Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
File:                     FRRT9ILNp468mWJdgLD_w2YPlfI.mft (raw, json)
Hash identifier:          wtiWFKGK+wyT7s6mNKLzoSMvzJhD7u3t9lwsmbRjXAA=
Subject key identifier:   4F:6C:24:F5:D0:1F:4A:80:E8:A8:C5:2F:D6:4B:0B:92:58:63:9C:C8
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Certificate issuer:       /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial:       019D37C0246B0BCA9154078E01D48D43D7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
Manifest number:          189E
Signing time:             Sun 29 Mar 2026 04:00:32 +0000
Manifest this update:     Sun 29 Mar 2026 04:00:32 +0000
Manifest next update:     Mon 30 Mar 2026 04:00:32 +0000
Files and hashes:         1: EqM2uQDUV3EtJlQIhiZ248LRU80.roa (hash: LrXepb2bBzqPdwODtMI9Sq5W4GGZQAYaJUawmfJC0iE=)
                          2: FRRT9ILNp468mWJdgLD_w2YPlfI.crl (hash: WanWVEZ7Db1/VjKbLPGwjoehsoOIpdnaqjhGtyvRWZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:24:6b:0b:ca:91:54:07:8e:01:d4:8d:43:d7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
        Validity
            Not Before: Mar 29 04:00:32 2026 GMT
            Not After : Mar 30 04:00:32 2026 GMT
        Subject: CN=4f6c24f5d01f4a80e8a8c52fd64b0b9258639cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c9:de:79:e0:02:4d:3f:0d:c0:96:2b:68:a9:
                    86:89:db:39:db:33:ab:b5:39:7b:dc:94:93:f2:b2:
                    39:30:3f:29:f1:ea:56:15:67:1e:e9:db:37:9f:6e:
                    27:c7:98:ad:21:4e:f7:14:c4:f5:63:be:6b:0a:31:
                    d9:3b:fe:7a:29:7b:1b:19:ec:15:3f:58:05:cf:21:
                    6e:e8:9d:5b:88:77:8c:8c:22:15:c6:0d:c5:df:88:
                    48:07:66:fc:28:d3:39:c4:b5:3f:0f:7c:4f:a3:1e:
                    31:69:7a:68:41:5a:4c:e7:fc:3b:75:38:3e:d2:7f:
                    f4:b5:f7:c0:fb:83:8f:22:b7:18:2f:3c:0c:e9:6a:
                    57:e1:4e:09:bf:26:12:1f:58:4a:34:d6:45:b5:af:
                    f8:6a:ab:60:ee:e8:2b:00:98:65:fc:0b:d6:1f:f8:
                    d2:b8:1a:c2:23:59:72:cd:8a:17:fe:4e:3b:7b:22:
                    26:e1:6c:63:ef:cc:c0:37:50:4b:f2:64:97:f9:77:
                    ac:a7:73:35:e1:28:0e:51:1c:4b:89:12:8e:2c:dc:
                    25:11:c2:2d:ef:40:70:d5:4a:06:7b:99:bb:3f:35:
                    75:3b:ea:64:b5:25:36:9a:7c:e5:76:71:31:10:30:
                    a3:52:0a:63:91:e8:f4:61:76:e4:08:2b:60:2a:5c:
                    47:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:6C:24:F5:D0:1F:4A:80:E8:A8:C5:2F:D6:4B:0B:92:58:63:9C:C8
