Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
File:                     FcGBcG9hxLc3zX63j3Iw40zfwUw.mft (raw, json)
Hash identifier:          mNUdjxO4jvpBfAtw5lX6jBEnpHu0nh2enx217T0yxRc=
Subject key identifier:   C2:D4:95:DA:7A:80:56:18:17:A7:F0:45:2D:1C:1A:66:B5:79:83:8D
Authority key identifier: 15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C
Certificate issuer:       /CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
Certificate serial:       019DED126781E789CD6D31999F38DBA18930
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
Manifest number:          031B
Signing time:             Sun 03 May 2026 09:01:39 +0000
Manifest this update:     Sun 03 May 2026 09:01:39 +0000
Manifest next update:     Mon 04 May 2026 09:01:39 +0000
Files and hashes:         1: 9gJCDoefYLTOALLR7m3uY4ZFTrs.roa (hash: rDMT0XfW0LmY8GbUzIJRZiwWfpYyUk7Ld0WUStlDnJo=)
                          2: FcGBcG9hxLc3zX63j3Iw40zfwUw.crl (hash: YcO7O5Apgn94aEmhKypS6LK9KtpVQ8kFaDQ1PastIMk=)
                          3: JudSUCOqbrtWbahpUSi_qKz1NTU.roa (hash: bQyJrY/9C3LHftNvfMRZW3PNS7iigGqzrsnlBjeZ04o=)
                          4: ZqWsPERsYnrsqCSaYTYQS_tw1uY.roa (hash: ey3Sif7k3v1Kz3BRtrxCLM84dh6fPOogRHH2kMK+y6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ed:12:67:81:e7:89:cd:6d:31:99:9f:38:db:a1:89:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c181706f61c4b737cd7eb78f7230e34cdfc14c
        Validity
            Not Before: May  3 09:01:39 2026 GMT
            Not After : May  4 09:01:39 2026 GMT
        Subject: CN=c2d495da7a80561817a7f0452d1c1a66b579838d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:54:c9:37:88:36:3b:de:22:3d:cb:f9:a8:a1:
                    e2:1c:cb:c8:a4:e0:ec:9e:c9:44:01:2b:f4:63:f3:
                    00:16:ad:b8:a9:88:6b:4e:7c:da:96:40:57:13:99:
                    44:e1:33:ec:1e:e2:3f:bd:f3:06:25:3b:92:8c:65:
                    5a:ea:94:2e:74:66:34:b8:56:67:4f:0d:24:61:20:
                    ee:b8:9e:b9:be:0b:88:61:cf:32:a2:24:a8:a1:6b:
                    70:27:98:11:9f:24:23:ea:e2:3d:93:6f:04:e3:f3:
                    bd:e0:8e:ab:21:85:f8:15:d7:11:e0:1f:cc:8a:19:
                    3f:c0:8f:fd:fc:60:31:bb:4f:f5:a2:8b:4a:e6:8d:
                    7f:4d:04:9e:b8:4e:2d:ac:d2:3a:73:68:41:98:bc:
                    31:88:70:45:56:94:07:0d:26:b9:23:b9:dc:97:e3:
                    88:3b:e6:03:5f:83:35:90:76:03:22:53:4a:b8:3f:
                    07:08:3d:fa:e4:b6:04:33:3a:9c:e6:b0:9c:c0:69:
                    ef:6c:29:9a:89:23:45:ac:ca:3c:90:b4:6f:64:f2:
                    f5:f9:21:71:20:ae:55:ab:b4:8c:80:1d:23:c9:bf:
                    9f:b2:9e:e3:60:db:24:f4:ee:f8:93:b3:c0:ba:b5:
                    f7:22:78:bd:48:d5:82:3a:cf:cc:33:bf:2a:4f:06:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D4:95:DA:7A:80:56:18:17:A7:F0:45:2D:1C:1A:66:B5:79:83:8D
