WlzVWM.mft (raw, json)
Hash identifier:          ILYHbKV/KlXPlHyhqRGy7cx/zgHJr1qyVLuqL35s0DI=
Subject key identifier:   61:63:38:FB:FD:1B:34:B8:4C:C3:83:81:59:EE:1A:D8:78:DA:BB:5C
Authority key identifier: 7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63
Certificate issuer:       /CN=7e909fea81e398fed93049dd7a007efd69735563
Certificate serial:       019D28849E18F4A02D4E399C3FF094EA9D3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
Manifest number:          0E7A
Signing time:             Thu 26 Mar 2026 05:01:12 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:12 +0000
Manifest next update:     Fri 27 Mar 2026 05:01:12 +0000
Files and hashes:         1: P2J-kNZTokYrb95fYZBOZ4Dh_g0.roa (hash: KVkzMtxzk8ECtTGAzQDtwNEUoqW30JKbXDsY+Pnrr+c=)
                          2: fpCf6oHjmP7ZMEndegB-_WlzVWM.crl (hash: PMe/4sd0RZ9SmawLSjoNeUbxgUtNPEZlWNJugMsW3mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:9e:18:f4:a0:2d:4e:39:9c:3f:f0:94:ea:9d:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e909fea81e398fed93049dd7a007efd69735563
        Validity
            Not Before: Mar 26 05:01:12 2026 GMT
            Not After : Mar 27 05:01:12 2026 GMT
        Subject: CN=616338fbfd1b34b84cc3838159ee1ad878dabb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:2e:47:d5:27:77:a9:24:1e:d3:de:50:f6:
                    bc:c4:0b:67:b7:9e:1a:93:91:cf:5c:45:91:33:d4:
                    2e:d2:0d:f0:80:7c:bc:33:27:5c:92:f6:8c:fc:1c:
                    83:b4:db:29:f0:8b:d1:c6:c4:05:45:7c:6a:ab:dc:
                    fc:11:a1:70:14:1c:db:9e:11:e7:cb:f7:cf:0f:ea:
                    83:7b:e8:e9:89:f1:b8:44:be:f8:30:f1:35:be:1b:
                    36:f6:e3:fc:b8:e9:af:48:fb:42:b5:52:32:80:ce:
                    1c:35:d1:58:b2:aa:57:28:a8:66:bc:d6:1b:e0:bc:
                    63:1f:2d:93:ad:d0:6b:6f:71:d7:9f:09:43:87:38:
                    2c:5a:12:74:e5:4c:c8:db:7b:19:f4:75:51:dd:b3:
                    6d:6a:35:41:47:52:ce:1c:a7:cf:03:62:28:6a:f1:
                    8f:7b:9d:73:3c:d4:98:75:7b:dc:8b:c2:e8:d4:0f:
                    3a:d1:af:da:ca:ff:86:95:eb:15:13:6c:90:f5:26:
                    cf:bb:8f:f2:71:30:f5:e9:3c:3f:0e:9e:aa:1f:85:
                    bf:3c:f0:8e:6b:bd:26:8c:93:5a:94:6a:3c:ff:00:
                    e7:6e:80:19:f7:d6:f5:e9:62:71:69:ef:88:97:c8:
                    3d:26:bf:a5:55:71:e0:13:a1:ce:a0:03:aa:8d:e6:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:63:38:FB:FD:1B:34:B8:4C:C3:83:81:59:EE:1A:D8:78:DA:BB:5C
            X509v3 Authority Key Identifier:
