Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File:                     FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier:          Hhbwq65lq2Olbj0GSd9Ku7LiaHsvFJHskdWm+RKH4Hs=
Subject key identifier:   A6:FC:A6:18:63:51:32:59:C6:61:31:0B:AC:C2:36:E2:B0:F6:5C:64
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer:       /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial:       01A1464DE21EF268353AAF03E0008D2E9C0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number:          1A39
Signing time:             Fri 16 Oct 2026 20:01:11 +0000
Manifest this update:     Fri 16 Oct 2026 20:01:11 +0000
Manifest next update:     Sat 17 Oct 2026 20:01:11 +0000
Files and hashes:         1: 6y0QRmdd9vlcIIW6C7nugFvCC0A.roa (hash: ikMvBUt9Qqg8UkAC082IOH3H4LL2KZQEJOhKFoOmr2o=)
                          2: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: jGM4P5d5TWfUE5eoVwv7hySdG2VaYpcglI6lZMohsGo=)
                          3: uKqc7_GARDcKUuHyu7JV-TTdnCk.roa (hash: 7UOe0uId7LA9u86n+Afj6gW8cLWQbInKlp+hLepKp6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:4d:e2:1e:f2:68:35:3a:af:03:e0:00:8d:2e:9c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
        Validity
            Not Before: Oct 16 20:01:11 2026 GMT
            Not After : Oct 17 20:01:11 2026 GMT
        Subject: CN=a6fca61863513259c661310bacc236e2b0f65c64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:45:20:60:de:3b:2d:37:d4:53:1f:de:e3:58:
                    6a:a2:40:46:94:d0:3f:93:a1:bc:1a:36:c7:29:2e:
                    a6:97:b4:22:18:52:8a:b8:7a:19:3c:4a:70:00:5e:
                    61:7c:2e:94:4b:96:24:5c:52:61:f3:11:28:c0:d0:
                    d1:aa:37:a5:ec:7c:7f:ad:59:9c:7d:a8:cf:4b:06:
                    62:da:57:3f:0a:0f:d6:b9:ca:ad:34:78:d1:4f:2d:
                    b1:c8:09:1d:61:80:a4:b9:0b:a9:8e:4d:90:7b:15:
                    ec:08:e1:f4:be:99:3e:9c:90:e8:2a:50:27:0c:fa:
                    a5:1d:6a:bc:3c:b0:65:07:43:d0:c5:17:34:66:22:
                    b7:34:0e:ef:b6:a5:dc:16:52:61:c0:51:b0:8c:48:
                    78:11:3f:7a:7f:fe:52:85:cb:79:33:a4:09:db:0c:
                    4e:83:cc:b5:f3:58:60:b4:10:dd:98:86:10:aa:ce:
                    b5:df:58:32:4b:e9:e3:d5:4c:d4:b6:3e:61:1b:64:
                    7f:24:b8:93:58:46:a6:9f:7b:dc:3d:b1:3f:b2:a0:
                    28:bd:5b:4a:b1:4b:ab:9f:5b:86:81:61:8a:b7:2b:
                    47:56:aa:42:3f:89:f8:09:98:54:f3:60:d4:d4:5d:
                    89:1b:04:13:11:9a:f2:aa:04:ef:d8:05:b9:04:47:
                    f4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:FC:A6:18:63:51:32:59:C6:61:31:0B:AC:C2:36:E2:B0:F6:5C:64
