Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File:                     n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier:          Elrr9OaQP1E6cP2BfAG1A7T2URdy1FMvo4Hj6CsoYlg=
Subject key identifier:   B9:B0:64:30:90:EE:E2:A3:4E:AE:E0:18:3D:CB:D5:B7:E0:8F:8A:35
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer:       /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial:       019EB6C5D9A1FF61A7AEB02CDDD68A71B76F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number:          1411
Signing time:             Thu 11 Jun 2026 13:01:19 +0000
Manifest this update:     Thu 11 Jun 2026 13:01:19 +0000
Manifest next update:     Fri 12 Jun 2026 13:01:19 +0000
Files and hashes:         1: BCsvI1mqtMkrqM1Desz65UxbMeU.roa (hash: oNMs5i3Xy1K3iMANMRawDJNBdjBrE5KXc5y/my453cw=)
                          2: LI0sVfoUzK1z9YOT5-FCjcJGQ0I.roa (hash: L0O8mT469MCzuE1WS6kEM7aYWqcvleiuYLagt0EiSfA=)
                          3: eFneRI8NVirY9FXkrSGjf8r8DIg.roa (hash: eg6+J92P4U7OROkq5yxujy7G7w0DLDuwMs/a/0cX+a0=)
                          4: hd7rQeulDecBxJXUMXx1KtWshog.roa (hash: E7bJmyCV3Xzny9dpUYDbi35SX9UwJAseA3WYq0vr1AA=)
                          5: jKCgpxt1ADjjHAE5Am2jfuifPn8.roa (hash: XeGQ/DX/ECCSWySWuH3BuJMwUzvEFlXF4fBqBfaoS58=)
                          6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: 8ZG32OC9KdffRm7/DKW2QmZZ7sMExcqKOZCPx0geV9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:c5:d9:a1:ff:61:a7:ae:b0:2c:dd:d6:8a:71:b7:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
        Validity
            Not Before: Jun 11 13:01:19 2026 GMT
            Not After : Jun 12 13:01:19 2026 GMT
        Subject: CN=b9b0643090eee2a34eaee0183dcbd5b7e08f8a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:56:8e:5e:6e:75:bd:d8:22:7e:31:8e:fe:2e:
                    67:7c:b1:66:62:67:07:c0:39:03:65:4f:4b:5f:86:
                    ed:7c:aa:db:ac:73:d3:28:8f:ea:ca:b8:bb:55:86:
                    5f:e6:00:80:f5:6b:35:51:81:8a:f6:af:d6:18:f5:
                    58:82:ec:0a:b2:d0:6c:8e:6d:30:bb:9d:dc:5b:e1:
                    37:27:02:72:67:89:79:21:14:b8:20:35:95:0d:ca:
                    1c:a9:a8:06:09:bb:b7:ae:91:72:68:e9:f8:33:96:
                    c3:56:a3:0d:89:c7:a8:d0:63:7e:f9:0b:da:93:30:
                    bb:3f:92:7c:1e:68:b5:b7:9d:07:5c:e8:a6:a3:4a:
                    da:91:56:19:a9:6f:b9:7d:5c:24:2e:0a:d7:ae:4f:
                    6a:c6:c2:a7:b6:83:1e:c6:ca:1c:ad:d2:d3:37:d8:
                    7c:d7:45:6e:3d:90:a8:40:7d:5e:bf:e6:a5:84:59:
                    6f:a3:0d:23:4e:38:a4:c7:86:ae:33:72:61:04:0a:
                    db:55:83:e1:7d:1d:b8:d7:ed:84:0c:b1:20:79:d6:
                    37:44:2d:8e:5a:4d:a2:bb:fc:02:8a:9e:fa:cd:ac:
                    1f:10:6b:a0:c5:e7:84:6a:c3:ef:29:fe:7f:0b:1a:
                    90:70:a7:08:5c:b7:20:0f:0c:b8:77:67:ec:c3:5d:
                    0a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B0:64:30:90:EE:E2:A3:4E:AE:E0:18:3D:CB:D5:B7:E0:8F:8A:35
            X509v3 Authority Key Identifier:
                keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:b6:14:4f:2a:36:33:48:25:cc:d2:62:10:e2:c9:ea:10:17:
         88:00:54:01:97:f4:46:91:29:94:87:63:8d:db:a1:72:c1:f6:
         e1:ad:14:aa:a0:0f:f7:eb:a9:7a:60:d4:a9:73:88:93:27:b4:
         38:c8:b3:ce:86:52:0f:33:8f:b0:e8:ca:d7:ee:c1:ab:96:ad:
         31:36:72:70:45:e7:35:df:e9:f5:b1:f8:e1:f0:ca:1e:a6:da:
         95:6c:a9:71:ba:c9:33:a5:84:ca:a2:01:6c:ec:dd:37:e7:f0:
         64:04:dd:15:af:cd:89:38:10:17:3c:da:fb:2f:e5:fc:2c:9b:
         89:41:97:ce:df:14:2b:3d:7d:ec:85:24:c4:e8:79:92:8d:63:
         5f:d4:3e:9d:e2:e9:bb:df:2c:e0:72:d4:ac:0c:2b:26:35:b2:
         c4:0b:15:ba:ee:46:77:fc:0f:90:cc:c8:38:9a:2a:36:94:72:
         22:fb:d5:e4:f7:22:34:c2:45:9d:e0:ce:e2:cd:5d:d6:d1:c2:
         68:a9:81:30:c3:0d:19:9c:3c:d9:52:d4:48:fc:9d:5f:a7:26:
         14:1c:88:34:77:0a:32:e6:9a:66:e7:d9:09:71:5c:88:54:ef:
         b8:d5:56:b7:01:c9:35:32:05:78:2a:f3:72:43:11:4e:3c:f4:
         b7:9d:e5:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62xdmh/2GnrrAs3daKcbdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl
MTI5ODcwHhcNMjYwNjExMTMwMTE5WhcNMjYwNjEyMTMwMTE5WjAzMTEwLwYDVQQD
EyhiOWIwNjQzMDkwZWVlMmEzNGVhZWUwMTgzZGNiZDViN2UwOGY4YTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylaOXm51vdgifjGO/i5nfLFmYmcH
wDkDZU9LX4btfKrbrHPTKI/qyri7VYZf5gCA9Ws1UYGK9q/WGPVYguwKstBsjm0w
u53cW+E3JwJyZ4l5IRS4IDWVDcocqagGCbu3rpFyaOn4M5bDVqMNiceo0GN++Qva
kzC7P5J8Hmi1t50HXOimo0rakVYZqW+5fVwkLgrXrk9qxsKntoMexsocrdLTN9h8
10VuPZCoQH1ev+alhFlvow0jTjikx4auM3JhBArbVYPhfR241+2EDLEgedY3RC2O
Wk2iu/wCip76zawfEGugxeeEasPvKf5/CxqQcKcIXLcgDwy4d2fsw10KjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLmwZDCQ7uKjTq7gGD3L1bfgj4o1MB8GA1UdIwQY
MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt
NDYzMjJlMDJmMDhkLzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk
LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAarYUTyo2
M0glzNJiEOLJ6hAXiABUAZf0RpEplIdjjduhcsH24a0UqqAP9+upemDUqXOIkye0
OMizzoZSDzOPsOjK1+7Bq5atMTZycEXnNd/p9bH44fDKHqbalWypcbrJM6WEyqIB
bOzdN+fwZATdFa/NiTgQFzza+y/l/CybiUGXzt8UKz197IUkxOh5ko1jX9Q+neLp
u98s4HLUrAwrJjWyxAsVuu5Gd/wPkMzIOJoqNpRyIvvV5PciNMJFneDO4s1d1tHC
aKmBMMMNGZw82VLUSPydX6cmFByINHcKMuaaZufZCXFciFTvuNVWtwHJNTIFeCrz
ckMRTjz0t53lnQ==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:42:31 2026 by rpki-client