Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
File:                     FDI5ZR22qrG8tnMl94W17h9AJcs.mft (raw, json)
Hash identifier:          4uyZOSt0+4lUXfRsC+zBFxpVeQl2t2SWrJhEOeGrLaY=
Subject key identifier:   5D:3C:2C:F9:28:A1:01:3E:49:43:72:81:12:D8:E2:77:43:5F:FE:B7
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Certificate issuer:       /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial:       019E9102117E718AFF1DF6313CEA81BE7843
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
Manifest number:          099E
Signing time:             Thu 04 Jun 2026 05:01:32 +0000
Manifest this update:     Thu 04 Jun 2026 05:01:32 +0000
Manifest next update:     Fri 05 Jun 2026 05:01:32 +0000
Files and hashes:         1: FDI5ZR22qrG8tnMl94W17h9AJcs.crl (hash: E768+G4Bc+acw3orUjxv8wP89mel4DLEEhIwTE2s5OE=)
                          2: H89M_EzTc8StQKIth4lnEHjKKN0.roa (hash: IDhPLp9HDBcx8Hw7u+pzfwTPs8upVVlGQyX+6R34mN0=)
                          3: Kk4HsfGd30im4loLCXTsCFiytPU.roa (hash: oKLzpVpeAoy3QzeCxsxeoWZkV7KJYmzZC8B43Ea48cY=)
                          4: ekGCZNDc9ZOt8-ot2-lgD0_VB3o.roa (hash: FwlalKxI5Tx7qsPfQIKwmFy4fzG691p8g1JAVi3TkPw=)
                          5: mNfJbT_LAkQ7oHjPzi5gOUmJf2k.roa (hash: crQWmizM31tyk+JqRaLmmMrPZUf827PwrlcRDlFZANc=)
                          6: semdbfvd3TfnGahfQ-_MnPsyXVY.roa (hash: K9glb2D2qochPPxOstvTUytekMPlr9ObTuDnHNr8nXk=)
                          7: tDI9go-g4CqghW05S71dg1-pcIU.roa (hash: ziudTSLoj2qHvEkRBq06kMjV08QbQZjdB8rDgu7yyDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:02:11:7e:71:8a:ff:1d:f6:31:3c:ea:81:be:78:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
        Validity
            Not Before: Jun  4 05:01:32 2026 GMT
            Not After : Jun  5 05:01:32 2026 GMT
        Subject: CN=5d3c2cf928a1013e4943728112d8e277435ffeb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:38:b4:5b:f9:09:41:21:b7:26:c5:36:29:28:
                    e0:32:68:47:2d:63:3b:b2:f1:5a:e8:da:78:b6:3c:
                    77:89:11:33:07:96:3e:3b:f4:6a:54:0a:01:4c:ba:
                    98:31:53:8c:37:50:7b:07:d2:4b:a0:5b:90:ac:78:
                    89:c9:b0:ae:36:e2:71:4f:51:18:0f:9a:dd:d3:63:
                    fc:46:81:e8:96:fe:2e:2f:79:a5:4e:2b:bd:35:12:
                    b1:9b:52:10:a4:bf:f1:d7:20:2d:33:ed:4f:40:b9:
                    58:0e:80:6f:c2:ea:af:9e:86:f5:ca:cc:3a:b4:84:
                    c5:53:1c:9c:a6:15:a3:33:9a:ec:73:16:58:9b:63:
                    34:87:e6:c5:5f:ed:36:4d:d1:5e:e6:bb:fb:e8:3e:
                    c1:26:1f:cf:5a:f1:f9:5f:fc:ca:2a:a6:ae:01:62:
                    05:03:1a:84:5c:1b:e5:32:18:09:2e:2a:c7:af:4b:
                    cc:3d:fc:73:5e:ce:49:35:85:27:3d:d1:84:c7:c1:
                    ab:73:92:f6:29:5a:b8:d7:44:34:ea:eb:69:0c:d4:
                    21:10:22:0f:de:be:72:55:fa:95:a0:80:3b:2b:95:
                    8b:8c:05:06:2f:8c:1f:6b:03:38:cc:97:fb:76:5e:
                    00:68:26:8b:d4:e2:0d:6d:45:c3:96:b4:0d:05:3b:
                    65:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:3C:2C:F9:28:A1:01:3E:49:43:72:81:12:D8:E2:77:43:5F:FE:B7
            X509v3 Authority Key Identifier:
                keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:22:77:ee:52:d2:27:b6:3d:c8:5c:ee:58:8c:cc:73:d0:
         b1:25:e4:db:af:c6:f8:48:c5:4a:fa:5e:98:ab:d5:19:36:5f:
         bc:8c:f7:c3:97:1e:73:4e:3a:3f:98:5e:bd:3c:1b:07:1c:99:
         1a:3d:0b:b3:0e:e2:45:47:9d:3e:3c:7e:4b:52:f1:3f:f3:25:
         95:30:1b:ae:e1:41:45:31:70:bc:4d:37:86:4d:22:61:c4:b1:
         35:85:05:04:ba:bc:7b:20:80:de:44:c7:27:06:aa:82:d3:f0:
         4e:05:eb:ee:1c:7b:1e:73:c7:ea:8a:9f:82:74:a5:da:eb:56:
         24:53:fb:e6:e8:f2:4e:67:17:97:07:dd:4d:72:44:31:32:4d:
         c0:32:29:71:4e:2f:6d:1b:cd:fb:76:27:d7:18:e8:5d:4d:25:
         87:b2:3c:2a:a2:26:56:38:1f:3a:b8:50:80:f6:6b:98:e9:63:
         30:09:dd:db:ce:9e:8c:2a:55:a5:ac:ae:1b:03:af:ef:2f:b1:
         51:ff:1b:44:08:d5:ec:4f:de:d0:ec:c5:ea:4f:4c:b7:fe:ec:
         b0:01:9e:86:2e:c9:24:3a:09:83:8d:c6:6c:f2:4f:88:b8:61:
         64:6b:4d:23:8e:dd:a0:5c:c5:5d:17:69:63:d6:d1:09:eb:8a:
         3d:ae:e1:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6RAhF+cYr/HfYxPOqBvnhDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0
MDI1Y2IwHhcNMjYwNjA0MDUwMTMyWhcNMjYwNjA1MDUwMTMyWjAzMTEwLwYDVQQD
Eyg1ZDNjMmNmOTI4YTEwMTNlNDk0MzcyODExMmQ4ZTI3NzQzNWZmZWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlji0W/kJQSG3JsU2KSjgMmhHLWM7
svFa6Np4tjx3iREzB5Y+O/RqVAoBTLqYMVOMN1B7B9JLoFuQrHiJybCuNuJxT1EY
D5rd02P8RoHolv4uL3mlTiu9NRKxm1IQpL/x1yAtM+1PQLlYDoBvwuqvnob1ysw6
tITFUxycphWjM5rscxZYm2M0h+bFX+02TdFe5rv76D7BJh/PWvH5X/zKKqauAWIF
AxqEXBvlMhgJLirHr0vMPfxzXs5JNYUnPdGEx8Grc5L2KVq410Q06utpDNQhECIP
3r5yVfqVoIA7K5WLjAUGL4wfawM4zJf7dl4AaCaL1OINbUXDlrQNBTtlLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF08LPkooQE+SUNygRLY4ndDX/63MB8GA1UdIwQY
MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt
NmVlYzc3ZDliOTg1LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1
LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAME4id+5S
0ie2Pchc7liMzHPQsSXk26/G+EjFSvpemKvVGTZfvIz3w5cec046P5hevTwbBxyZ
Gj0Lsw7iRUedPjx+S1LxP/MllTAbruFBRTFwvE03hk0iYcSxNYUFBLq8eyCA3kTH
JwaqgtPwTgXr7hx7HnPH6oqfgnSl2utWJFP75ujyTmcXlwfdTXJEMTJNwDIpcU4v
bRvN+3Yn1xjoXU0lh7I8KqImVjgfOrhQgPZrmOljMAnd286ejCpVpayuGwOv7y+x
Uf8bRAjV7E/e0OzF6k9Mt/7ssAGehi7JJDoJg43GbPJPiLhhZGtNI47doFzFXRdp
Y9bRCeuKPa7hFA==
-----END CERTIFICATE-----
Generated at Thu Jun 4 08:04:46 2026 by rpki-client