Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File:                     Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier:          QWkYIlzh0Tk+AOzdYO6urGUBhN/4zk6byYYuI4peodI=
Subject key identifier:   8B:B9:CC:02:85:0C:95:50:A4:2E:87:5E:66:86:0C:5D:2A:EE:EC:DD
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer:       /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial:       01A0E1AAD8A042D17F08F0EA6EB566A88910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number:          14FF
Signing time:             Sun 27 Sep 2026 07:01:05 +0000
Manifest this update:     Sun 27 Sep 2026 07:01:05 +0000
Manifest next update:     Mon 28 Sep 2026 07:01:05 +0000
Files and hashes:         1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
                          2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: Rp0ZvJ1e4b1MXTEX3eiaVzsHC8cB+EoHDlfB25iShvU=)
                          3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:aa:d8:a0:42:d1:7f:08:f0:ea:6e:b5:66:a8:89:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
        Validity
            Not Before: Sep 27 07:01:05 2026 GMT
            Not After : Sep 28 07:01:05 2026 GMT
        Subject: CN=8bb9cc02850c9550a42e875e66860c5d2aeeecdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:39:d8:62:c3:0c:65:45:61:7a:e5:bd:fc:9c:
                    12:47:91:11:45:c7:f7:1f:5d:61:6e:d8:c5:1b:cc:
                    a5:a6:20:c9:db:be:ae:a6:4f:1b:26:a4:b2:c7:d8:
                    c2:af:c6:ce:98:75:ab:f7:94:10:09:f7:39:06:68:
                    e5:d2:17:a9:1b:bf:5a:b3:86:ed:a4:25:44:2d:9c:
                    78:1d:35:e6:11:fa:4e:96:e3:92:09:70:d4:2c:91:
                    e8:a2:2a:4b:94:e1:ea:79:d8:02:3c:ed:1e:b9:f8:
                    b5:f5:57:ae:7d:d5:c9:ba:79:61:56:94:42:96:be:
                    00:92:86:85:ee:a8:fa:7e:46:c1:fa:a7:04:08:c8:
                    d4:64:bd:af:e2:1a:a3:f1:15:a6:30:d2:a3:53:9c:
                    75:8e:06:51:64:c2:4b:03:39:4f:7f:50:de:97:a8:
                    d3:b7:12:c7:0e:68:42:13:3f:3b:ec:d8:7c:aa:4d:
                    16:e7:50:c9:7f:af:f6:be:6f:9c:28:0a:f7:b1:71:
                    d6:3f:bd:c6:c2:90:e6:5d:31:5c:3c:48:6d:7f:d6:
                    55:82:3f:a9:96:bd:6b:0c:8f:f0:fb:f8:71:02:4c:
                    4e:05:24:49:df:b8:4e:e6:79:50:e4:4e:6b:ea:75:
                    2d:04:1e:f6:73:6a:dd:bb:9b:25:99:3b:7e:ed:3e:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B9:CC:02:85:0C:95:50:A4:2E:87:5E:66:86:0C:5D:2A:EE:EC:DD
            X509v3 Authority Key Identifier:
                keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:77:89:df:60:35:4d:2e:ef:c3:51:ba:23:36:38:9d:2e:72:
         fd:7c:89:89:5a:f3:5d:73:c7:21:c3:b3:39:c1:73:cf:16:a9:
         51:6f:7b:fd:0f:18:5c:fb:ea:a3:1c:43:b4:f2:89:4b:f8:7a:
         db:ee:56:94:20:23:0e:dd:dc:64:fd:52:64:8c:44:15:fb:fd:
         be:6c:ef:49:eb:26:8c:3a:68:ee:6e:c7:01:c9:35:58:5b:98:
         e4:12:66:0b:36:6e:4c:a5:ad:e1:d0:1a:44:49:8a:d9:2d:a0:
         49:af:e6:18:26:21:a2:78:db:6d:1e:34:4c:bc:55:a7:69:45:
         4c:e2:01:d7:04:04:2f:d8:c2:ba:f3:c5:aa:a3:d4:5c:80:63:
         dd:59:2c:ce:ec:80:82:dd:df:9e:9c:11:2f:53:37:b9:94:90:
         8f:70:b0:86:26:15:93:28:a0:57:2b:c9:ac:41:80:1f:78:4b:
         7f:60:ab:cf:2a:3b:04:fc:d7:5f:2b:a5:61:b3:8b:50:a1:68:
         dd:f0:f2:eb:f5:cc:f4:36:4c:7a:94:db:2b:7f:6f:32:25:c0:
         2f:7a:07:35:ed:a4:3d:a9:62:1b:2c:41:81:d3:2b:78:07:d5:
         92:d9:1d:6c:02:76:cf:e9:46:8a:8a:54:1a:c7:cc:92:63:1a:
         a0:11:37:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDhqtigQtF/CPDqbrVmqIkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZWViMjQyZmIwYWZhYTAzN2Q5Y2FmNTYwNGM2NTg3ZTQw
ZGUzYjUwHhcNMjYwOTI3MDcwMTA1WhcNMjYwOTI4MDcwMTA1WjAzMTEwLwYDVQQD
Eyg4YmI5Y2MwMjg1MGM5NTUwYTQyZTg3NWU2Njg2MGM1ZDJhZWVlY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DnYYsMMZUVheuW9/JwSR5ERRcf3
H11hbtjFG8ylpiDJ276upk8bJqSyx9jCr8bOmHWr95QQCfc5Bmjl0hepG79as4bt
pCVELZx4HTXmEfpOluOSCXDULJHooipLlOHqedgCPO0eufi19VeufdXJunlhVpRC
lr4AkoaF7qj6fkbB+qcECMjUZL2v4hqj8RWmMNKjU5x1jgZRZMJLAzlPf1Del6jT
txLHDmhCEz877Nh8qk0W51DJf6/2vm+cKAr3sXHWP73GwpDmXTFcPEhtf9ZVgj+p
lr1rDI/w+/hxAkxOBSRJ37hO5nlQ5E5r6nUtBB72c2rdu5slmTt+7T7dIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIu5zAKFDJVQpC6HXmaGDF0q7uzdMB8GA1UdIwQY
MBaAFCLuskL7CvqgN9nK9WBMZYfkDeO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYt
MjUxNTYyZjAwZmM1LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYtMjUxNTYyZjAwZmM1
LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApXeJ32A1
TS7vw1G6IzY4nS5y/XyJiVrzXXPHIcOzOcFzzxapUW97/Q8YXPvqoxxDtPKJS/h6
2+5WlCAjDt3cZP1SZIxEFfv9vmzvSesmjDpo7m7HAck1WFuY5BJmCzZuTKWt4dAa
REmK2S2gSa/mGCYhonjbbR40TLxVp2lFTOIB1wQEL9jCuvPFqqPUXIBj3VkszuyA
gt3fnpwRL1M3uZSQj3CwhiYVkyigVyvJrEGAH3hLf2Crzyo7BPzXXyulYbOLUKFo
3fDy6/XM9DZMepTbK39vMiXAL3oHNe2kPaliGyxBgdMreAfVktkdbAJ2z+lGiopU
GsfMkmMaoBE3rg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 17:18:43 2026 by rpki-client