Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File:                     FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier:          6XMaprPE2zx7raoueW45UbepU8nzhPRqImImUSjUcnk=
Subject key identifier:   75:9E:A3:CD:EE:21:3B:52:27:01:6D:38:AD:97:4E:5C:17:77:D6:1D
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer:       /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial:       019D37C0C8FCDC50C65AACAAF04880FB9E99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number:          075E
Signing time:             Sun 29 Mar 2026 04:01:14 +0000
Manifest this update:     Sun 29 Mar 2026 04:01:14 +0000
Manifest next update:     Mon 30 Mar 2026 04:01:14 +0000
Files and hashes:         1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: PlBLQRr3e1f25TGH8KQC5GUbzo2HtsMzlvBapEBn24Y=)
                          2: mSf_6hw9LbwczEGLxS7bvwkiv9c.roa (hash: CPUV5PHm53/ZGx8XFmHD3voe3NEDlMd+rbTwW6kMNMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 04:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:c0:c8:fc:dc:50:c6:5a:ac:aa:f0:48:80:fb:9e:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
        Validity
            Not Before: Mar 29 04:01:14 2026 GMT
            Not After : Mar 30 04:01:14 2026 GMT
        Subject: CN=759ea3cdee213b5227016d38ad974e5c1777d61d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:83:66:6e:58:a9:7e:b1:1d:ea:bf:f0:2f:80:
                    db:5d:15:fe:6f:14:fc:89:13:f8:50:4e:2c:c6:0c:
                    b4:2a:dc:e8:d9:57:72:02:e0:c3:d2:25:43:0b:bf:
                    fe:44:15:20:0e:26:3b:be:9e:09:46:d1:8b:eb:f4:
                    f0:fc:60:b6:9d:db:f0:fa:17:65:dd:00:27:ce:80:
                    00:75:17:37:f5:95:63:ee:5e:c1:8a:de:c9:6d:a1:
                    1e:a8:7d:78:e1:10:83:fb:04:e1:72:a3:ca:4c:66:
                    69:ce:b6:7b:56:6f:a9:f4:6c:1a:27:e4:fe:5e:a3:
                    aa:c2:d0:d2:2e:62:b3:7c:94:67:a8:de:e2:8b:91:
                    0c:a3:3e:0e:a7:b2:2d:47:ab:02:87:55:f1:5c:90:
                    2f:67:18:9e:e4:29:2b:39:ee:a4:f3:d8:5f:7b:12:
                    96:b2:23:6f:29:4a:c4:b6:90:f5:59:4e:3c:52:40:
                    c2:d0:ce:e3:dd:4e:9d:bf:61:66:fc:2d:c2:75:51:
                    52:79:e3:07:9e:f1:8d:82:a0:78:7e:60:78:0b:0c:
                    fd:e2:0c:ea:c9:1f:6c:28:c5:96:6b:b2:aa:fb:89:
                    12:5c:55:84:9b:52:64:f8:b7:6d:46:ec:78:89:d5:
                    9c:3a:a9:31:af:78:04:59:c1:bc:69:fe:d8:aa:26:
                    f1:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:9E:A3:CD:EE:21:3B:52:27:01:6D:38:AD:97:4E:5C:17:77:D6:1D
            X509v3 Authority Key Identifier:
                keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:aa:ad:5e:3b:33:fe:89:d1:84:59:48:4c:e0:24:7c:e0:9c:
         b8:2d:a8:a8:a9:48:cc:79:e1:c2:e0:3e:fc:30:be:ce:f5:d8:
         a4:f4:b3:8b:77:b6:fc:4c:ba:34:70:47:a8:f0:5f:2c:a4:da:
         16:4d:a5:ec:84:fd:71:9f:a4:37:dd:ec:1d:be:f0:42:d1:bf:
         2e:07:4d:19:38:dd:84:c7:c2:7d:0d:b2:28:68:4d:8c:2c:d1:
         78:e8:35:fe:d0:e3:95:47:aa:55:bf:49:25:c1:7f:94:8b:fe:
         70:97:1a:6f:ad:a3:c1:65:20:06:2a:e4:b3:c5:52:46:a8:0e:
         0f:f1:27:84:81:cd:e3:62:c6:0f:b0:72:98:e6:de:51:69:cd:
         e7:3b:3a:cc:d7:c9:ba:e0:91:87:d9:7f:a5:ec:39:d7:e4:14:
         c6:75:6f:d2:99:da:ce:d0:3c:b5:a7:58:56:9e:d7:3c:b4:04:
         76:c6:45:c8:e7:0d:89:eb:8e:08:ce:35:74:0d:0d:1c:c3:0c:
         78:9f:80:77:c2:30:ae:c5:10:6b:e0:ca:c6:0b:f5:ac:87:4a:
         6b:95:06:36:ce:70:dc:ec:fa:67:1d:8f:98:27:ef:0e:72:51:
         f2:13:12:3a:f4:a6:ac:5f:d6:bf:10:9a:60:3f:40:46:da:d3:
         be:da:d5:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wMj83FDGWqyq8EiA+56ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTI4YTBlMjQxZmZmN2FhMmU2NGFhMzg4MTU2ZjIyM2Uy
ZDIxNWYwHhcNMjYwMzI5MDQwMTE0WhcNMjYwMzMwMDQwMTE0WjAzMTEwLwYDVQQD
Eyg3NTllYTNjZGVlMjEzYjUyMjcwMTZkMzhhZDk3NGU1YzE3NzdkNjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYNmblipfrEd6r/wL4DbXRX+bxT8
iRP4UE4sxgy0Ktzo2VdyAuDD0iVDC7/+RBUgDiY7vp4JRtGL6/Tw/GC2ndvw+hdl
3QAnzoAAdRc39ZVj7l7Bit7JbaEeqH144RCD+wThcqPKTGZpzrZ7Vm+p9GwaJ+T+
XqOqwtDSLmKzfJRnqN7ii5EMoz4Op7ItR6sCh1XxXJAvZxie5CkrOe6k89hfexKW
siNvKUrEtpD1WU48UkDC0M7j3U6dv2Fm/C3CdVFSeeMHnvGNgqB4fmB4Cwz94gzq
yR9sKMWWa7Kq+4kSXFWEm1Jk+LdtRux4idWcOqkxr3gEWcG8af7YqibxHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWeo83uITtSJwFtOK2XTlwXd9YdMB8GA1UdIwQY
MBaAFBaiig4kH/96ouZKo4gVbyI+LSFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2Et
ZmIyYTk4M2NjNjZhLzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2EtZmIyYTk4M2NjNjZh
LzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6qtXjsz
/onRhFlITOAkfOCcuC2oqKlIzHnhwuA+/DC+zvXYpPSzi3e2/Ey6NHBHqPBfLKTa
Fk2l7IT9cZ+kN93sHb7wQtG/LgdNGTjdhMfCfQ2yKGhNjCzReOg1/tDjlUeqVb9J
JcF/lIv+cJcab62jwWUgBirks8VSRqgOD/EnhIHN42LGD7BymObeUWnN5zs6zNfJ
uuCRh9l/pew51+QUxnVv0pnaztA8tadYVp7XPLQEdsZFyOcNieuOCM41dA0NHMMM
eJ+Ad8IwrsUQa+DKxgv1rIdKa5UGNs5w3Oz6Zx2PmCfvDnJR8hMSOvSmrF/WvxCa
YD9ARtrTvtrVzQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:57 2026 by rpki-client