Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
File:                     FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft (raw, json)
Hash identifier:          EzCSCip++DuWirDXiwb7nIJXdE3m2ykMvcEw8RVLu+4=
Subject key identifier:   2A:46:1D:E0:5A:A8:89:BC:A4:22:FD:B1:2F:B8:F2:51:7D:7C:E4:CC
Authority key identifier: 16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16
Certificate issuer:       /CN=16992f451372c7a20b624bcfaa3d9753926c5c16
Certificate serial:       019FA07183027CD7A61B083B5F847AEAD072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
Manifest number:          01E6
Signing time:             Sun 26 Jul 2026 22:00:21 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:21 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:21 +0000
Files and hashes:         1: EYbnkdsGi0cWbkFU3UiOzuHllwM.roa (hash: FBbq4acRcJHICFhiug0/npiuCo5RqLFSogoLF21zVfA=)
                          2: FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl (hash: 6POUpLobeiCEuYfWIuNUChIcNC1faqZ4/zqRQa08tUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:83:02:7c:d7:a6:1b:08:3b:5f:84:7a:ea:d0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16992f451372c7a20b624bcfaa3d9753926c5c16
        Validity
            Not Before: Jul 26 22:00:21 2026 GMT
            Not After : Jul 27 22:00:21 2026 GMT
        Subject: CN=2a461de05aa889bca422fdb12fb8f2517d7ce4cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7d:bf:5c:b8:4b:4d:9a:fb:69:b0:36:53:2b:
                    56:4d:a3:2f:de:c3:d1:35:93:ad:a7:a5:d5:cc:f1:
                    b1:e2:28:96:00:dd:d8:6b:aa:f4:d1:ed:d8:ee:de:
                    c8:f2:18:a2:49:14:ae:ac:b6:e5:89:d9:91:fb:dd:
                    2d:17:4a:e8:ec:ab:31:62:ae:9b:db:89:08:be:a8:
                    6d:49:08:e5:9d:68:49:77:e1:32:ff:82:d1:9f:1f:
                    53:2f:54:a6:15:77:cc:71:53:c0:f4:43:02:c3:0e:
                    11:44:13:b3:dd:09:8c:30:55:0d:20:19:4d:1b:22:
                    03:50:fb:be:05:21:9f:7c:67:33:97:f4:cd:fd:5e:
                    1e:95:48:bf:02:5c:40:95:64:77:d1:82:3d:df:d9:
                    29:c1:43:6e:b3:bf:55:61:6a:5a:f4:dd:83:fb:78:
                    11:b4:f4:e9:a6:ef:08:8e:07:04:a7:96:61:bb:67:
                    a6:8b:3f:dc:3e:33:f9:2c:86:4d:76:a2:fe:b5:bc:
                    c4:4f:14:a2:ba:6f:6c:cd:8e:39:c1:df:4c:47:8e:
                    c8:97:9f:0e:35:10:51:65:d0:67:ea:b2:64:48:c2:
                    69:b4:b5:13:dc:25:15:5c:ce:aa:8f:48:85:18:73:
                    8d:12:80:86:6d:12:f3:73:33:fa:98:ab:76:c2:0a:
                    e9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:46:1D:E0:5A:A8:89:BC:A4:22:FD:B1:2F:B8:F2:51:7D:7C:E4:CC
            X509v3 Authority Key Identifier:
