Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
File:                     FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json)
Hash identifier:          UtfuvnvcAuh5qGmyA38/CHact7meg0cyWbdDeZWoMr0=
Subject key identifier:   8C:5B:07:C0:B4:CD:BD:9F:F4:78:6A:2E:DB:EE:14:30:DD:F1:81:BB
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       01A08DC4DE646B72827B97D7F69D4A85CA8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
Manifest number:          1A4B
Signing time:             Fri 11 Sep 2026 00:01:24 +0000
Manifest this update:     Fri 11 Sep 2026 00:01:24 +0000
Manifest next update:     Sat 12 Sep 2026 00:01:24 +0000
Files and hashes:         1: B8AGidGKLoQLti3y3WxY0M6Ums8.roa (hash: GW4/8IG15yoULapMWSUA1tjQmytW8th3DPjNUReuGJY=)
                          2: Dnmq_-IXcuuCYcO66EjRn9inPJA.roa (hash: JBkzUBE+QTQ6AfEZVnlaYzg8oi2JCs+6/Xvoz9ACRuE=)
                          3: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: wSbiyOAGxLRBUCiYQ2tKsRXPXCiMhW2qVXDW+GpfGwQ=)
                          4: Y1Sj94JEWNEu02oE1R3YlRFCB-s.roa (hash: usulbFFGi1WaHBoDqV6MzsH9CvtQ7PX9NAUWfnNmmj4=)
                          5: uR5nbvWvEqFKcr15HMG7q7wElj4.roa (hash: IzuEMc/xhLnvFIqk3mMDeFSvUitKaMgCVjRpshfp5kU=)
                          6: yGnG3HP3nemnG7Yzwu4wtoayiDo.roa (hash: lWgaSw9AoddwDlUpkfGonh4HcHHKtgX9pZvTG5NcRBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:c4:de:64:6b:72:82:7b:97:d7:f6:9d:4a:85:ca:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: Sep 11 00:01:24 2026 GMT
            Not After : Sep 12 00:01:24 2026 GMT
        Subject: CN=8c5b07c0b4cdbd9ff4786a2edbee1430ddf181bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3d:ec:30:0a:34:55:3c:b2:7a:24:c7:ec:1d:
                    14:a3:ae:7c:b5:b1:61:49:ba:c3:b0:32:c4:b5:d9:
                    61:39:bd:ef:ab:8c:6e:90:36:f8:d3:b5:dc:f5:67:
                    50:43:1e:d0:50:c6:65:8e:65:69:dd:bd:cd:70:b6:
                    b0:ea:df:5e:cb:f9:58:9b:a7:4c:17:82:82:66:5b:
                    8e:08:54:26:5a:b5:97:99:59:17:29:8a:47:e2:f3:
                    d9:9e:28:40:04:66:d7:1d:02:3d:b5:f0:1f:5c:9e:
                    91:da:60:c9:6e:ef:f1:16:2c:33:54:78:05:20:12:
                    4f:b8:93:8e:8f:b6:b1:e8:47:a0:3c:c5:e7:cd:ef:
                    81:fc:ea:9e:02:c7:36:8b:58:5c:94:92:ea:05:d8:
                    c7:25:d7:01:59:40:2c:24:43:14:f1:22:03:6c:48:
                    a7:b8:6a:45:74:3b:3f:57:d0:24:71:ba:63:2b:55:
                    2a:08:19:1e:07:34:1d:56:7d:8d:03:5c:5d:ec:14:
                    1b:e5:cf:61:c9:ed:b9:a0:b0:5f:8d:9e:99:56:f2:
                    b6:60:72:a4:a7:88:c7:a6:db:80:df:2e:dd:f3:ed:
                    3f:b4:31:d2:9f:f3:bf:b9:f2:36:ae:db:db:93:dc:
                    82:23:4b:fa:79:3d:45:52:34:98:09:d6:6b:5c:0a:
                    c4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5B:07:C0:B4:CD:BD:9F:F4:78:6A:2E:DB:EE:14:30:DD:F1:81:BB
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:24:92:03:5c:c6:f4:10:a7:e9:1e:63:80:65:85:37:f7:30:
         a4:b7:02:e4:6e:8f:43:da:4e:5f:d9:58:c9:ab:7c:3d:30:b3:
         dc:8d:92:b1:68:9b:11:e3:40:f8:cc:ba:72:63:1e:48:40:8c:
         7f:d2:3c:5f:73:b0:ac:5e:42:bf:cb:e2:ad:1a:f8:f9:07:c1:
         00:87:2d:1e:30:48:7c:fa:df:c5:d4:ed:fa:10:60:1b:b3:f4:
         72:a2:23:9f:ea:b7:38:4a:9a:5e:91:8d:46:78:a3:f6:6c:94:
         e5:38:55:da:05:56:19:fd:01:6f:1c:b9:62:07:9c:a5:58:69:
         9c:bf:9b:14:37:27:40:c1:f1:46:b4:68:a9:09:90:f1:33:2c:
         92:86:dd:e4:a0:f3:0a:0a:dc:3d:9e:f4:43:53:63:1c:49:14:
         b5:ac:c1:0e:a7:44:09:a8:14:82:fc:da:0f:eb:3c:19:7b:4f:
         74:d0:df:fb:1c:4b:36:b3:9c:93:52:27:36:47:19:4b:8b:ea:
         76:11:cd:3b:57:11:be:e5:f8:08:82:21:8d:9b:1b:66:dd:5f:
         29:e8:b3:45:c0:4a:18:4c:0f:2c:2b:b9:a0:81:1f:3d:64:8f:
         a9:b3:a2:d5:57:ef:e0:51:9e:45:e8:50:bf:a9:0a:5e:95:9e:
         40:cc:9d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCNxN5ka3KCe5fX9p1KhcqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Mjc1NzNjNjg5MjlhYjJhNDU5MGU5MmE1MWFiYzQwZWE5
ZTU4MTcwHhcNMjYwOTExMDAwMTI0WhcNMjYwOTEyMDAwMTI0WjAzMTEwLwYDVQQD
Eyg4YzViMDdjMGI0Y2RiZDlmZjQ3ODZhMmVkYmVlMTQzMGRkZjE4MWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5z3sMAo0VTyyeiTH7B0Uo658tbFh
SbrDsDLEtdlhOb3vq4xukDb407Xc9WdQQx7QUMZljmVp3b3NcLaw6t9ey/lYm6dM
F4KCZluOCFQmWrWXmVkXKYpH4vPZnihABGbXHQI9tfAfXJ6R2mDJbu/xFiwzVHgF
IBJPuJOOj7ax6EegPMXnze+B/OqeAsc2i1hclJLqBdjHJdcBWUAsJEMU8SIDbEin
uGpFdDs/V9AkcbpjK1UqCBkeBzQdVn2NA1xd7BQb5c9hye25oLBfjZ6ZVvK2YHKk
p4jHptuA3y7d8+0/tDHSn/O/ufI2rtvbk9yCI0v6eT1FUjSYCdZrXArERwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxbB8C0zb2f9HhqLtvuFDDd8YG7MB8GA1UdIwQY
MBaAFBYnVzxokpqypFkOkqUavEDqnlgXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2Ut
ZTZmOWRiNzQxMzlkLzEvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2UtZTZmOWRiNzQxMzlk
LzEvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASSSA1zG
9BCn6R5jgGWFN/cwpLcC5G6PQ9pOX9lYyat8PTCz3I2SsWibEeNA+My6cmMeSECM
f9I8X3OwrF5Cv8virRr4+QfBAIctHjBIfPrfxdTt+hBgG7P0cqIjn+q3OEqaXpGN
Rnij9myU5ThV2gVWGf0Bbxy5YgecpVhpnL+bFDcnQMHxRrRoqQmQ8TMskobd5KDz
CgrcPZ70Q1NjHEkUtazBDqdECagUgvzaD+s8GXtPdNDf+xxLNrOck1InNkcZS4vq
dhHNO1cRvuX4CIIhjZsbZt1fKeizRcBKGEwPLCu5oIEfPWSPqbOi1Vfv4FGeRehQ
v6kKXpWeQMydsg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:57:35 2026 by rpki-client