Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
File:                     FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft (raw, json)
Hash identifier:          PXgkv9jTx0PzTmqPLSPUdjd2PqdnEheepEiwX+B327Y=
Subject key identifier:   74:01:EA:A9:20:BA:69:CD:63:BB:FD:90:A0:4B:F9:03:65:99:10:D9
Authority key identifier: 15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B
Certificate issuer:       /CN=154e2f85361ff5d06309c25684b908d7b702439b
Certificate serial:       019FF86C37BE436728D8BC40419D32B1F3B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
Manifest number:          07DB
Signing time:             Thu 13 Aug 2026 00:01:09 +0000
Manifest this update:     Thu 13 Aug 2026 00:01:09 +0000
Manifest next update:     Fri 14 Aug 2026 00:01:09 +0000
Files and hashes:         1: DryZPdsnz8wKaTiw0pPMUAKMwos.asa (hash: DE1MBRda0AF506miFfOnjiVNIDiBBy3JyuXMEw9Jwn0=)
                          2: FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl (hash: x2mqCkRoSr6G74nq3oIQoyqr5Mqr1gB1GJT7ATiEBQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:6c:37:be:43:67:28:d8:bc:40:41:9d:32:b1:f3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154e2f85361ff5d06309c25684b908d7b702439b
        Validity
            Not Before: Aug 13 00:01:09 2026 GMT
            Not After : Aug 14 00:01:09 2026 GMT
        Subject: CN=7401eaa920ba69cd63bbfd90a04bf903659910d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:af:c7:d3:e5:49:e7:18:38:f9:e3:fd:a2:f8:
                    29:47:51:2d:d9:94:33:77:d0:42:a7:64:04:3e:ba:
                    71:1e:9e:3a:6b:ad:8c:0a:2e:8b:18:08:25:47:f8:
                    1f:aa:84:55:ee:a5:8e:e9:08:e3:b7:62:81:9d:2a:
                    5e:ea:d6:9e:42:21:98:d5:5c:cc:03:86:9c:bb:1b:
                    67:38:d2:eb:24:be:7d:8d:44:fb:67:f4:23:cb:8e:
                    bf:8d:82:88:fa:3d:49:d0:93:54:c9:37:96:a0:73:
                    65:78:38:d4:70:02:b0:54:78:74:53:75:cd:9a:34:
                    16:04:5d:a1:2c:8d:68:22:37:d4:3d:9e:10:40:d4:
                    87:08:5e:f1:f8:42:51:11:53:20:af:96:e7:08:c9:
                    8d:28:73:03:93:51:32:aa:f3:54:75:cc:ee:de:f1:
                    d5:46:ae:ff:6e:88:01:4b:83:92:6a:26:15:d1:c9:
                    4a:86:3a:af:68:fe:07:b4:07:6a:4d:1e:c5:07:ab:
                    7a:b4:73:67:2a:32:5f:72:17:45:e3:b2:44:1c:6d:
                    ad:9b:8e:80:4b:f9:6f:c8:75:69:c6:41:fe:48:9b:
                    04:8c:b1:59:d4:3d:74:9c:ad:a4:c7:e8:9f:12:bb:
                    3e:06:ae:45:98:32:99:d2:a2:95:7c:22:97:3d:85:
                    05:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:01:EA:A9:20:BA:69:CD:63:BB:FD:90:A0:4B:F9:03:65:99:10:D9
            X509v3 Authority Key Identifier:
                keyid:15:4E:2F:85:36:1F:F5:D0:63:09:C2:56:84:B9:08:D7:B7:02:43:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FU4vhTYf9dBjCcJWhLkI17cCQ5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/275b8c-f3b8-4dca-894a-5528890f9db3/1/FU4vhTYf9dBjCcJWhLkI17cCQ5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:85:41:a8:c2:ff:dc:a3:7c:22:8c:fa:52:f8:01:70:40:1f:
         95:ef:61:e0:d4:05:95:b0:9e:67:69:fc:b4:a5:66:59:64:6c:
         d4:3e:d1:c4:7c:55:6a:4e:3e:00:04:71:22:b2:52:12:3c:d7:
         7b:30:e5:97:c2:b7:24:aa:35:0a:79:cc:5f:da:cc:bf:cd:bb:
         50:ca:b1:7a:86:e6:70:8b:82:7d:63:53:d2:15:95:e6:b0:c7:
         bf:56:48:c5:d8:e1:52:ec:0a:2b:20:a4:b3:2c:57:79:79:16:
         fa:22:a0:0f:f7:b5:af:c8:5b:85:c9:5b:59:bc:2f:5e:c7:74:
         59:71:57:5f:26:eb:c7:1c:db:34:4c:d9:33:56:76:c6:70:14:
         36:7c:98:4c:56:77:f2:57:23:23:88:62:a7:81:9d:73:58:8e:
         bf:02:de:b9:eb:4a:ac:10:28:f7:f3:b5:e0:60:1f:23:98:77:
         62:80:9d:c3:fd:89:b9:aa:34:dd:f0:44:21:ea:36:f0:e7:69:
         4a:c5:cb:76:c6:9a:79:2f:13:dc:6a:d3:b1:38:df:2a:c4:09:
         91:f2:96:b2:3a:50:10:28:eb:39:06:da:94:f6:f8:38:6a:5e:
         fb:31:bd:58:c1:a9:bf:11:9e:88:7f:91:11:ba:a9:9c:e7:d2:
         6f:25:81:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4bDe+Q2co2LxAQZ0ysfO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NGUyZjg1MzYxZmY1ZDA2MzA5YzI1Njg0YjkwOGQ3Yjcw
MjQzOWIwHhcNMjYwODEzMDAwMTA5WhcNMjYwODE0MDAwMTA5WjAzMTEwLwYDVQQD
Eyg3NDAxZWFhOTIwYmE2OWNkNjNiYmZkOTBhMDRiZjkwMzY1OTkxMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa/H0+VJ5xg4+eP9ovgpR1Et2ZQz
d9BCp2QEPrpxHp46a62MCi6LGAglR/gfqoRV7qWO6Qjjt2KBnSpe6taeQiGY1VzM
A4acuxtnONLrJL59jUT7Z/Qjy46/jYKI+j1J0JNUyTeWoHNleDjUcAKwVHh0U3XN
mjQWBF2hLI1oIjfUPZ4QQNSHCF7x+EJREVMgr5bnCMmNKHMDk1EyqvNUdczu3vHV
Rq7/bogBS4OSaiYV0clKhjqvaP4HtAdqTR7FB6t6tHNnKjJfchdF47JEHG2tm46A
S/lvyHVpxkH+SJsEjLFZ1D10nK2kx+ifErs+Bq5FmDKZ0qKVfCKXPYUFNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHQB6qkgumnNY7v9kKBL+QNlmRDZMB8GA1UdIwQY
MBaAFBVOL4U2H/XQYwnCVoS5CNe3AkObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yNzViOGMtZjNiOC00ZGNhLTg5NGEt
NTUyODg5MGY5ZGIzLzEvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yNzViOGMtZjNiOC00ZGNhLTg5NGEtNTUyODg5MGY5ZGIz
LzEvRlU0dmhUWWY5ZEJqQ2NKV2hMa0kxN2NDUTVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYVBqML/
3KN8Ioz6UvgBcEAfle9h4NQFlbCeZ2n8tKVmWWRs1D7RxHxVak4+AARxIrJSEjzX
ezDll8K3JKo1CnnMX9rMv827UMqxeobmcIuCfWNT0hWV5rDHv1ZIxdjhUuwKKyCk
syxXeXkW+iKgD/e1r8hbhclbWbwvXsd0WXFXXybrxxzbNEzZM1Z2xnAUNnyYTFZ3
8lcjI4hip4Gdc1iOvwLeuetKrBAo9/O14GAfI5h3YoCdw/2Juao03fBEIeo28Odp
SsXLdsaaeS8T3GrTsTjfKsQJkfKWsjpQECjrOQbalPb4OGpe+zG9WMGpvxGeiH+R
EbqpnOfSbyWB0w==
-----END CERTIFICATE-----
Generated at Thu Aug 13 07:49:49 2026 by rpki-client