            X509v3 Authority Key Identifier:
                keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:99:89:10:8c:53:75:42:31:b4:92:aa:cd:7f:c7:7e:e2:29:
         e0:6e:ec:3a:29:9a:84:49:7e:7d:41:11:1b:a3:d4:ad:cc:7e:
         d5:38:af:52:74:4b:0b:7b:a5:65:7e:dd:53:5b:f3:b7:19:32:
         9b:bc:26:12:fa:8d:2a:94:b7:c1:e9:20:0d:42:33:d4:3c:16:
         42:cc:b8:14:51:c5:58:2c:2f:5e:ef:81:78:a2:87:d2:0f:7b:
         4a:5b:0d:ab:86:88:fd:b1:2a:4e:7e:ff:1c:47:0e:5d:e9:42:
         61:ed:11:8e:6b:48:41:08:22:cf:8c:fe:fd:26:77:6d:fa:36:
         ff:ef:cc:ce:2e:0f:29:d6:cb:ce:87:a7:85:43:b4:69:cb:98:
         a8:8c:12:6a:cf:11:67:c3:6c:fe:3b:ca:e0:9c:e6:fc:61:c0:
         39:38:c1:cb:14:a3:2b:b3:93:5a:ea:4b:87:6b:e0:eb:6b:99:
         bc:57:80:7f:71:b3:73:7a:bc:b6:da:80:0c:6a:b4:ff:9c:4a:
         39:41:d3:a4:44:5f:df:0a:4b:fe:75:a7:f3:5c:96:d7:ec:78:
         f5:18:9d:5c:fc:ab:ec:fa:90:eb:9c:fb:1a:89:a0:1f:a1:d4:
         62:e9:3c:53:f2:8c:7a:53:1d:c6:db:35:aa:49:ab:d0:59:cb:
         7f:40:96:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFGTeIe8mg1Oq8D4ACNLpwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MzRkYjVjNDFlNzExYjczZDhmMjlkYWMxMmU5YjgzNjRj
ZDFmYmQwHhcNMjYxMDE2MjAwMTExWhcNMjYxMDE3MjAwMTExWjAzMTEwLwYDVQQD
EyhhNmZjYTYxODYzNTEzMjU5YzY2MTMxMGJhY2MyMzZlMmIwZjY1YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UUgYN47LTfUUx/e41hqokBGlNA/
k6G8GjbHKS6ml7QiGFKKuHoZPEpwAF5hfC6US5YkXFJh8xEowNDRqjel7Hx/rVmc
fajPSwZi2lc/Cg/WucqtNHjRTy2xyAkdYYCkuQupjk2QexXsCOH0vpk+nJDoKlAn
DPqlHWq8PLBlB0PQxRc0ZiK3NA7vtqXcFlJhwFGwjEh4ET96f/5Shct5M6QJ2wxO
g8y181hgtBDdmIYQqs6131gyS+nj1UzUtj5hG2R/JLiTWEamn3vcPbE/sqAovVtK
sUurn1uGgWGKtytHVqpCP4n4CZhU82DU1F2JGwQTEZryqgTv2AW5BEf0DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKb8phhjUTJZxmExC6zCNuKw9lxkMB8GA1UdIwQY
MBaAFBc021xB5xG3PY8p2sEum4NkzR+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MjUyNTktMjUyNy00NWViLWI5MTYt
NWYyNjUwYzkwMTJkLzEvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MjUyNTktMjUyNy00NWViLWI5MTYtNWYyNjUwYzkwMTJk
LzEvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZmJEIxT
dUIxtJKqzX/HfuIp4G7sOimahEl+fUERG6PUrcx+1TivUnRLC3ulZX7dU1vztxky
m7wmEvqNKpS3wekgDUIz1DwWQsy4FFHFWCwvXu+BeKKH0g97SlsNq4aI/bEqTn7/
HEcOXelCYe0RjmtIQQgiz4z+/SZ3bfo2/+/Mzi4PKdbLzoenhUO0acuYqIwSas8R
Z8Ns/jvK4Jzm/GHAOTjByxSjK7OTWupLh2vg62uZvFeAf3Gzc3q8ttqADGq0/5xK
OUHTpERf3wpL/nWn81yW1+x49RidXPyr7PqQ65z7GomgH6HUYuk8U/KMelMdxts1
qkmr0FnLf0CWFA==
-----END CERTIFICATE-----
Generated at Sat Oct 17 05:00:05 2026 by rpki-client