                keyid:7E:90:9F:EA:81:E3:98:FE:D9:30:49:DD:7A:00:7E:FD:69:73:55:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpCf6oHjmP7ZMEndegB-_WlzVWM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/1b81e1-7188-4d9f-b4ef-83706378c576/1/fpCf6oHjmP7ZMEndegB-_WlzVWM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f2:92:c7:23:f6:a4:6f:58:3e:66:cd:d3:9a:27:2e:a4:07:
         72:d7:d6:47:54:d7:35:fa:de:e2:65:67:7a:65:b1:56:b0:28:
         a7:29:5c:4f:8c:4a:8e:b4:fb:e9:a8:aa:db:79:53:13:84:85:
         a0:e7:e0:96:4a:a2:71:65:3e:ea:b0:e7:00:42:b2:db:96:85:
         67:ac:a0:90:03:91:84:13:3b:d1:c6:1c:33:8f:ba:d5:a9:fb:
         ad:89:64:19:9f:c4:de:a8:51:b4:0a:0f:c9:69:ab:3d:65:d7:
         ec:5c:61:f2:e8:34:db:8c:99:d4:76:17:4a:af:5f:f0:b6:00:
         07:bd:6a:e0:3b:e6:66:87:49:37:00:44:90:f0:d5:7e:54:c9:
         aa:7c:58:52:60:b2:8a:59:37:14:08:b9:10:b0:bb:fc:40:cc:
         7b:90:de:31:ff:7a:9e:d4:86:33:bd:aa:8b:ff:6e:43:68:53:
         81:0c:74:d6:62:79:30:80:b8:35:56:f4:0c:ae:4a:25:98:98:
         bc:3b:0f:8e:1a:35:07:fb:ed:65:45:0f:c6:c7:04:a8:d0:ff:
         09:52:df:fd:a2:66:90:b4:42:97:2f:f7:28:72:c8:15:24:5c:
         f7:72:3d:e9:fe:2c:d2:93:57:28:51:34:30:2d:ac:0d:43:5f:
         88:4c:f0:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohJ4Y9KAtTjmcP/CU6p06MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlOTA5ZmVhODFlMzk4ZmVkOTMwNDlkZDdhMDA3ZWZkNjk3
MzU1NjMwHhcNMjYwMzI2MDUwMTEyWhcNMjYwMzI3MDUwMTEyWjAzMTEwLwYDVQQD
Eyg2MTYzMzhmYmZkMWIzNGI4NGNjMzgzODE1OWVlMWFkODc4ZGFiYjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL8uR9Und6kkHtPeUPa8xAtnt54a
k5HPXEWRM9Qu0g3wgHy8MydckvaM/ByDtNsp8IvRxsQFRXxqq9z8EaFwFBzbnhHn
y/fPD+qDe+jpifG4RL74MPE1vhs29uP8uOmvSPtCtVIygM4cNdFYsqpXKKhmvNYb
4LxjHy2TrdBrb3HXnwlDhzgsWhJ05UzI23sZ9HVR3bNtajVBR1LOHKfPA2IoavGP
e51zPNSYdXvci8Lo1A860a/ayv+GlesVE2yQ9SbPu4/ycTD16Tw/Dp6qH4W/PPCO
a70mjJNalGo8/wDnboAZ99b16WJxae+Il8g9Jr+lVXHgE6HOoAOqjeYC9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFjOPv9GzS4TMODgVnuGth42rtcMB8GA1UdIwQY
MBaAFH6Qn+qB45j+2TBJ3XoAfv1pc1VjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS8xYjgxZTEtNzE4OC00ZDlmLWI0ZWYt
ODM3MDYzNzhjNTc2LzEvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS8xYjgxZTEtNzE4OC00ZDlmLWI0ZWYtODM3MDYzNzhjNTc2
LzEvZnBDZjZvSGptUDdaTUVuZGVnQi1fV2x6VldNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfKSxyP2
pG9YPmbN05onLqQHctfWR1TXNfre4mVnemWxVrAopylcT4xKjrT76aiq23lTE4SF
oOfglkqicWU+6rDnAEKy25aFZ6ygkAORhBM70cYcM4+61an7rYlkGZ/E3qhRtAoP
yWmrPWXX7Fxh8ug024yZ1HYXSq9f8LYAB71q4DvmZodJNwBEkPDVflTJqnxYUmCy
ilk3FAi5ELC7/EDMe5DeMf96ntSGM72qi/9uQ2hTgQx01mJ5MIC4NVb0DK5KJZiY
vDsPjho1B/vtZUUPxscEqND/CVLf/aJmkLRCly/3KHLIFSRc93I96f4s0pNXKFE0
MC2sDUNfiEzwEg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:10 2026 by rpki-client