Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File:                     FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier:          NGfJQbJb4eymErKW7DSSz21OzStoceWmgKX73QZROyM=
Subject key identifier:   8B:78:EE:2C:8F:E5:6B:A3:8B:C3:AE:91:B2:9E:9F:FE:9C:D7:00:D7
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       019D25BA22FBC5733C902AB96D6894B91AF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number:          188B
Signing time:             Wed 25 Mar 2026 16:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 16:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 16:00:48 +0000
Files and hashes:         1: 8eUjrNm6imMBEiASLOUuqltQoVs.roa (hash: ZfpOTqbTAn2CuRX0LoEyNNAQ5rM0VLzFBNYb2IBiGIE=)
                          2: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: xVJthnJHgtykeziN+8idzwqUfIRk23G/0Bv7+2v2Iik=)
                          3: FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa (hash: glk6t/DUYkuI6x781kKCmhQHELR1hKXbP1AbR2kHTMc=)
                          4: OpTwdj69eMigXueWV1BOB2dxLbA.roa (hash: 2kgLJoiz6VCqwiPbikEb5+NrvRferle8wU/FOd3hfZM=)
                          5: XdEB96U82mHFGVm_nS4xtciGIkQ.roa (hash: hdzlPow2QIj+p15z7CdLi4KjuG4H8crIwMXk1C1mtMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:ba:22:fb:c5:73:3c:90:2a:b9:6d:68:94:b9:1a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Mar 25 16:00:48 2026 GMT
            Not After : Mar 26 16:00:48 2026 GMT
        Subject: CN=8b78ee2c8fe56ba38bc3ae91b29e9ffe9cd700d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:ce:03:9d:85:e3:bb:da:74:b3:c6:56:3d:
                    88:32:f4:d2:40:08:4a:70:51:13:4c:6e:8e:10:ec:
                    5f:84:4c:b3:f0:02:56:64:3f:13:0e:98:2b:47:5e:
                    7a:4b:36:38:95:51:d0:bb:04:63:03:d0:41:4e:f4:
                    59:db:cc:36:cf:0c:10:67:9b:cf:e2:69:22:6d:45:
                    76:ea:b3:3a:3d:25:27:27:ad:02:18:d8:3b:b9:fc:
                    13:ea:4a:92:17:c8:18:2a:d5:35:3e:b5:ec:5f:2b:
                    89:7a:d3:f8:3c:4d:04:6c:50:8e:e7:10:c6:48:b4:
                    0b:69:eb:64:f3:bc:58:46:ce:5a:df:81:e1:2b:c4:
                    82:73:28:ba:f3:97:d7:12:60:ef:29:f0:20:1b:99:
                    76:03:8c:a6:78:15:00:b7:56:53:2d:49:53:8c:37:
                    64:16:0d:7d:73:69:93:d2:2c:f6:b6:cb:d3:7b:f7:
                    c9:cc:2a:c7:ff:fd:01:49:f7:a7:83:19:2b:d2:0e:
                    3e:42:09:1d:68:16:ae:05:05:4b:f1:e4:53:54:27:
                    de:e7:37:60:9c:04:95:1a:df:8b:e4:3b:f1:19:0c:
                    dc:7f:0e:cd:b4:38:13:e3:1c:97:7f:3c:07:0e:2f:
                    9d:4d:c1:6d:02:f9:b8:16:8c:42:1e:0e:c3:eb:98:
                    07:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:78:EE:2C:8F:E5:6B:A3:8B:C3:AE:91:B2:9E:9F:FE:9C:D7:00:D7
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:b5:66:62:43:4c:70:ca:29:00:e3:6a:3f:6f:02:bc:f1:
         3d:27:08:0f:9a:4b:c9:97:de:3b:f3:7c:a1:0d:5a:c1:1b:68:
         cb:aa:97:c8:c7:cd:a5:92:59:4b:4f:7e:0a:05:22:6c:a6:d9:
         6c:ab:2c:21:50:90:9f:0f:a7:28:c7:1d:70:6a:bf:19:8e:36:
         b5:f0:23:f4:a7:96:42:3c:e6:77:24:d0:7a:92:12:2b:97:c2:
         03:80:56:b8:ca:46:86:83:1c:67:33:9d:e1:5d:55:82:fa:3f:
         e6:24:27:dc:b3:c9:8b:2d:cd:b7:63:af:c8:83:0f:e7:c7:33:
         c1:b1:aa:5d:e9:92:b9:d5:1d:4a:01:f5:6f:cd:63:cb:56:c3:
         cb:18:15:44:6e:eb:c6:42:59:fc:e9:2e:52:2d:1a:19:be:4c:
         83:ce:e7:5d:4f:46:bb:d3:15:46:e1:70:10:10:95:db:88:49:
         31:48:1e:82:46:53:b6:df:15:07:cf:a9:c3:88:5d:05:50:f5:
         aa:eb:35:c0:0b:41:c1:5c:bb:4f:89:f1:0f:ac:42:d9:30:41:
         92:f5:84:70:39:a6:46:48:5e:5f:e5:43:f9:ab:de:ec:cd:70:
         67:b3:a3:15:69:2f:93:eb:c3:2b:f7:2d:94:85:8a:d1:58:b8:
         b6:63:b0:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0luiL7xXM8kCq5bWiUuRrzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzQ4MzhiYjMxN2I4MTg2Njk5ZjBhNDQ4NWRiNmQ5ZGEx
OTA4ZDIwHhcNMjYwMzI1MTYwMDQ4WhcNMjYwMzI2MTYwMDQ4WjAzMTEwLwYDVQQD
Eyg4Yjc4ZWUyYzhmZTU2YmEzOGJjM2FlOTFiMjllOWZmZTljZDcwMGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEXOA52F47vadLPGVj2IMvTSQAhK
cFETTG6OEOxfhEyz8AJWZD8TDpgrR156SzY4lVHQuwRjA9BBTvRZ28w2zwwQZ5vP
4mkibUV26rM6PSUnJ60CGNg7ufwT6kqSF8gYKtU1PrXsXyuJetP4PE0EbFCO5xDG
SLQLaetk87xYRs5a34HhK8SCcyi685fXEmDvKfAgG5l2A4ymeBUAt1ZTLUlTjDdk
Fg19c2mT0iz2tsvTe/fJzCrH//0BSfengxkr0g4+QgkdaBauBQVL8eRTVCfe5zdg
nASVGt+L5DvxGQzcfw7NtDgT4xyXfzwHDi+dTcFtAvm4FoxCHg7D65gH7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIt47iyP5Wuji8OukbKen/6c1wDXMB8GA1UdIwQY
MBaAFBU0g4uzF7gYZpnwpEhdttnaGQjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUt
M2ExNDRjNzBlMGIwLzEvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUtM2ExNDRjNzBlMGIw
LzEvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADfu1ZmJD
THDKKQDjaj9vArzxPScID5pLyZfeO/N8oQ1awRtoy6qXyMfNpZJZS09+CgUibKbZ
bKssIVCQnw+nKMcdcGq/GY42tfAj9KeWQjzmdyTQepISK5fCA4BWuMpGhoMcZzOd
4V1Vgvo/5iQn3LPJiy3Nt2OvyIMP58czwbGqXemSudUdSgH1b81jy1bDyxgVRG7r
xkJZ/OkuUi0aGb5Mg87nXU9Gu9MVRuFwEBCV24hJMUgegkZTtt8VB8+pw4hdBVD1
qus1wAtBwVy7T4nxD6xC2TBBkvWEcDmmRkheX+VD+ave7M1wZ7OjFWkvk+vDK/ct
lIWK0Vi4tmOw9A==
-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:59 2026 by rpki-client