Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
File:                     FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft (raw, json)
Hash identifier:          +OatLRW7cVI8k5H+AnwDtKoxxejHFgjhq68+UeJu3aQ=
Subject key identifier:   FB:42:8E:A9:ED:09:87:E9:96:8B:92:E8:34:CB:FF:35:59:F7:B2:2B
Authority key identifier: 14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E
Certificate issuer:       /CN=144b315ae0f24c891fca18456c66917792af165e
Certificate serial:       019E295E21601DE100C0019C080394D10E96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
Manifest number:          1281
Signing time:             Fri 15 May 2026 02:01:35 +0000
Manifest this update:     Fri 15 May 2026 02:01:35 +0000
Manifest next update:     Sat 16 May 2026 02:01:35 +0000
Files and hashes:         1: FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl (hash: QzreO9uKrREyKH+0bom0Rx4KXWORpLcm2Cn71iRC0eI=)
                          2: ZYVhpFZbN06CUe59j1pMT24apfY.roa (hash: 9KVaBH7C5jrjUC4AJ6bt9vp9SMTJAC7tn9CsEVo1BYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5e:21:60:1d:e1:00:c0:01:9c:08:03:94:d1:0e:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=144b315ae0f24c891fca18456c66917792af165e
        Validity
            Not Before: May 15 02:01:35 2026 GMT
            Not After : May 16 02:01:35 2026 GMT
        Subject: CN=fb428ea9ed0987e9968b92e834cbff3559f7b22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4f:32:55:cd:d4:e9:2b:2f:ec:5b:54:02:27:
                    0d:b6:a1:a2:c7:b7:27:53:3a:6a:7d:79:4f:0f:9f:
                    14:a4:b7:17:bd:26:e0:ca:2d:54:45:bf:b3:cb:81:
                    30:bb:89:5e:b2:9f:f1:0d:11:33:c6:96:2f:8a:37:
                    e7:74:7c:90:77:eb:0d:40:81:5a:8d:7a:c0:8c:65:
                    90:27:c6:b2:34:67:95:12:56:68:4c:5b:b8:fc:3b:
                    61:3f:70:d6:fb:fd:0d:74:80:7c:53:36:70:d4:22:
                    f1:29:55:88:2e:74:16:fb:cd:34:64:e8:86:73:07:
                    54:a5:2a:eb:51:1e:4c:6b:d1:a1:37:18:0f:a6:05:
                    66:60:79:05:8d:4b:9e:04:20:15:e6:13:bb:2f:d5:
                    56:ad:1d:f2:0d:ec:12:32:15:99:ce:6c:a2:f2:6f:
                    8f:7f:2c:2d:96:16:15:f9:8a:48:94:49:cb:0a:67:
                    03:9f:40:c2:f7:76:db:a9:67:10:f6:5b:99:5e:11:
                    cd:80:96:67:49:5f:c5:48:78:47:dc:2f:c1:0a:a3:
                    1e:fc:70:d5:69:3c:9a:3e:2b:1b:3d:fc:a1:18:ae:
                    6e:1d:6f:c3:d8:50:b9:90:15:57:15:83:be:af:f0:
                    67:86:19:01:95:96:ba:48:9b:55:59:0e:cd:20:ad:
                    a1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:42:8E:A9:ED:09:87:E9:96:8B:92:E8:34:CB:FF:35:59:F7:B2:2B
            X509v3 Authority Key Identifier:
                keyid:14:4B:31:5A:E0:F2:4C:89:1F:CA:18:45:6C:66:91:77:92:AF:16:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FEsxWuDyTIkfyhhFbGaRd5KvFl4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6118f4-ca11-458d-bc60-11828e0e427b/1/FEsxWuDyTIkfyhhFbGaRd5KvFl4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:13:e3:ee:fa:1f:0e:ea:e2:50:df:e5:41:58:2c:9c:24:63:
         50:02:f9:dc:10:69:64:c3:55:87:5f:a0:a0:44:e3:09:37:94:
         7f:de:1f:e2:7e:5c:5c:b2:db:ab:c9:2c:3f:b2:23:f7:9e:b1:
         ac:77:cf:f3:92:ac:01:fc:1d:94:5a:15:2b:73:9b:39:c5:71:
         27:40:02:e7:55:97:60:73:e3:8b:87:01:e3:c3:ca:86:e9:d7:
         73:95:08:8d:b3:3a:85:b6:12:f4:a6:51:a2:19:79:e7:56:8c:
         98:b8:3c:6f:f1:69:84:7e:02:ff:09:c8:f2:b9:a5:0d:95:03:
         4a:20:bd:82:c0:95:a2:4b:23:28:8f:1c:28:57:c3:9f:92:da:
         e3:8d:ca:1c:10:9a:ab:2a:8e:ec:b8:35:16:ec:07:17:d1:10:
         15:01:47:63:fa:da:c4:4d:9a:32:d4:50:2b:09:06:51:48:46:
         5e:06:e0:a5:90:55:97:8e:f6:7e:31:d9:14:29:33:70:53:2a:
         1e:da:b0:49:a3:5e:92:b1:4c:23:3a:92:3b:e8:eb:91:bc:92:
         90:a1:a8:03:dd:c1:e2:aa:95:ec:c4:e0:66:2d:ff:3e:67:2b:
         8a:4c:28:fc:b4:52:95:b1:5f:79:ff:6c:41:e2:eb:e0:49:c3:
         3b:08:89:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXiFgHeEAwAGcCAOU0Q6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NGIzMTVhZTBmMjRjODkxZmNhMTg0NTZjNjY5MTc3OTJh
ZjE2NWUwHhcNMjYwNTE1MDIwMTM1WhcNMjYwNTE2MDIwMTM1WjAzMTEwLwYDVQQD
EyhmYjQyOGVhOWVkMDk4N2U5OTY4YjkyZTgzNGNiZmYzNTU5ZjdiMjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv08yVc3U6Ssv7FtUAicNtqGix7cn
UzpqfXlPD58UpLcXvSbgyi1URb+zy4Ewu4lesp/xDREzxpYvijfndHyQd+sNQIFa
jXrAjGWQJ8ayNGeVElZoTFu4/DthP3DW+/0NdIB8UzZw1CLxKVWILnQW+800ZOiG
cwdUpSrrUR5Ma9GhNxgPpgVmYHkFjUueBCAV5hO7L9VWrR3yDewSMhWZzmyi8m+P
fywtlhYV+YpIlEnLCmcDn0DC93bbqWcQ9luZXhHNgJZnSV/FSHhH3C/BCqMe/HDV
aTyaPisbPfyhGK5uHW/D2FC5kBVXFYO+r/BnhhkBlZa6SJtVWQ7NIK2hrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtCjqntCYfplouS6DTL/zVZ97IrMB8GA1UdIwQY
MBaAFBRLMVrg8kyJH8oYRWxmkXeSrxZeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAt
MTE4MjhlMGU0MjdiLzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82MTE4ZjQtY2ExMS00NThkLWJjNjAtMTE4MjhlMGU0Mjdi
LzEvRkVzeFd1RHlUSWtmeWhoRmJHYVJkNUt2Rmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchPj7vof
DuriUN/lQVgsnCRjUAL53BBpZMNVh1+goETjCTeUf94f4n5cXLLbq8ksP7Ij956x
rHfP85KsAfwdlFoVK3ObOcVxJ0AC51WXYHPji4cB48PKhunXc5UIjbM6hbYS9KZR
ohl551aMmLg8b/FphH4C/wnI8rmlDZUDSiC9gsCVoksjKI8cKFfDn5La443KHBCa
qyqO7Lg1FuwHF9EQFQFHY/raxE2aMtRQKwkGUUhGXgbgpZBVl472fjHZFCkzcFMq
HtqwSaNekrFMIzqSO+jrkbySkKGoA93B4qqV7MTgZi3/Pmcrikwo/LRSlbFfef9s
QeLr4EnDOwiJVA==
-----END CERTIFICATE-----
Generated at Fri May 15 07:38:09 2026 by rpki-client