Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File:                     Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier:          Uqd4XWfLgY6QVrjD9eLouu/02Vez09bK5b/lV8QFy2I=
Subject key identifier:   A6:E1:B0:92:6A:DE:CF:19:D8:88:29:9A:E4:0D:BD:06:6E:7B:29:E2
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer:       /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial:       019E94DDD11FEB16B24B8609664EFC1EA489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number:          0884
Signing time:             Thu 04 Jun 2026 23:00:25 +0000
Manifest this update:     Thu 04 Jun 2026 23:00:25 +0000
Manifest next update:     Fri 05 Jun 2026 23:00:25 +0000
Files and hashes:         1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: yDR/QqzrXQofjO2XuHCxeftZqaOi6F4Dmnx2KpsE5yU=)
                          2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:94:dd:d1:1f:eb:16:b2:4b:86:09:66:4e:fc:1e:a4:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
        Validity
            Not Before: Jun  4 23:00:25 2026 GMT
            Not After : Jun  5 23:00:25 2026 GMT
        Subject: CN=a6e1b0926adecf19d888299ae40dbd066e7b29e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8c:1d:df:c2:5a:f7:5d:3f:b3:62:75:27:13:
                    26:ae:d0:b5:e3:50:f7:4e:6e:73:e0:38:8c:01:2d:
                    32:ab:8f:33:2d:e3:79:38:3d:ba:8f:f6:b4:ca:aa:
                    91:a3:da:f8:b1:cd:f4:de:ad:c1:d9:83:e2:44:67:
                    46:36:5d:f4:93:27:f4:50:4c:c1:64:ed:8a:95:58:
                    a8:67:91:d7:21:86:06:89:de:6d:e6:09:2b:20:ec:
                    24:1e:31:21:f7:c9:9f:91:6d:54:95:dd:fb:ab:df:
                    60:d8:01:8b:d8:66:8f:38:a3:9a:c9:5c:25:23:45:
                    ea:3d:13:f7:0a:7d:1f:a4:da:b6:b3:69:ab:34:a0:
                    cc:08:d5:fe:fc:0b:ee:fb:f1:5b:ec:2a:d4:53:7f:
                    cd:1d:ff:23:9a:13:38:8d:96:8c:4d:5a:d8:f8:28:
                    16:1e:48:fb:53:09:e9:99:bc:7b:18:d7:0b:99:17:
                    28:dd:d5:ef:e4:19:3c:36:a5:90:20:b5:e2:92:64:
                    00:92:ab:dd:72:f1:54:7c:f5:3a:9e:93:7b:e8:0f:
                    67:1c:cf:3a:ed:d4:4d:59:55:61:f2:db:21:5f:53:
                    aa:8d:df:aa:2f:5b:04:2a:d0:4c:02:9d:7f:10:1b:
                    80:4a:2c:76:19:41:00:64:4a:10:1d:ac:0b:c8:76:
                    c7:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E1:B0:92:6A:DE:CF:19:D8:88:29:9A:E4:0D:BD:06:6E:7B:29:E2
            X509v3 Authority Key Identifier:
                keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:48:c7:51:35:3d:55:d5:cc:00:7e:b3:cf:b1:96:4f:81:51:
         88:3d:a3:37:62:af:fa:17:1f:be:c5:40:6f:41:00:6c:d0:36:
         8c:30:24:98:1d:fb:c1:99:4d:89:ff:49:c2:28:9e:41:f2:15:
         19:08:e6:27:9a:e4:67:25:6f:5d:cd:f9:80:01:9d:6c:ea:02:
         b9:0a:f5:c4:a7:27:f9:85:c7:9d:d2:48:e4:9d:ca:97:11:32:
         23:87:c4:c4:ba:45:ef:fd:6b:64:29:57:3d:44:90:5a:be:16:
         48:15:f6:db:5b:d2:d7:e6:4d:3f:7b:c1:d9:ab:ee:1e:2b:48:
         80:4f:bd:91:c1:e5:7a:9e:32:54:1a:0a:fc:38:69:d1:cc:29:
         c3:b5:24:00:f2:71:d2:81:fb:63:78:16:dd:6f:07:4f:81:5c:
         00:41:3d:36:33:54:f3:ec:3c:a7:9c:f5:5f:61:4a:ca:27:eb:
         2c:59:74:fc:c7:8a:98:1c:45:13:4a:4f:ad:7a:9b:10:e7:91:
         04:07:d9:51:e4:b9:2d:bd:0d:74:d3:2a:b2:00:48:82:9b:87:
         9e:f0:55:32:a3:83:88:ee:f5:86:8a:2e:2b:e4:c2:54:0e:94:
         a8:43:ac:1c:82:c7:05:71:f4:23:10:70:68:1f:2c:c3:df:de:
         26:2a:5c:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6U3dEf6xayS4YJZk78HqSJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MWRhNzUxMjhkYTc1ODJlMTBmNmE0YmYyMmI5MzkxMzQ5
YmE5ZjEwHhcNMjYwNjA0MjMwMDI1WhcNMjYwNjA1MjMwMDI1WjAzMTEwLwYDVQQD
EyhhNmUxYjA5MjZhZGVjZjE5ZDg4ODI5OWFlNDBkYmQwNjZlN2IyOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIwd38Ja910/s2J1JxMmrtC141D3
Tm5z4DiMAS0yq48zLeN5OD26j/a0yqqRo9r4sc303q3B2YPiRGdGNl30kyf0UEzB
ZO2KlVioZ5HXIYYGid5t5gkrIOwkHjEh98mfkW1Uld37q99g2AGL2GaPOKOayVwl
I0XqPRP3Cn0fpNq2s2mrNKDMCNX+/Avu+/Fb7CrUU3/NHf8jmhM4jZaMTVrY+CgW
Hkj7Uwnpmbx7GNcLmRco3dXv5Bk8NqWQILXikmQAkqvdcvFUfPU6npN76A9nHM86
7dRNWVVh8tshX1Oqjd+qL1sEKtBMAp1/EBuASix2GUEAZEoQHawLyHbHsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbhsJJq3s8Z2IgpmuQNvQZueyniMB8GA1UdIwQY
MBaAFBcdp1Eo2nWC4Q9qS/Irk5E0m6nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2Mt
NjFkZWFhNTYzMWIyLzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2MtNjFkZWFhNTYzMWIy
LzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUjHUTU9
VdXMAH6zz7GWT4FRiD2jN2Kv+hcfvsVAb0EAbNA2jDAkmB37wZlNif9JwiieQfIV
GQjmJ5rkZyVvXc35gAGdbOoCuQr1xKcn+YXHndJI5J3KlxEyI4fExLpF7/1rZClX
PUSQWr4WSBX221vS1+ZNP3vB2avuHitIgE+9kcHlep4yVBoK/Dhp0cwpw7UkAPJx
0oH7Y3gW3W8HT4FcAEE9NjNU8+w8p5z1X2FKyifrLFl0/MeKmBxFE0pPrXqbEOeR
BAfZUeS5Lb0NdNMqsgBIgpuHnvBVMqODiO71hoouK+TCVA6UqEOsHILHBXH0IxBw
aB8sw9/eJipcow==
-----END CERTIFICATE-----
Generated at Fri Jun 5 07:16:34 2026 by rpki-client