Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
File:                     FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json)
Hash identifier:          r/YH8VnCaDbA7C0XQmTyPdCVf7VCYSQ0bXNoGjEIsdw=
Subject key identifier:   6D:29:50:33:B1:8D:7D:3B:85:A6:B7:39:9A:9C:7C:59:F5:9E:B6:04
Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Certificate issuer:       /CN=14d4210a344c999493e61cf9dd735677d38bc05d
Certificate serial:       01A0D72801C777ED7459EA4DADA21B5663BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
Manifest number:          0BF3
Signing time:             Fri 25 Sep 2026 06:01:58 +0000
Manifest this update:     Fri 25 Sep 2026 06:01:58 +0000
Manifest next update:     Sat 26 Sep 2026 06:01:58 +0000
Files and hashes:         1: 3Ar2XyUYMweTk8EKwl8UseYrYE0.roa (hash: e5PBA+QHrdK8UegyVXOovBxHSL9kzq5+vsNWxUzz/VA=)
                          2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: p0fj/e25vj+oPc9nTHw3o8ifqm9lLVhyyQiUenCmaX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 06:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:28:01:c7:77:ed:74:59:ea:4d:ad:a2:1b:56:63:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d
        Validity
            Not Before: Sep 25 06:01:58 2026 GMT
            Not After : Sep 26 06:01:58 2026 GMT
        Subject: CN=6d295033b18d7d3b85a6b7399a9c7c59f59eb604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:16:cd:cb:17:ae:bb:88:0e:ea:e3:91:a0:2f:
                    80:d1:62:8b:51:71:4c:97:d0:58:f5:46:23:c5:c1:
                    61:4b:45:87:a5:71:04:74:3e:fc:c1:c3:80:01:38:
                    98:e8:53:84:85:f2:d0:69:1a:94:96:c6:79:b2:a3:
                    37:59:91:e6:a9:de:b7:09:9a:35:21:2d:ed:03:18:
                    03:89:43:83:05:28:0c:fb:59:50:cd:11:16:07:8e:
                    24:0a:7e:e4:79:71:1c:31:2b:4e:3b:56:9e:4a:54:
                    8c:00:a7:a1:9a:50:1b:a0:e1:c7:81:b9:41:e8:b9:
                    5c:fd:26:fd:ee:66:52:29:ea:3e:8a:5f:ac:56:6f:
                    71:fe:89:48:04:ae:65:ae:3d:77:af:df:5a:d7:49:
                    d0:5e:f6:2e:6f:91:06:e6:c4:e9:ce:b1:85:b6:7f:
                    18:a3:23:85:97:e4:10:aa:58:85:37:43:97:88:0b:
                    39:f7:15:d9:54:f0:14:91:9c:ca:5c:dc:80:07:a1:
                    fc:f8:91:c5:aa:bb:ac:07:c8:d1:de:f0:49:69:7b:
                    b5:50:ed:ed:21:74:e6:b8:b6:05:31:d8:ce:27:9b:
                    55:13:86:7c:55:7e:75:04:d8:76:73:63:6a:dd:03:
                    96:99:f5:1e:b4:4f:f6:3f:52:70:ae:9d:52:47:a0:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:29:50:33:B1:8D:7D:3B:85:A6:B7:39:9A:9C:7C:59:F5:9E:B6:04
            X509v3 Authority Key Identifier:
                keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ce:35:a7:28:7f:fe:44:16:fa:95:ff:a6:14:50:78:7c:a5:
         cb:2c:0d:16:83:8a:9b:0a:a4:69:a9:e8:6e:86:6f:1b:fa:db:
         4e:b6:0e:02:77:ee:4c:56:32:61:17:59:e1:6c:22:63:0a:4c:
         74:ed:ec:68:ef:40:da:ca:e5:1c:b3:77:52:46:e1:16:f6:a5:
         bb:b9:ec:5c:f1:ba:7f:91:cd:7c:d1:a3:d5:22:d4:cd:3e:d4:
         f3:2b:d4:87:8d:aa:74:a5:04:ba:31:c1:8d:da:04:52:49:97:
         8d:a7:ee:24:37:17:af:34:b1:a1:c5:84:72:c5:bd:84:e3:28:
         52:ac:18:6b:dc:79:a7:3a:6e:2f:b1:55:ba:d9:f2:77:b5:7e:
         10:f7:2e:89:d0:7b:a1:d2:00:6e:40:08:e3:54:14:62:67:5a:
         33:32:e6:7a:32:60:67:49:06:cd:94:b1:9d:ee:de:5e:b2:74:
         cc:b8:46:54:5d:ad:73:58:5b:cf:98:87:2f:ca:80:d9:81:62:
         ad:f6:58:db:5b:48:5c:45:05:54:ca:70:33:3c:f0:31:77:8b:
         8d:4e:c0:ec:2e:ae:de:54:44:74:86:39:97:f0:cc:4a:97:c4:
         5c:45:dd:6c:6d:69:e3:2b:6e:a0:9f:df:2a:53:e9:ba:df:c1:
         17:2a:6f:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDXKAHHd+10WepNraIbVmO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDQyMTBhMzQ0Yzk5OTQ5M2U2MWNmOWRkNzM1Njc3ZDM4
YmMwNWQwHhcNMjYwOTI1MDYwMTU4WhcNMjYwOTI2MDYwMTU4WjAzMTEwLwYDVQQD
Eyg2ZDI5NTAzM2IxOGQ3ZDNiODVhNmI3Mzk5YTljN2M1OWY1OWViNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RbNyxeuu4gO6uORoC+A0WKLUXFM
l9BY9UYjxcFhS0WHpXEEdD78wcOAATiY6FOEhfLQaRqUlsZ5sqM3WZHmqd63CZo1
IS3tAxgDiUODBSgM+1lQzREWB44kCn7keXEcMStOO1aeSlSMAKehmlAboOHHgblB
6Llc/Sb97mZSKeo+il+sVm9x/olIBK5lrj13r99a10nQXvYub5EG5sTpzrGFtn8Y
oyOFl+QQqliFN0OXiAs59xXZVPAUkZzKXNyAB6H8+JHFqrusB8jR3vBJaXu1UO3t
IXTmuLYFMdjOJ5tVE4Z8VX51BNh2c2Nq3QOWmfUetE/2P1Jwrp1SR6Bg8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0pUDOxjX07haa3OZqcfFn1nrYEMB8GA1UdIwQY
MBaAFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgt
Mzg1NDRjMmE4N2JiLzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgtMzg1NDRjMmE4N2Ji
LzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPM41pyh/
/kQW+pX/phRQeHylyywNFoOKmwqkaanoboZvG/rbTrYOAnfuTFYyYRdZ4WwiYwpM
dO3saO9A2srlHLN3UkbhFvalu7nsXPG6f5HNfNGj1SLUzT7U8yvUh42qdKUEujHB
jdoEUkmXjafuJDcXrzSxocWEcsW9hOMoUqwYa9x5pzpuL7FVutnyd7V+EPcuidB7
odIAbkAI41QUYmdaMzLmejJgZ0kGzZSxne7eXrJ0zLhGVF2tc1hbz5iHL8qA2YFi
rfZY21tIXEUFVMpwMzzwMXeLjU7A7C6u3lREdIY5l/DMSpfEXEXdbG1p4ytuoJ/f
KlPput/BFypvMg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:55:36 2026 by rpki-client