            X509v3 Authority Key Identifier:
                keyid:15:C1:81:70:6F:61:C4:B7:37:CD:7E:B7:8F:72:30:E3:4C:DF:C1:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcGBcG9hxLc3zX63j3Iw40zfwUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/52e0e2-478b-401d-9385-8ff6cd7747c4/1/FcGBcG9hxLc3zX63j3Iw40zfwUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:04:43:31:d7:0f:b6:db:40:d6:5f:14:17:e5:cb:40:ac:e6:
         38:37:e9:9a:70:08:7f:fa:75:09:cf:d5:2c:50:25:88:9b:36:
         1a:fb:5c:82:95:03:d6:00:b6:0b:2e:6a:a1:75:ce:b5:64:45:
         90:b0:df:74:ec:60:8a:75:11:64:87:b5:e2:83:a3:82:58:71:
         7d:d7:77:6d:bb:70:04:ea:b8:76:87:1f:39:f1:51:8c:b2:18:
         ca:5a:22:ea:ba:e6:2a:ca:dc:f7:54:de:ef:c0:30:43:0c:09:
         4b:52:39:c2:52:be:03:32:0f:61:1e:68:6b:e5:44:ab:25:54:
         3f:39:b1:0f:3f:71:e7:fe:b7:c0:88:58:6c:a6:e3:88:d1:15:
         d4:a9:da:00:9d:cf:f4:6d:3f:f4:e2:75:37:e8:b8:19:0d:17:
         bd:19:cd:39:dd:c4:01:44:3a:c5:96:3d:78:a0:6e:f9:fe:b9:
         b1:50:cf:71:45:67:eb:ef:30:db:f6:cb:f2:70:5c:3d:eb:12:
         6e:10:9f:ff:3a:e1:e3:ec:d7:0b:3d:85:ce:7a:f1:a8:49:c7:
         2e:01:1a:5f:c0:ac:12:70:3d:8e:36:7e:c3:3e:b6:72:bf:e4:
         4a:28:56:bb:8c:f8:4e:1a:66:90:16:55:a5:2d:70:51:34:f9:
         69:b2:60:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3tEmeB54nNbTGZnzjboYkwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YzE4MTcwNmY2MWM0YjczN2NkN2ViNzhmNzIzMGUzNGNk
ZmMxNGMwHhcNMjYwNTAzMDkwMTM5WhcNMjYwNTA0MDkwMTM5WjAzMTEwLwYDVQQD
EyhjMmQ0OTVkYTdhODA1NjE4MTdhN2YwNDUyZDFjMWE2NmI1Nzk4MzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VTJN4g2O94iPcv5qKHiHMvIpODs
nslEASv0Y/MAFq24qYhrTnzalkBXE5lE4TPsHuI/vfMGJTuSjGVa6pQudGY0uFZn
Tw0kYSDuuJ65vguIYc8yoiSooWtwJ5gRnyQj6uI9k28E4/O94I6rIYX4FdcR4B/M
ihk/wI/9/GAxu0/1ootK5o1/TQSeuE4trNI6c2hBmLwxiHBFVpQHDSa5I7ncl+OI
O+YDX4M1kHYDIlNKuD8HCD365LYEMzqc5rCcwGnvbCmaiSNFrMo8kLRvZPL1+SFx
IK5Vq7SMgB0jyb+fsp7jYNsk9O74k7PAurX3Ini9SNWCOs/MM78qTwbd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLUldp6gFYYF6fwRS0cGma1eYONMB8GA1UdIwQY
MBaAFBXBgXBvYcS3N81+t49yMONM38FMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUt
OGZmNmNkNzc0N2M0LzEvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC81MmUwZTItNDc4Yi00MDFkLTkzODUtOGZmNmNkNzc0N2M0
LzEvRmNHQmNHOWh4TGMzelg2M2ozSXc0MHpmd1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQRDMdcP
tttA1l8UF+XLQKzmODfpmnAIf/p1Cc/VLFAliJs2GvtcgpUD1gC2Cy5qoXXOtWRF
kLDfdOxginURZIe14oOjglhxfdd3bbtwBOq4docfOfFRjLIYyloi6rrmKsrc91Te
78AwQwwJS1I5wlK+AzIPYR5oa+VEqyVUPzmxDz9x5/63wIhYbKbjiNEV1KnaAJ3P
9G0/9OJ1N+i4GQ0XvRnNOd3EAUQ6xZY9eKBu+f65sVDPcUVn6+8w2/bL8nBcPesS
bhCf/zrh4+zXCz2FznrxqEnHLgEaX8CsEnA9jjZ+wz62cr/kSihWu4z4ThpmkBZV
pS1wUTT5abJgRg==
-----END CERTIFICATE-----
Generated at Sun May 3 15:35:04 2026 by rpki-client