Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File:                     fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier:          FSPsgd024AVuVqrpm2rtPN4Z6QLWb5YjDlS+w1Ly0ls=
Subject key identifier:   3E:64:41:06:A3:E4:6A:41:6E:31:54:C4:E8:39:F3:66:50:62:EA:D8
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer:       /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial:       019E1C7DF0C7AC721CC29A38B38592FC058E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number:          1898
Signing time:             Tue 12 May 2026 14:01:16 +0000
Manifest this update:     Tue 12 May 2026 14:01:16 +0000
Manifest next update:     Wed 13 May 2026 14:01:16 +0000
Files and hashes:         1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=)
                          2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: BWTjzpXA88Y7KSQmI95qx4+1NsLShCvxmDjgcpSC/48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:f0:c7:ac:72:1c:c2:9a:38:b3:85:92:fc:05:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
        Validity
            Not Before: May 12 14:01:16 2026 GMT
            Not After : May 13 14:01:16 2026 GMT
        Subject: CN=3e644106a3e46a416e3154c4e839f3665062ead8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:d8:7a:3c:33:e4:6b:60:d7:cc:2e:79:96:
                    b7:e3:82:75:54:93:dc:e1:8d:2a:d5:d0:06:8e:53:
                    b8:39:b8:8f:31:e7:94:c1:b3:67:56:3a:63:f0:22:
                    b5:43:d1:45:75:35:ea:ae:01:bf:af:dc:ac:5d:43:
                    7d:6e:a0:b3:a2:e9:66:c7:f6:1d:96:3b:22:2b:a8:
                    f3:2b:99:a8:0e:a6:8e:bc:b6:2a:47:90:bf:9a:af:
                    bd:83:2c:14:f7:68:f1:1e:c5:3b:ef:85:1a:58:5f:
                    cd:9a:4b:0d:94:5a:ee:d0:61:4e:3b:27:c7:a9:76:
                    84:2a:17:1c:64:3f:63:db:3e:8f:cf:55:ed:71:cb:
                    57:b4:a6:3e:9a:f3:01:ae:d0:d2:bb:74:41:83:4e:
                    15:4d:12:0f:ab:30:68:51:49:38:3f:01:d5:22:b5:
                    ce:55:03:31:4d:f5:e0:2d:c8:df:68:9d:41:3b:35:
                    0c:6f:7b:f2:ce:00:81:ab:3d:fd:56:b0:1f:3b:ba:
                    4d:ba:e3:15:52:8f:02:96:1b:14:9d:83:b7:e2:fc:
                    1a:a9:88:cd:6e:fc:22:e4:51:82:85:b4:56:3d:71:
                    ae:47:97:f5:18:e5:51:b6:32:99:cf:4b:4a:f0:e9:
                    d1:56:36:5b:f8:61:de:d3:4a:56:00:b7:b1:b5:78:
                    bd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:64:41:06:A3:E4:6A:41:6E:31:54:C4:E8:39:F3:66:50:62:EA:D8
            X509v3 Authority Key Identifier:
                keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:10:9f:8e:9d:5e:67:16:aa:cf:75:9f:0b:4c:6b:ed:79:f1:
         69:c3:6f:b1:af:dc:cf:cb:68:6c:09:06:6e:32:f1:0c:a7:35:
         62:4f:e8:3c:e3:de:b6:70:cb:d3:be:a5:93:2b:17:e9:f9:9d:
         67:bf:de:0a:bd:ce:08:7a:5d:a8:94:df:6f:89:50:6e:63:ec:
         7b:bc:e4:56:57:28:6b:ad:a9:4d:9a:27:01:c9:0d:0d:75:91:
         86:89:7e:ed:50:2a:62:f7:23:8c:a5:f2:49:eb:4a:92:53:52:
         96:af:2a:e4:5a:0b:c6:d6:bd:c5:9b:67:9b:04:87:c1:ef:a3:
         2b:84:26:47:fa:4b:72:11:45:ee:b4:aa:83:ae:7f:dd:91:ca:
         d6:f7:cf:d1:12:76:57:82:2c:48:93:db:c1:2e:a7:2f:18:10:
         b0:f4:f1:c6:26:07:17:b5:a0:5d:8b:47:e2:00:be:07:f0:5f:
         73:a8:e0:03:7a:55:18:14:c6:22:da:fa:08:7a:21:ca:bb:0f:
         94:00:c3:94:61:97:99:f9:1c:0e:6a:17:0d:06:59:c0:5d:c0:
         7b:9d:fa:a2:52:66:ec:21:17:34:42:c4:e3:64:73:18:ae:db:
         97:37:b5:a8:4a:d0:92:c9:53:08:ec:d2:5f:63:a4:75:0c:aa:
         3f:16:08:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cffDHrHIcwpo4s4WS/AWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmM2UwODc0ODllZTIzYTk0MjRkNTNmYWMyMTZlZTRiOGUw
MTI4MGUwHhcNMjYwNTEyMTQwMTE2WhcNMjYwNTEzMTQwMTE2WjAzMTEwLwYDVQQD
EygzZTY0NDEwNmEzZTQ2YTQxNmUzMTU0YzRlODM5ZjM2NjUwNjJlYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZzYejwz5Gtg18wueZa344J1VJPc
4Y0q1dAGjlO4ObiPMeeUwbNnVjpj8CK1Q9FFdTXqrgG/r9ysXUN9bqCzoulmx/Yd
ljsiK6jzK5moDqaOvLYqR5C/mq+9gywU92jxHsU774UaWF/NmksNlFru0GFOOyfH
qXaEKhccZD9j2z6Pz1XtcctXtKY+mvMBrtDSu3RBg04VTRIPqzBoUUk4PwHVIrXO
VQMxTfXgLcjfaJ1BOzUMb3vyzgCBqz39VrAfO7pNuuMVUo8ClhsUnYO34vwaqYjN
bvwi5FGChbRWPXGuR5f1GOVRtjKZz0tK8OnRVjZb+GHe00pWALextXi9/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5kQQaj5GpBbjFUxOg582ZQYurYMB8GA1UdIwQY
MBaAFH8+CHSJ7iOpQk1T+sIW7kuOASgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUt
YTdjNjNkNTYyZTU2LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jMmM5OWQtY2Y5MS00ZGZiLTk0ZGUtYTdjNjNkNTYyZTU2
LzEvZno0SWRJbnVJNmxDVFZQNndoYnVTNDRCS0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxCfjp1e
Zxaqz3WfC0xr7XnxacNvsa/cz8tobAkGbjLxDKc1Yk/oPOPetnDL076lkysX6fmd
Z7/eCr3OCHpdqJTfb4lQbmPse7zkVlcoa62pTZonAckNDXWRhol+7VAqYvcjjKXy
SetKklNSlq8q5FoLxta9xZtnmwSHwe+jK4QmR/pLchFF7rSqg65/3ZHK1vfP0RJ2
V4IsSJPbwS6nLxgQsPTxxiYHF7WgXYtH4gC+B/Bfc6jgA3pVGBTGItr6CHohyrsP
lADDlGGXmfkcDmoXDQZZwF3Ae536olJm7CEXNELE42RzGK7blze1qErQkslTCOzS
X2OkdQyqPxYI7A==
-----END CERTIFICATE-----
Generated at Tue May 12 22:27:00 2026 by rpki-client