Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
File:                     fgQjIR9JsTNelLi9u7EWhmT2gE8.mft (raw, json)
Hash identifier:          /ooO4IT14AFVoK7e4cbClZQ3B7Rcm6lED4nx9iEcDjM=
Subject key identifier:   0E:B9:FC:EF:B3:F3:D7:A8:17:87:AD:DB:B1:77:7B:A1:32:2D:ED:A8
Authority key identifier: 7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F
Certificate issuer:       /CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
Certificate serial:       019D389C02148A65F8585B80BF196B109B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
Manifest number:          1792
Signing time:             Sun 29 Mar 2026 08:00:41 +0000
Manifest this update:     Sun 29 Mar 2026 08:00:41 +0000
Manifest next update:     Mon 30 Mar 2026 08:00:41 +0000
Files and hashes:         1: fgQjIR9JsTNelLi9u7EWhmT2gE8.crl (hash: 7WOV72nmh7lqN1oyNp5UuY+sRR1aL4Sz87xN5bjgkC4=)
                          2: mmW_PspRyWWJ-0koYlr6B2-6cDU.roa (hash: +DO/fJxCRM9CFhtpysXEvyA/4qA5BtqezUG8hfqugKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:9c:02:14:8a:65:f8:58:5b:80:bf:19:6b:10:9b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e0423211f49b1335e94b8bdbbb1168664f6804f
        Validity
            Not Before: Mar 29 08:00:41 2026 GMT
            Not After : Mar 30 08:00:41 2026 GMT
        Subject: CN=0eb9fcefb3f3d7a81787addbb1777ba1322deda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b1:f5:48:62:6d:7d:01:81:f2:f7:23:24:83:
                    94:35:86:91:9f:d9:1a:70:3d:64:3f:14:56:39:16:
                    74:45:cc:42:3a:ef:c2:58:df:e2:e7:ab:bc:2e:4f:
                    4c:b6:a4:a7:d2:28:eb:dc:99:c6:12:89:89:d4:a0:
                    02:3e:a1:39:af:45:4b:3e:65:e0:09:d8:41:f9:8f:
                    f8:0a:f5:26:b1:2f:6a:5d:83:f7:cd:ae:6a:b8:67:
                    4b:a6:c9:ce:00:40:c1:20:64:e4:53:ef:5a:4b:82:
                    86:ac:d8:16:20:27:12:34:c5:98:e9:a6:99:40:03:
                    d3:56:6b:ea:10:52:8a:df:10:b0:79:cd:26:11:aa:
                    1e:09:43:05:a3:ef:16:bb:11:46:a8:39:7a:e2:28:
                    2e:f5:75:1f:cd:24:5f:c4:e0:74:5e:66:b3:30:da:
                    61:61:f9:d4:d7:41:7e:72:18:7d:fd:ee:89:49:5b:
                    8b:3f:d5:bd:41:a5:75:b3:f0:33:f0:c8:df:62:52:
                    70:1b:ea:53:8d:19:b0:40:6d:93:44:2e:7b:1f:a2:
                    4d:61:15:79:06:36:32:1f:cf:0b:fe:6a:04:54:80:
                    68:59:d1:04:fe:4b:4e:bc:e5:b5:35:b8:9f:52:74:
                    6b:e4:a7:63:28:66:15:a1:58:21:be:84:de:b8:af:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B9:FC:EF:B3:F3:D7:A8:17:87:AD:DB:B1:77:7B:A1:32:2D:ED:A8
            X509v3 Authority Key Identifier:
                keyid:7E:04:23:21:1F:49:B1:33:5E:94:B8:BD:BB:B1:16:86:64:F6:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgQjIR9JsTNelLi9u7EWhmT2gE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/77ac86-31f6-4370-b433-b0e7d41b5d36/1/fgQjIR9JsTNelLi9u7EWhmT2gE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:73:c0:6d:06:5b:75:c0:91:a3:9c:2a:18:ef:c2:2f:79:7f:
         7c:c7:7e:40:a3:a4:e1:0d:96:e6:d4:52:1f:d3:6e:35:25:82:
         0f:16:6d:49:dc:e3:fb:49:61:4a:cc:c2:74:7a:ce:59:be:b7:
         ea:e3:ab:d2:f8:aa:a2:88:0d:b9:94:08:19:d1:c9:df:c6:19:
         cf:d7:69:6a:00:ae:22:d3:a8:2e:ec:bc:74:4e:cf:0d:b0:6d:
         de:9e:e9:ef:b0:ec:de:92:a7:1b:6e:15:55:85:f2:66:2f:03:
         c4:0d:82:bc:a7:b4:85:4c:5c:86:c6:6c:c3:11:3e:3b:d7:66:
         ab:89:20:88:ff:ef:76:f6:4b:a0:b4:2d:b6:ed:9c:94:fa:6f:
         f9:f4:9f:48:fe:dd:8f:e9:1a:fd:a5:86:b3:e2:b3:9a:78:ae:
         64:c9:f2:8a:3d:b1:7d:91:e6:d5:2b:86:f8:82:e1:6f:5a:91:
         a9:cf:50:fa:28:6f:43:ae:67:fc:95:e2:88:f2:27:31:e9:90:
         e0:c2:cc:43:86:ff:ef:46:7b:13:7a:7a:81:63:f8:f4:5f:9c:
         9d:93:6c:a1:ae:14:4c:f6:10:0a:3e:b0:c8:e6:20:7e:0a:67:
         14:2f:28:1c:3b:8f:c8:f9:59:28:05:1e:ac:08:27:19:10:42:
         b4:1f:7f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nAIUimX4WFuAvxlrEJtFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMDQyMzIxMWY0OWIxMzM1ZTk0YjhiZGJiYjExNjg2NjRm
NjgwNGYwHhcNMjYwMzI5MDgwMDQxWhcNMjYwMzMwMDgwMDQxWjAzMTEwLwYDVQQD
EygwZWI5ZmNlZmIzZjNkN2E4MTc4N2FkZGJiMTc3N2JhMTMyMmRlZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrH1SGJtfQGB8vcjJIOUNYaRn9ka
cD1kPxRWORZ0RcxCOu/CWN/i56u8Lk9MtqSn0ijr3JnGEomJ1KACPqE5r0VLPmXg
CdhB+Y/4CvUmsS9qXYP3za5quGdLpsnOAEDBIGTkU+9aS4KGrNgWICcSNMWY6aaZ
QAPTVmvqEFKK3xCwec0mEaoeCUMFo+8WuxFGqDl64igu9XUfzSRfxOB0XmazMNph
YfnU10F+chh9/e6JSVuLP9W9QaV1s/Az8MjfYlJwG+pTjRmwQG2TRC57H6JNYRV5
BjYyH88L/moEVIBoWdEE/ktOvOW1NbifUnRr5KdjKGYVoVghvoTeuK9+HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA65/O+z89eoF4et27F3e6EyLe2oMB8GA1UdIwQY
MBaAFH4EIyEfSbEzXpS4vbuxFoZk9oBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMt
YjBlN2Q0MWI1ZDM2LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS83N2FjODYtMzFmNi00MzcwLWI0MzMtYjBlN2Q0MWI1ZDM2
LzEvZmdRaklSOUpzVE5lbExpOXU3RVdobVQyZ0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb3PAbQZb
dcCRo5wqGO/CL3l/fMd+QKOk4Q2W5tRSH9NuNSWCDxZtSdzj+0lhSszCdHrOWb63
6uOr0viqoogNuZQIGdHJ38YZz9dpagCuItOoLuy8dE7PDbBt3p7p77Ds3pKnG24V
VYXyZi8DxA2CvKe0hUxchsZswxE+O9dmq4kgiP/vdvZLoLQttu2clPpv+fSfSP7d
j+ka/aWGs+KzmniuZMnyij2xfZHm1SuG+ILhb1qRqc9Q+ihvQ65n/JXiiPInMemQ
4MLMQ4b/70Z7E3p6gWP49F+cnZNsoa4UTPYQCj6wyOYgfgpnFC8oHDuPyPlZKAUe
rAgnGRBCtB9/9g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:50 2026 by rpki-client