                keyid:16:99:2F:45:13:72:C7:A2:0B:62:4B:CF:AA:3D:97:53:92:6C:5C:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpkvRRNyx6ILYkvPqj2XU5JsXBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d333b0-318a-46c8-9721-3eaabb032579/1/FpkvRRNyx6ILYkvPqj2XU5JsXBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:97:af:36:b8:02:08:1e:ab:d4:bc:8a:c3:72:6c:ff:5f:7e:
         f7:71:42:25:e6:b3:7f:cc:98:9a:8f:9f:ed:32:f0:4f:10:a7:
         38:ac:70:85:b8:84:57:3f:0e:c0:83:0d:57:96:31:9c:85:87:
         48:34:d0:bd:5a:52:46:f4:d0:ad:27:06:1f:40:a0:70:be:fc:
         d0:9d:dd:90:13:d8:52:a8:4a:6d:ce:0d:df:64:65:3a:a8:32:
         c0:6e:c0:ae:d0:fa:e3:c8:c0:92:cb:a1:25:13:5e:7c:88:22:
         e0:39:a7:a5:a4:1c:d8:df:94:4e:7e:86:66:74:e2:cf:24:2b:
         95:b6:33:85:f5:43:e6:67:55:b4:fb:d5:43:c3:12:92:f2:28:
         65:7f:16:c8:e9:e4:e2:c6:3f:5c:b0:f6:f4:cd:42:86:3f:a1:
         8d:3f:64:79:63:a1:d1:2f:4c:dc:9c:a7:92:f6:57:22:4e:d6:
         9c:9b:c2:8c:31:0c:24:31:03:9f:0f:3c:aa:aa:6b:d6:a9:a5:
         29:f8:85:73:88:df:11:59:b3:c2:ed:bb:df:e8:f2:6a:33:67:
         da:bf:cb:99:6e:70:67:1e:37:e8:00:fa:3a:cf:e4:0a:6b:08:
         92:d7:63:09:69:65:0e:ee:53:d5:b0:89:3b:4c:9a:5b:66:3c:
         be:24:59:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcYMCfNemGwg7X4R66tByMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTkyZjQ1MTM3MmM3YTIwYjYyNGJjZmFhM2Q5NzUzOTI2
YzVjMTYwHhcNMjYwNzI2MjIwMDIxWhcNMjYwNzI3MjIwMDIxWjAzMTEwLwYDVQQD
EygyYTQ2MWRlMDVhYTg4OWJjYTQyMmZkYjEyZmI4ZjI1MTdkN2NlNGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn2/XLhLTZr7abA2UytWTaMv3sPR
NZOtp6XVzPGx4iiWAN3Ya6r00e3Y7t7I8hiiSRSurLblidmR+90tF0ro7KsxYq6b
24kIvqhtSQjlnWhJd+Ey/4LRnx9TL1SmFXfMcVPA9EMCww4RRBOz3QmMMFUNIBlN
GyIDUPu+BSGffGczl/TN/V4elUi/AlxAlWR30YI939kpwUNus79VYWpa9N2D+3gR
tPTppu8IjgcEp5Zhu2emiz/cPjP5LIZNdqL+tbzETxSium9szY45wd9MR47Il58O
NRBRZdBn6rJkSMJptLUT3CUVXM6qj0iFGHONEoCGbRLzczP6mKt2wgrpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpGHeBaqIm8pCL9sS+48lF9fOTMMB8GA1UdIwQY
MBaAFBaZL0UTcseiC2JLz6o9l1OSbFwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBrdlJSTnl4NklMWWt2UHFqMlhVNUpzWEJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kMzMzYjAtMzE4YS00NmM4LTk3MjEt
M2VhYWJiMDMyNTc5LzEvRnBrdlJSTnl4NklMWWt2UHFqMlhVNUpzWEJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9kMzMzYjAtMzE4YS00NmM4LTk3MjEtM2VhYWJiMDMyNTc5
LzEvRnBrdlJSTnl4NklMWWt2UHFqMlhVNUpzWEJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZevNrgC
CB6r1LyKw3Js/19+93FCJeazf8yYmo+f7TLwTxCnOKxwhbiEVz8OwIMNV5YxnIWH
SDTQvVpSRvTQrScGH0CgcL780J3dkBPYUqhKbc4N32RlOqgywG7ArtD648jAksuh
JRNefIgi4DmnpaQc2N+UTn6GZnTizyQrlbYzhfVD5mdVtPvVQ8MSkvIoZX8WyOnk
4sY/XLD29M1Chj+hjT9keWOh0S9M3JynkvZXIk7WnJvCjDEMJDEDnw88qqpr1qml
KfiFc4jfEVmzwu273+jyajNn2r/LmW5wZx436AD6Os/kCmsIktdjCWllDu5T1bCJ
O0yaW2Y8viRZKg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:42:31 2026 by rpki-client