Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File:                     FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier:          H+NH03HWYho+gjkEY8soEzeMLIXVk4Fd4FTNuA2b5w4=
Subject key identifier:   B5:44:59:98:B5:BF:2A:23:A5:CF:1C:9A:73:43:16:AA:30:CB:8F:DE
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer:       /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial:       019D26CD77279CA09FD5352320ED1E308559
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 21:01:32 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:32 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:32 +0000
Files and hashes:         1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: yfLHtJn4bW8tcjAbg8cMnUWmvVQ6aRL6piYEPIU/4cw=)
                          2: tpgO__8JIWwf0K5I2LYCZrVrikM.roa (hash: f2PcjHiabtY+DnGAD4NglKdZJPzXxJGrLSGQ06vKQuY=)
                          3: uaxh8U0jVTA13VbI4dqjzJRrb6c.roa (hash: mKgAzv+fNzwcauULBu1C+QLYeE57KlSGUy875oXXIUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:77:27:9c:a0:9f:d5:35:23:20:ed:1e:30:85:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
        Validity
            Not Before: Mar 25 21:01:32 2026 GMT
            Not After : Mar 26 21:01:32 2026 GMT
        Subject: CN=b5445998b5bf2a23a5cf1c9a734316aa30cb8fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f9:61:aa:e1:31:15:46:ec:2d:0f:68:86:76:
                    3f:e1:6a:bf:b4:b4:3a:d1:f2:57:78:51:c7:c9:23:
                    0c:ae:6d:a2:6c:b1:da:7d:00:08:7e:86:3c:e8:eb:
                    58:b2:d7:42:c7:af:87:91:ae:73:c7:86:c2:ee:ad:
                    1e:19:6b:ea:6d:cc:5b:97:dc:56:17:6c:a7:15:a8:
                    06:4b:46:e3:13:70:21:c9:75:85:a8:9a:55:fd:fb:
                    69:c1:2c:f9:ff:5a:fe:05:db:8e:99:41:fa:9f:c1:
                    1a:c3:14:f2:ae:a5:e8:fd:cb:bb:ac:5b:47:b7:8d:
                    88:eb:b7:f8:c7:c2:2f:1a:5f:76:70:a9:8f:d9:e0:
                    4a:02:4b:2e:82:a6:ea:87:34:f7:fe:4e:e6:b6:2e:
                    16:ae:8e:bf:d5:3c:54:0f:6c:99:4f:a4:b4:ff:95:
                    9e:2b:0e:d3:58:9f:94:53:a7:62:73:47:b5:75:99:
                    61:01:c5:32:9c:cd:58:d5:da:88:e6:0d:7b:0f:a2:
                    0a:5f:aa:48:ac:8b:7d:3e:64:86:98:84:a2:1c:63:
                    8f:8d:de:e1:8f:55:99:7c:4c:f3:02:ba:2d:4d:a2:
                    65:6a:d4:13:3e:71:cb:50:d4:72:5e:6a:20:5d:aa:
                    b8:c6:de:cd:17:a1:5d:f8:16:14:60:b6:f2:b4:e0:
                    47:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:44:59:98:B5:BF:2A:23:A5:CF:1C:9A:73:43:16:AA:30:CB:8F:DE
            X509v3 Authority Key Identifier:
                keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a2:18:f2:a9:f6:d3:c1:5a:fd:d7:42:a1:fa:4d:6c:b3:7c:
         cd:98:cf:37:c6:32:00:db:cd:d4:35:fa:30:15:3b:99:af:33:
         f1:eb:a8:da:39:35:ea:83:4f:30:ff:37:45:be:ae:bc:8b:17:
         1b:78:2d:02:cc:85:b5:ae:e8:96:00:37:9e:be:64:0e:95:c8:
         a6:b7:b1:32:2a:0b:1d:a5:92:12:74:60:f7:5e:05:f9:8d:26:
         3f:5b:be:29:1d:ac:a7:10:da:40:26:36:3b:15:04:b8:ec:4e:
         c2:83:96:e0:9a:9e:fa:0f:a9:60:e5:0f:70:dc:72:b1:51:d6:
         68:f5:f9:b5:07:4c:b0:e3:0c:1c:c4:de:b8:15:44:4c:ed:ce:
         2f:52:e9:f7:72:32:cf:3b:87:8a:8c:60:ed:9d:10:c8:63:35:
         67:d1:e9:08:0f:8a:6e:21:4e:ea:3b:8b:4e:5f:bd:41:02:b8:
         b3:14:7d:d3:ed:39:7a:f9:9f:89:54:49:ec:56:c2:3b:aa:6f:
         ab:81:6b:35:49:aa:5f:9a:5c:88:fb:60:df:ab:dc:de:dd:eb:
         5f:ed:4b:53:9f:6e:45:40:9e:ea:5b:3a:3d:3b:aa:db:74:5f:
         e6:29:ba:fa:5b:5c:28:67:a3:0d:df:7b:74:fc:92:b3:8c:ca:
         4e:b5:34:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzXcnnKCf1TUjIO0eMIVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YTNkZTRiN2U2NmM4N2NmOWMzM2UwMDhhMDJkMWE0NmUz
ZmM3NjYwHhcNMjYwMzI1MjEwMTMyWhcNMjYwMzI2MjEwMTMyWjAzMTEwLwYDVQQD
EyhiNTQ0NTk5OGI1YmYyYTIzYTVjZjFjOWE3MzQzMTZhYTMwY2I4ZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPlhquExFUbsLQ9ohnY/4Wq/tLQ6
0fJXeFHHySMMrm2ibLHafQAIfoY86OtYstdCx6+Hka5zx4bC7q0eGWvqbcxbl9xW
F2ynFagGS0bjE3AhyXWFqJpV/ftpwSz5/1r+BduOmUH6n8EawxTyrqXo/cu7rFtH
t42I67f4x8IvGl92cKmP2eBKAksugqbqhzT3/k7mti4Wro6/1TxUD2yZT6S0/5We
Kw7TWJ+UU6dic0e1dZlhAcUynM1Y1dqI5g17D6IKX6pIrIt9PmSGmISiHGOPjd7h
j1WZfEzzArotTaJlatQTPnHLUNRyXmogXaq4xt7NF6Fd+BYUYLbytOBHMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVEWZi1vyojpc8cmnNDFqowy4/eMB8GA1UdIwQY
MBaAFBSj3kt+Zsh8+cM+AIoC0aRuP8dmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQt
NWRiYjM2ZjdhMDMzLzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi8wYjU1NmItZWQyMi00NDUzLTkyNWQtNWRiYjM2ZjdhMDMz
LzEvRktQZVMzNW15SHo1d3o0QWlnTFJwRzRfeDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARaIY8qn2
08Fa/ddCofpNbLN8zZjPN8YyANvN1DX6MBU7ma8z8euo2jk16oNPMP83Rb6uvIsX
G3gtAsyFta7olgA3nr5kDpXIprexMioLHaWSEnRg914F+Y0mP1u+KR2spxDaQCY2
OxUEuOxOwoOW4Jqe+g+pYOUPcNxysVHWaPX5tQdMsOMMHMTeuBVETO3OL1Lp93Iy
zzuHioxg7Z0QyGM1Z9HpCA+KbiFO6juLTl+9QQK4sxR90+05evmfiVRJ7FbCO6pv
q4FrNUmqX5pciPtg36vc3t3rX+1LU59uRUCe6ls6PTuq23Rf5im6+ltcKGejDd97
dPySs4zKTrU0fw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:26 2026 by rpki-client