Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft
File:                     FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft (raw, json)
Hash identifier:          zudL2j+RAhlMPYm40B4h4AaznybMcDBRELiH1c1qjdk=
Subject key identifier:   71:DB:B3:63:BE:F1:55:3D:95:34:E6:21:6C:44:7A:DE:37:5F:04:7E
Authority key identifier: 15:30:74:D7:FA:28:A4:3E:40:77:8F:F4:56:2F:53:4F:C3:8E:1F:B0
Certificate issuer:       /CN=153074d7fa28a43e40778ff4562f534fc38e1fb0
Certificate serial:       019D281667F2F6104D0BA72DDC3DF101914D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft
Manifest number:          0780
Signing time:             Thu 26 Mar 2026 03:00:50 +0000
Manifest this update:     Thu 26 Mar 2026 03:00:50 +0000
Manifest next update:     Fri 27 Mar 2026 03:00:50 +0000
Files and hashes:         1: FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl (hash: 8kKEZtjs2rUILjptOLcnp9TUsoX1GQL7YDjW27YvsTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:67:f2:f6:10:4d:0b:a7:2d:dc:3d:f1:01:91:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153074d7fa28a43e40778ff4562f534fc38e1fb0
        Validity
            Not Before: Mar 26 03:00:50 2026 GMT
            Not After : Mar 27 03:00:50 2026 GMT
        Subject: CN=71dbb363bef1553d9534e6216c447ade375f047e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:12:dc:ba:7f:e8:04:d0:50:1e:02:ed:85:44:
                    28:80:9c:3a:3e:be:37:94:1d:88:5e:c9:e8:49:4b:
                    de:85:37:99:07:ff:9d:50:7f:67:2b:15:13:ef:1e:
                    7a:b5:3b:22:7f:02:83:fb:c9:c1:e8:59:c2:05:0a:
                    e2:78:db:e7:d4:b8:08:0d:9e:75:46:a9:07:ac:48:
                    51:7a:ee:0f:49:1f:f8:3d:e6:1b:81:e3:23:47:03:
                    6d:e1:82:3c:c1:d7:70:d7:a1:6a:9a:65:79:f0:30:
                    7f:0d:cc:1e:d3:75:5d:fa:f5:e4:7d:55:c8:09:7a:
                    0a:e1:1b:40:f4:4e:61:24:4d:e3:fe:91:90:d7:91:
                    11:33:69:83:3f:16:8f:94:9e:d3:aa:71:76:32:18:
                    eb:a7:a4:eb:76:54:2b:1f:0d:3a:8d:40:97:b2:38:
                    c9:56:17:07:7d:6a:9c:19:da:c0:04:a7:a6:e6:65:
                    91:55:2a:dd:56:5b:c6:5a:b4:45:1c:91:2f:d4:46:
                    b1:0e:70:64:ae:84:3b:1c:70:48:0b:ce:e7:fa:28:
                    54:3f:97:20:86:19:30:a3:a3:93:d1:73:27:04:60:
                    17:c3:ec:58:d9:af:4c:05:35:93:e7:b2:05:93:e6:
                    ab:b1:f7:fe:4d:22:33:4a:8a:e5:60:5e:8a:2d:81:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:DB:B3:63:BE:F1:55:3D:95:34:E6:21:6C:44:7A:DE:37:5F:04:7E
            X509v3 Authority Key Identifier:
                keyid:15:30:74:D7:FA:28:A4:3E:40:77:8F:F4:56:2F:53:4F:C3:8E:1F:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTB01_oopD5Ad4_0Vi9TT8OOH7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1760af-dc1c-408c-86dd-3dc35e544aaf/1/FTB01_oopD5Ad4_0Vi9TT8OOH7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:7b:0c:4d:b7:64:6d:f1:f8:d1:f3:59:29:a5:46:61:47:b6:
         4a:c6:e7:c8:80:fb:35:74:b4:d3:74:de:a1:1d:93:51:bb:d5:
         9f:ad:bf:6c:06:18:8a:a3:eb:dd:7a:06:ae:22:dd:a8:45:93:
         95:d5:a7:a1:43:ca:78:d3:eb:13:bc:4a:be:de:8a:bf:6f:2d:
         45:7b:a2:c8:6a:25:3d:fa:e2:ff:a0:88:12:a9:99:96:fd:17:
         4c:b7:8d:cb:22:23:15:20:da:4e:2e:25:e7:59:05:39:ad:78:
         a7:be:09:42:e8:a4:55:1b:15:4f:65:6e:7f:b9:d7:4e:12:15:
         35:b5:f2:eb:a2:d8:ce:6b:b1:0a:fa:72:02:54:bb:fa:c9:02:
         89:e1:a1:b4:67:dc:53:1a:db:2e:cd:66:e6:e2:44:ed:49:ec:
         fa:9e:41:04:b7:23:ae:f5:f0:4d:5c:be:ea:77:33:aa:b1:a9:
         1c:01:30:1f:13:c8:ec:1b:a0:d8:99:19:7b:61:7d:c1:97:33:
         78:c0:91:08:d3:6d:48:6c:44:d3:03:db:80:8a:ae:3f:5b:bb:
         5a:95:72:14:ee:c3:4d:81:55:82:1c:21:b4:dd:0e:77:c3:65:
         1b:56:a0:72:8f:dc:20:88:3f:c2:bd:c7:1d:c3:ae:1c:d3:bd:
         b5:82:20:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oFmfy9hBNC6ct3D3xAZFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzA3NGQ3ZmEyOGE0M2U0MDc3OGZmNDU2MmY1MzRmYzM4
ZTFmYjAwHhcNMjYwMzI2MDMwMDUwWhcNMjYwMzI3MDMwMDUwWjAzMTEwLwYDVQQD
Eyg3MWRiYjM2M2JlZjE1NTNkOTUzNGU2MjE2YzQ0N2FkZTM3NWYwNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRLcun/oBNBQHgLthUQogJw6Pr43
lB2IXsnoSUvehTeZB/+dUH9nKxUT7x56tTsifwKD+8nB6FnCBQrieNvn1LgIDZ51
RqkHrEhReu4PSR/4PeYbgeMjRwNt4YI8wddw16FqmmV58DB/Dcwe03Vd+vXkfVXI
CXoK4RtA9E5hJE3j/pGQ15ERM2mDPxaPlJ7TqnF2Mhjrp6TrdlQrHw06jUCXsjjJ
VhcHfWqcGdrABKem5mWRVSrdVlvGWrRFHJEv1EaxDnBkroQ7HHBIC87n+ihUP5cg
hhkwo6OT0XMnBGAXw+xY2a9MBTWT57IFk+arsff+TSIzSorlYF6KLYFnTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHHbs2O+8VU9lTTmIWxEet43XwR+MB8GA1UdIwQY
MBaAFBUwdNf6KKQ+QHeP9FYvU0/Djh+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xNzYwYWYtZGMxYy00MDhjLTg2ZGQt
M2RjMzVlNTQ0YWFmLzEvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xNzYwYWYtZGMxYy00MDhjLTg2ZGQtM2RjMzVlNTQ0YWFm
LzEvRlRCMDFfb29wRDVBZDRfMFZpOVRUOE9PSDdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXsMTbdk
bfH40fNZKaVGYUe2SsbnyID7NXS003TeoR2TUbvVn62/bAYYiqPr3XoGriLdqEWT
ldWnoUPKeNPrE7xKvt6Kv28tRXuiyGolPfri/6CIEqmZlv0XTLeNyyIjFSDaTi4l
51kFOa14p74JQuikVRsVT2Vuf7nXThIVNbXy66LYzmuxCvpyAlS7+skCieGhtGfc
UxrbLs1m5uJE7Uns+p5BBLcjrvXwTVy+6nczqrGpHAEwHxPI7Bug2JkZe2F9wZcz
eMCRCNNtSGxE0wPbgIquP1u7WpVyFO7DTYFVghwhtN0Od8NlG1agco/cIIg/wr3H
HcOuHNO9tYIgzg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:45 2026 by rpki-client