Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File:                     FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier:          CEHlPa+d7W3CKCq5iTt842UHO1X02N2b3DMTDDwXpIg=
Subject key identifier:   D2:1D:27:42:E4:7E:48:28:DA:03:CA:D2:CD:C3:99:B0:E9:37:B3:11
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer:       /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial:       01A00281720AFD1BE60C784429027B8A54D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number:          1376
Signing time:             Fri 14 Aug 2026 23:00:32 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:32 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:32 +0000
Files and hashes:         1: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: xnIcr5lin5S7rHU6QDW3KCwbXRTKU4JNz9WxQdNQVSI=)
                          2: ZYVhpFZbN06CUe59j1pMT24apfY.roa (hash: 9KVaBH7C5jrjUC4AJ6bt9vp9SMTJAC7tn9CsEVo1BYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:72:0a:fd:1b:e6:0c:78:44:29:02:7b:8a:54:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
        Validity
            Not Before: Aug 14 23:00:32 2026 GMT
            Not After : Aug 15 23:00:32 2026 GMT
        Subject: CN=d21d2742e47e4828da03cad2cdc399b0e937b311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:9c:2a:7f:3f:ce:9c:79:a7:ec:54:1e:f1:
                    d7:ed:78:7d:2c:ad:d1:74:61:8d:d1:00:65:88:29:
                    d3:da:25:0d:e3:74:19:e0:38:32:dc:01:05:34:e7:
                    f8:1e:89:0c:3f:f7:3b:a5:0c:f0:72:00:1c:16:5c:
                    c2:fd:67:a6:79:f8:76:ac:54:69:c4:31:4b:a4:b6:
                    6b:7d:7c:24:15:00:07:15:c5:aa:61:19:17:0d:9d:
                    9a:dd:3d:8a:2d:e1:24:a7:e9:fd:0a:bc:4e:7e:db:
                    c2:9c:35:91:a1:7a:35:82:5b:7e:7f:d3:49:f9:a4:
                    0d:eb:ae:5d:64:56:b0:07:e8:55:2e:d1:f5:b2:03:
                    12:0e:b8:c3:be:33:e0:f0:90:7b:33:25:07:ec:6d:
                    c1:16:3d:73:69:7c:c2:d3:e6:43:0c:5a:c1:b4:2d:
                    42:b8:5a:a2:b2:0d:4f:c4:b4:98:3d:e2:99:d1:76:
                    b7:d4:b8:a8:3e:4c:7f:45:f4:ce:1b:d9:f5:1d:3f:
                    f0:e6:74:9a:1b:7e:b7:f3:6a:5a:23:14:0c:95:ae:
                    9a:1a:8d:dc:07:00:0b:15:09:35:42:96:ab:6f:43:
                    1d:5e:8f:33:4c:8f:af:ec:d8:d4:50:91:11:9c:c9:
                    1d:31:c2:9e:3c:ae:fd:7d:ed:79:fa:1d:76:4a:bf:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1D:27:42:E4:7E:48:28:DA:03:CA:D2:CD:C3:99:B0:E9:37:B3:11
            X509v3 Authority Key Identifier:
                keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:91:29:ca:be:dc:53:68:08:6a:70:2b:90:30:2f:d1:44:0e:
         a1:3e:89:ad:bf:64:17:16:7d:ca:7c:0a:42:f7:50:b8:7c:ab:
         ab:48:4e:dc:eb:67:f3:d7:2b:19:56:16:dd:09:99:e8:c9:68:
         7a:46:c1:0d:55:a4:98:24:fd:b3:3a:15:a5:a1:d2:a0:89:51:
         95:73:ee:a9:17:c7:f8:43:98:a8:d1:9b:7b:64:79:b9:42:26:
         2e:83:b7:2a:24:76:7f:d9:26:f4:15:0c:45:d9:e8:68:2b:08:
         b5:fd:9a:be:b1:60:45:f6:5b:cb:11:28:30:f7:2a:5c:fa:f5:
         e4:3e:43:e3:7c:b7:e6:9e:38:e6:b4:8d:85:bb:69:23:e6:ab:
         3e:82:ce:86:a8:4c:a5:f1:4e:bc:89:d4:21:18:37:73:b9:42:
         9f:f0:10:b4:28:f3:ec:b1:7e:a8:20:2c:d4:30:7b:4a:bf:e3:
         e9:44:4c:d0:f7:35:ed:6c:1a:a4:3a:96:8c:86:6b:6b:45:de:
         43:2a:90:b6:03:71:9c:64:7e:a1:d6:e7:6b:fc:a4:53:a0:4a:
         87:a3:1e:bc:aa:a9:30:ec:ac:54:40:68:66:3a:9f:89:dd:1c:
         6c:38:a8:17:95:0f:84:7e:ec:45:d5:59:f0:80:33:cf:73:bd:
         9b:69:ac:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACgXIK/RvmDHhEKQJ7ilTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NGIzMTVhZTBmMjRjODkxZmNhMTg0NTZjNjY5MTc3OTJh
ZjE2NWUwHhcNMjYwODE0MjMwMDMyWhcNMjYwODE1MjMwMDMyWjAzMTEwLwYDVQQD
EyhkMjFkMjc0MmU0N2U0ODI4ZGEwM2NhZDJjZGMzOTliMGU5MzdiMzExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX+cKn8/zpx5p+xUHvHX7Xh9LK3R
dGGN0QBliCnT2iUN43QZ4Dgy3AEFNOf4HokMP/c7pQzwcgAcFlzC/Wemefh2rFRp
xDFLpLZrfXwkFQAHFcWqYRkXDZ2a3T2KLeEkp+n9CrxOftvCnDWRoXo1glt+f9NJ
+aQN665dZFawB+hVLtH1sgMSDrjDvjPg8JB7MyUH7G3BFj1zaXzC0+ZDDFrBtC1C
uFqisg1PxLSYPeKZ0Xa31LioPkx/RfTOG9n1HT/w5nSaG36382paIxQMla6aGo3c
BwALFQk1Qparb0MdXo8zTI+v7NjUUJERnMkdMcKePK79fe15+h12Sr//FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIdJ0Lkfkgo2gPK0s3DmbDpN7MRMB8GA1UdIwQY
MBaAFBRLMVrg8kyJH8oYRWxmkXeSrxZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAt
MTE4MjhlMGU0MjdiLzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAtMTE4MjhlMGU0Mjdi
LzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhpEpyr7c
U2gIanArkDAv0UQOoT6Jrb9kFxZ9ynwKQvdQuHyrq0hO3Otn89crGVYW3QmZ6Mlo
ekbBDVWkmCT9szoVpaHSoIlRlXPuqRfH+EOYqNGbe2R5uUImLoO3KiR2f9km9BUM
RdnoaCsItf2avrFgRfZbyxEoMPcqXPr15D5D43y35p445rSNhbtpI+arPoLOhqhM
pfFOvInUIRg3c7lCn/AQtCjz7LF+qCAs1DB7Sr/j6URM0Pc17WwapDqWjIZra0Xe
QyqQtgNxnGR+odbna/ykU6BKh6MevKqpMOysVEBoZjqfid0cbDioF5UPhH7sRdVZ
8IAzz3O9m2ms6g==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:29:10 2026 by rpki-client