            X509v3 Authority Key Identifier:
                keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2c:33:96:11:a8:16:b9:0b:62:36:8c:35:d3:cc:3a:fa:17:
         6d:1c:54:fb:5e:09:2d:e8:ee:f1:1f:ef:21:eb:22:36:90:87:
         19:7d:f1:66:80:a4:a9:f8:9c:09:f5:2f:09:c4:e3:96:6d:7f:
         ce:fa:b2:c5:3d:70:94:3a:76:d2:fe:cb:6c:78:d7:8e:7d:08:
         8a:fb:91:0b:19:d0:51:20:e3:1b:41:18:c9:f0:d9:9e:79:f6:
         1d:4a:c8:42:80:73:3e:41:60:a0:0f:c6:95:35:61:dc:60:82:
         7e:b6:e3:8b:e3:df:96:05:a3:40:69:7a:4e:fe:3c:36:a2:db:
         2d:d2:0f:ea:a6:60:ed:22:de:d9:0a:50:4d:95:91:7e:ec:3f:
         91:39:c3:36:ba:f4:98:4d:6e:fd:4f:a1:f3:7a:1d:20:23:b7:
         03:b7:3a:63:51:79:4b:b6:8a:d3:c7:85:0d:d7:e6:5f:17:e7:
         51:fe:a9:e7:22:5e:5d:9b:34:fa:27:a7:41:65:61:3a:c3:ea:
         25:83:76:15:c1:7b:ff:46:31:6d:93:65:2f:75:59:ba:e6:3e:
         43:f8:7e:f5:1d:df:a2:39:fc:a6:6b:76:a0:a6:db:f7:9a:93:
         d4:45:a8:1c:ad:d1:7d:cb:b0:f6:3c:5d:28:6f:1a:06:48:80:
         bf:fc:aa:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wCRrC8qRVAeOAdSNQ9fBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MTQ1M2Y0ODJjZGE3OGViYzk5NjI1ZDgwYjBmZmMzNjYw
Zjk1ZjIwHhcNMjYwMzI5MDQwMDMyWhcNMjYwMzMwMDQwMDMyWjAzMTEwLwYDVQQD
Eyg0ZjZjMjRmNWQwMWY0YTgwZThhOGM1MmZkNjRiMGI5MjU4NjM5Y2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcneeeACTT8NwJYraKmGids52zOr
tTl73JST8rI5MD8p8epWFWce6ds3n24nx5itIU73FMT1Y75rCjHZO/56KXsbGewV
P1gFzyFu6J1biHeMjCIVxg3F34hIB2b8KNM5xLU/D3xPox4xaXpoQVpM5/w7dTg+
0n/0tffA+4OPIrcYLzwM6WpX4U4JvyYSH1hKNNZFta/4aqtg7ugrAJhl/AvWH/jS
uBrCI1lyzYoX/k47eyIm4Wxj78zAN1BL8mSX+Xesp3M14SgOURxLiRKOLNwlEcIt
70Bw1UoGe5m7PzV1O+pktSU2mnzldnExEDCjUgpjkej0YXbkCCtgKlxHywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9sJPXQH0qA6KjFL9ZLC5JYY5zIMB8GA1UdIwQY
MBaAFBUUU/SCzaeOvJliXYCw/8NmD5XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODct
M2JjYjhiZjhiYmZlLzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81OWZjZjAtMWQ1Yy00ZWNiLWJmODctM2JjYjhiZjhiYmZl
LzEvRlJSVDlJTE5wNDY4bVdKZGdMRF93MllQbGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAciwzlhGo
FrkLYjaMNdPMOvoXbRxU+14JLeju8R/vIesiNpCHGX3xZoCkqficCfUvCcTjlm1/
zvqyxT1wlDp20v7LbHjXjn0IivuRCxnQUSDjG0EYyfDZnnn2HUrIQoBzPkFgoA/G
lTVh3GCCfrbji+PflgWjQGl6Tv48NqLbLdIP6qZg7SLe2QpQTZWRfuw/kTnDNrr0
mE1u/U+h83odICO3A7c6Y1F5S7aK08eFDdfmXxfnUf6p5yJeXZs0+ienQWVhOsPq
JYN2FcF7/0YxbZNlL3VZuuY+Q/h+9R3fojn8pmt2oKbb95qT1EWoHK3Rfcuw9jxd
KG8aBkiAv/yq+g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:03 2026 by rpki-client