Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
File:                     FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json)
Hash identifier:          Fq4G1MuwGJyrV+b69ye6oMq383ZnTDyR8JVyGujGjWI=
Subject key identifier:   EF:9E:FA:AD:B6:E6:67:75:D1:92:67:33:EF:12:AB:44:16:8B:DD:48
Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E
Certificate issuer:       /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
Certificate serial:       019D371BBCC190BB16F488A5B47E38192C4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
Manifest number:          0F44
Signing time:             Sun 29 Mar 2026 01:00:57 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:57 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:57 +0000
Files and hashes:         1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: +mGLAC9psSwHi2O8pr6qD//BRkmNQD+yIcNYBb9pDL0=)
                          2: TF6uvKJoThoeL-6VAxiiIrXGTDE.roa (hash: Z1iMOswxtKc687KzUW15WbR0/w7lrYl+AKo5ErE1KtI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:bc:c1:90:bb:16:f4:88:a5:b4:7e:38:19:2c:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e
        Validity
            Not Before: Mar 29 01:00:57 2026 GMT
            Not After : Mar 30 01:00:57 2026 GMT
        Subject: CN=ef9efaadb6e66775d1926733ef12ab44168bdd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:49:8d:10:f2:bd:46:c0:e2:af:84:df:af:
                    a0:f3:0e:c7:a6:bb:6f:1f:8c:1a:60:17:c0:0f:88:
                    67:6c:10:43:a5:00:58:51:64:3a:12:35:7d:92:46:
                    d0:34:a7:44:11:fe:a7:82:e3:37:cc:87:ef:25:bc:
                    38:ad:36:f6:c5:2e:bf:c9:82:f4:db:d9:35:bb:30:
                    7c:22:d2:5c:60:54:ef:88:94:38:2d:c1:b1:e9:76:
                    ad:d8:1d:62:ad:9f:10:3a:c3:fb:fc:e6:b4:69:ed:
                    fa:a0:3a:9e:af:3e:88:1d:94:33:c1:70:29:30:3d:
                    e7:86:af:15:b8:9d:20:27:44:a1:1d:2c:86:2b:f8:
                    99:1c:0a:2f:da:a1:b6:2c:08:1e:15:17:27:b1:89:
                    bb:81:66:78:f2:3e:85:c7:b8:66:9a:c3:d4:9b:df:
                    4c:1c:1f:64:18:99:04:4b:3f:cc:2f:eb:91:cf:8e:
                    bc:e9:a4:e6:ef:16:2f:d7:a7:cd:f6:e1:c1:4c:f1:
                    1f:6d:fa:6c:45:d7:7a:73:83:7e:44:22:68:f0:6e:
                    2d:ea:cb:97:ad:4a:bf:42:42:25:cb:22:ed:c8:e2:
                    00:36:5b:46:08:65:0d:ee:bc:e4:3a:7b:7b:4c:21:
                    8e:c9:05:98:eb:99:7c:f0:e6:fb:a4:e3:ba:19:41:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9E:FA:AD:B6:E6:67:75:D1:92:67:33:EF:12:AB:44:16:8B:DD:48
            X509v3 Authority Key Identifier:
                keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f1:d7:3e:a0:2d:1c:8a:ce:e7:6d:f6:45:61:fa:7c:74:3c:
         4e:17:58:79:f5:23:1d:41:64:6e:bf:30:81:56:74:87:fb:04:
         75:90:fb:bd:bc:8c:ab:b4:c7:8a:9d:ab:c3:d2:b5:8d:22:5e:
         0b:e9:9a:37:4c:29:1d:c0:0f:43:a3:65:a2:a1:52:26:fc:78:
         94:52:f4:3c:c0:ff:f8:df:a3:b0:bd:d6:3b:66:e1:c5:13:70:
         f6:1a:87:2b:af:e5:a8:af:ca:4b:54:9a:76:2e:4b:ee:e9:78:
         b3:4c:d1:88:3d:ce:c1:4f:f4:f1:80:5f:2f:4e:7b:9d:46:88:
         81:29:e2:d1:e8:54:f3:6e:6e:58:1d:e5:d8:40:cd:bd:76:da:
         85:71:7e:8a:76:44:cc:d3:8e:b0:49:9d:04:88:03:a9:ab:52:
         43:21:f5:33:bf:51:1a:da:d2:5f:62:a1:f8:28:09:a1:03:55:
         fa:e6:fe:c5:72:92:fc:15:a1:9e:56:6c:7c:5c:2e:23:fa:e4:
         11:e1:83:ca:3b:b3:dd:02:b3:c8:76:22:7f:9c:39:64:8e:77:
         7e:53:ec:ee:64:5a:a8:ca:b2:51:ad:b7:4c:91:90:1c:9a:5a:
         f7:0d:3f:e5:a4:e5:09:84:85:78:65:92:f3:8c:86:65:80:78:
         54:98:a4:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G7zBkLsW9IiltH44GSxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZmMxMjExZWUzYWY2NTdmYzk0ZjkyZmEwMzA5ZGU2YzZj
OTQwNmUwHhcNMjYwMzI5MDEwMDU3WhcNMjYwMzMwMDEwMDU3WjAzMTEwLwYDVQQD
EyhlZjllZmFhZGI2ZTY2Nzc1ZDE5MjY3MzNlZjEyYWI0NDE2OGJkZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj5JjRDyvUbA4q+E36+g8w7Hprtv
H4waYBfAD4hnbBBDpQBYUWQ6EjV9kkbQNKdEEf6nguM3zIfvJbw4rTb2xS6/yYL0
29k1uzB8ItJcYFTviJQ4LcGx6Xat2B1irZ8QOsP7/Oa0ae36oDqerz6IHZQzwXAp
MD3nhq8VuJ0gJ0ShHSyGK/iZHAov2qG2LAgeFRcnsYm7gWZ48j6Fx7hmmsPUm99M
HB9kGJkESz/ML+uRz4686aTm7xYv16fN9uHBTPEfbfpsRdd6c4N+RCJo8G4t6suX
rUq/QkIlyyLtyOIANltGCGUN7rzkOnt7TCGOyQWY65l88Ob7pOO6GUEyjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+e+q225md10ZJnM+8Sq0QWi91IMB8GA1UdIwQY
MBaAFBT8EhHuOvZX/JT5L6AwnebGyUBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQt
NTk4OWE0OTAyZDFhLzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQtNTk4OWE0OTAyZDFh
LzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/HXPqAt
HIrO5232RWH6fHQ8ThdYefUjHUFkbr8wgVZ0h/sEdZD7vbyMq7THip2rw9K1jSJe
C+maN0wpHcAPQ6NloqFSJvx4lFL0PMD/+N+jsL3WO2bhxRNw9hqHK6/lqK/KS1Sa
di5L7ul4s0zRiD3OwU/08YBfL057nUaIgSni0ehU825uWB3l2EDNvXbahXF+inZE
zNOOsEmdBIgDqatSQyH1M79RGtrSX2Kh+CgJoQNV+ub+xXKS/BWhnlZsfFwuI/rk
EeGDyjuz3QKzyHYif5w5ZI53flPs7mRaqMqyUa23TJGQHJpa9w0/5aTlCYSFeGWS
84yGZYB4VJikbg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:20 2026 by rpki-client