Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File:                     sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier:          /P4r2AJ23A/1LwoFT/08ODci8HRrEsm1ORf8fnvmG+c=
Subject key identifier:   40:CF:B7:DB:5D:8A:D8:76:52:56:D9:54:C8:F4:E9:1D:6A:0E:68:53
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer:       /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial:       019F11C0594E1BAB088268D25ED880C6E323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number:          1741
Signing time:             Mon 29 Jun 2026 05:00:46 +0000
Manifest this update:     Mon 29 Jun 2026 05:00:46 +0000
Manifest next update:     Tue 30 Jun 2026 05:00:46 +0000
Files and hashes:         1: RSgAiFfFUDOLRRmOCmbncd53Jto.roa (hash: R29MYZiBKSn2Fy47uX6Yiye7bvq2OW5L5W2duo3Eaes=)
                          2: SwUYDEAlxO6M5eWOj4TfdQ0JQ2c.roa (hash: kp4VVBnJ9x9RoYER3ShnXFsDjH+5JSgU9IM02fkmGYw=)
                          3: p16cU-7zatx3ndSU5oxcouZGGsA.asa (hash: 2m9k8zrzrHn7HIAqTxycPMDWckYHPav0fwCmzqUUYGo=)
                          4: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: BhHqxXbrgPNTbpEXu6Ht0yv+bOohEQPbTjVZ+wScp0c=)
                          5: zQ__yCcwrvF4SpWJekyRseIBHM0.asa (hash: 5Ccdj50AwmV19PztW4Q1959SDmAm1f7TUTOUsxH1IQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:c0:59:4e:1b:ab:08:82:68:d2:5e:d8:80:c6:e3:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
        Validity
            Not Before: Jun 29 05:00:46 2026 GMT
            Not After : Jun 30 05:00:46 2026 GMT
        Subject: CN=40cfb7db5d8ad8765256d954c8f4e91d6a0e6853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9d:92:0e:1f:c9:7e:8a:a9:c3:82:b2:0b:93:
                    8b:16:9e:51:d6:2a:d6:a4:69:07:e6:7a:93:9c:43:
                    ec:7c:cf:7d:4b:a8:da:6e:b1:67:0d:a9:71:ce:8f:
                    ca:1d:9f:cb:34:cb:e7:74:ce:ae:00:30:f9:5c:73:
                    21:5a:ed:bc:aa:8b:1b:fa:0f:65:96:47:e1:70:d3:
                    ac:e7:65:0c:d6:14:2e:9a:cb:1b:09:52:4d:95:5d:
                    74:70:7c:7d:fe:72:57:9d:c7:fb:eb:24:24:30:5c:
                    0d:ea:04:77:bd:fe:6f:50:c2:22:e6:46:21:83:64:
                    93:f9:be:0b:55:e6:0c:fe:0f:ef:6a:53:55:a4:c9:
                    1b:1f:e6:8c:71:f2:ca:06:75:3c:02:b3:15:9b:35:
                    5c:20:67:ce:23:9b:17:7e:4a:5d:5b:ae:c4:0a:60:
                    bb:65:6d:fa:ad:be:c5:f0:cf:7c:cd:93:4b:05:4e:
                    6d:5e:49:c3:d8:0f:47:b3:fe:7d:28:96:e1:36:7c:
                    a9:39:ff:53:52:47:af:4e:e2:b7:87:ba:c2:fa:78:
                    6b:4d:4d:b1:71:23:e4:a6:cf:a6:6e:98:18:83:01:
                    1d:3f:73:eb:93:b1:bc:58:76:18:e5:1a:84:ab:6c:
                    74:57:f1:55:25:c5:2d:de:e1:0e:2c:a1:3f:0f:77:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:CF:B7:DB:5D:8A:D8:76:52:56:D9:54:C8:F4:E9:1D:6A:0E:68:53
            X509v3 Authority Key Identifier:
                keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:7c:2d:ce:13:52:e2:46:26:98:87:dc:c2:8d:47:61:5b:06:
         4a:b1:c3:7d:d6:63:a4:a2:49:02:7c:4b:c6:3a:43:15:b9:13:
         e2:68:6e:15:cc:01:03:c4:25:39:c9:32:64:bc:43:a4:2b:0e:
         d3:5f:d5:d3:66:24:57:19:5b:c4:76:31:27:20:4a:7b:ef:99:
         87:f2:20:1c:f2:ca:5f:ee:76:51:5b:83:6e:c5:05:fd:f0:08:
         73:7a:d7:24:f6:f7:b8:7a:d6:74:e9:58:98:4c:b9:f7:23:11:
         69:1b:75:63:5e:05:5c:2f:48:31:70:1f:c4:bb:01:0b:41:cb:
         04:3e:c7:76:fe:79:b6:8b:0f:4b:2a:ba:6f:6d:f6:54:9a:40:
         98:f4:c3:63:dd:30:4b:05:c3:0c:7c:b7:71:3a:0f:15:8a:8a:
         98:f6:5c:b0:88:91:1b:bb:06:1c:69:21:5d:d7:b1:b6:38:7a:
         fa:a5:a4:69:4e:c3:1d:d5:0e:75:ba:de:e8:a2:e6:0b:c0:ea:
         ec:b2:d3:c4:ba:ef:ff:e0:7d:f5:55:3f:a6:5d:57:6a:6d:0e:
         b9:96:6f:81:24:fc:a6:33:5f:b0:51:3e:9a:3f:ab:a8:93:f7:
         c8:93:96:26:18:70:ff:52:ba:b1:c3:32:04:ce:ef:1c:38:31:
         5f:89:a6:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8RwFlOG6sIgmjSXtiAxuMjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNTQ0MmM0ZmZlOWMxZDc2MWU3YzU2OTM2MGVhZDA0MjQz
OGY5MDMwHhcNMjYwNjI5MDUwMDQ2WhcNMjYwNjMwMDUwMDQ2WjAzMTEwLwYDVQQD
Eyg0MGNmYjdkYjVkOGFkODc2NTI1NmQ5NTRjOGY0ZTkxZDZhMGU2ODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J2SDh/Jfoqpw4KyC5OLFp5R1irW
pGkH5nqTnEPsfM99S6jabrFnDalxzo/KHZ/LNMvndM6uADD5XHMhWu28qosb+g9l
lkfhcNOs52UM1hQumssbCVJNlV10cHx9/nJXncf76yQkMFwN6gR3vf5vUMIi5kYh
g2ST+b4LVeYM/g/valNVpMkbH+aMcfLKBnU8ArMVmzVcIGfOI5sXfkpdW67ECmC7
ZW36rb7F8M98zZNLBU5tXknD2A9Hs/59KJbhNnypOf9TUkevTuK3h7rC+nhrTU2x
cSPkps+mbpgYgwEdP3Prk7G8WHYY5RqEq2x0V/FVJcUt3uEOLKE/D3eqTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEDPt9tdith2UlbZVMj06R1qDmhTMB8GA1UdIwQY
MBaAFLBUQsT/6cHXYefFaTYOrQQkOPkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGIt
NmVkMzMxZjMxZTA5LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGItNmVkMzMxZjMxZTA5
LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHwtzhNS
4kYmmIfcwo1HYVsGSrHDfdZjpKJJAnxLxjpDFbkT4mhuFcwBA8QlOckyZLxDpCsO
01/V02YkVxlbxHYxJyBKe++Zh/IgHPLKX+52UVuDbsUF/fAIc3rXJPb3uHrWdOlY
mEy59yMRaRt1Y14FXC9IMXAfxLsBC0HLBD7Hdv55tosPSyq6b232VJpAmPTDY90w
SwXDDHy3cToPFYqKmPZcsIiRG7sGHGkhXdextjh6+qWkaU7DHdUOdbre6KLmC8Dq
7LLTxLrv/+B99VU/pl1Xam0OuZZvgST8pjNfsFE+mj+rqJP3yJOWJhhw/1K6scMy
BM7vHDgxX4mmtg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 11:36:30 2026 by rpki-client