Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
File:                     FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft (raw, json)
Hash identifier:          4/eylKwspp2ffncLpeVRjLRxgK6/dmsVS/7YN0WGwGY=
Subject key identifier:   31:5D:AD:F7:1E:CF:05:BD:09:B3:56:29:B6:81:38:30:03:1C:CC:C9
Authority key identifier: 15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4
Certificate issuer:       /CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
Certificate serial:       019FA0717EAFBCDDE4ACDC713EA2E0906B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
Manifest number:          02A4
Signing time:             Sun 26 Jul 2026 22:00:20 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:20 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:20 +0000
Files and hashes:         1: 6Qw2qfKOtpd_LKkKsTDZ3ejOc18.roa (hash: bj0QwSywJCHEKu3qq7k1s6hD+djiOxQDSPNiFdM0bYw=)
                          2: FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl (hash: FKQkklBxXu5eLTAp0nXrZLzrLJRRMY08Ky11GojLSA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:7e:af:bc:dd:e4:ac:dc:71:3e:a2:e0:90:6b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=158d2a5f52cdff15ae96ac5f4c97610e444b62b4
        Validity
            Not Before: Jul 26 22:00:20 2026 GMT
            Not After : Jul 27 22:00:20 2026 GMT
        Subject: CN=315dadf71ecf05bd09b35629b6813830031cccc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:0b:60:a0:dd:d1:27:f2:43:fa:89:22:ba:
                    a4:ec:66:92:15:3c:e1:bc:a7:fa:20:93:af:20:93:
                    b8:90:f9:2b:3d:9e:2d:53:2e:9d:d5:42:6a:cb:7e:
                    e6:8a:68:70:b6:29:2d:c7:31:17:ef:a4:f6:0e:f3:
                    85:04:dd:81:3c:7c:f1:90:5e:61:39:05:60:8a:7e:
                    ca:58:c9:63:16:f4:5d:fb:a7:31:51:16:ac:cb:7a:
                    c6:67:d0:fa:9e:70:8d:9a:44:29:cc:a9:c5:ca:40:
                    dc:4f:c3:ec:88:78:89:a8:57:55:ae:38:4b:a4:d4:
                    6e:df:37:16:3b:2e:c6:31:97:c1:05:86:61:83:8c:
                    38:84:05:72:79:cc:b2:2c:1c:6e:e9:0b:b6:e3:59:
                    65:bd:d7:b0:09:c2:f7:22:53:62:0d:2f:0c:f8:7f:
                    45:51:c0:f9:84:67:a5:3c:b5:e2:06:29:1b:22:e1:
                    82:28:41:c0:c2:ac:9f:e9:ce:d2:89:07:1b:5e:75:
                    02:48:de:82:eb:4e:4a:7d:dd:cf:23:c1:9d:f0:ca:
                    27:50:77:23:4a:59:62:50:7e:ea:94:a7:6c:28:3b:
                    61:e9:e9:b5:6a:7f:a6:e2:d5:51:2a:38:63:ed:62:
                    50:cc:2f:70:e7:07:8f:2d:ff:28:67:7d:40:b0:ff:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5D:AD:F7:1E:CF:05:BD:09:B3:56:29:B6:81:38:30:03:1C:CC:C9
            X509v3 Authority Key Identifier:
                keyid:15:8D:2A:5F:52:CD:FF:15:AE:96:AC:5F:4C:97:61:0E:44:4B:62:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FY0qX1LN_xWulqxfTJdhDkRLYrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/0e36e6-dfb7-4d02-83b0-562498c68a78/1/FY0qX1LN_xWulqxfTJdhDkRLYrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:7c:e6:2f:b2:4b:16:68:51:74:99:e9:b8:88:41:8a:d1:7f:
         ae:c7:59:1e:d7:20:34:39:13:16:7f:00:f7:6b:ee:d7:58:8e:
         49:b0:04:88:b4:db:7e:e2:f7:21:3b:f3:ef:20:43:da:cf:17:
         58:7d:16:71:3f:5a:72:c6:48:08:11:10:3e:6e:d6:de:02:63:
         78:0d:87:1a:8e:03:a0:3b:65:61:df:78:0d:f2:dc:97:20:40:
         92:ec:b1:85:be:68:34:6f:bb:c9:c7:76:b5:e9:b0:6a:a4:48:
         26:02:3b:00:87:af:af:54:a9:ec:51:d4:7b:17:cc:1f:0c:4f:
         7a:e1:10:01:e8:ad:11:5f:37:fc:c9:95:69:d6:10:25:a4:85:
         1c:c4:a3:e0:b4:10:d3:3b:88:2b:7e:ff:12:9a:40:05:cd:5b:
         99:71:1f:f7:70:75:d5:24:73:6a:07:5c:67:30:4c:60:77:75:
         7c:15:92:06:f0:6f:b4:56:38:65:6d:cc:b0:f8:86:00:9e:e4:
         37:92:1a:0c:34:44:9b:16:76:02:bf:76:53:12:95:7b:a8:77:
         4d:70:03:7f:e0:59:64:08:ed:4d:dc:2c:30:57:6d:6f:50:24:
         c6:03:97:10:3a:3d:2b:bc:e9:44:eb:7b:e9:52:9a:4d:b0:7f:
         22:16:1c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcX6vvN3krNxxPqLgkGuEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1OGQyYTVmNTJjZGZmMTVhZTk2YWM1ZjRjOTc2MTBlNDQ0
YjYyYjQwHhcNMjYwNzI2MjIwMDIwWhcNMjYwNzI3MjIwMDIwWjAzMTEwLwYDVQQD
EygzMTVkYWRmNzFlY2YwNWJkMDliMzU2MjliNjgxMzgzMDAzMWNjY2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslsLYKDd0SfyQ/qJIrqk7GaSFTzh
vKf6IJOvIJO4kPkrPZ4tUy6d1UJqy37mimhwtiktxzEX76T2DvOFBN2BPHzxkF5h
OQVgin7KWMljFvRd+6cxURasy3rGZ9D6nnCNmkQpzKnFykDcT8PsiHiJqFdVrjhL
pNRu3zcWOy7GMZfBBYZhg4w4hAVyecyyLBxu6Qu241llvdewCcL3IlNiDS8M+H9F
UcD5hGelPLXiBikbIuGCKEHAwqyf6c7SiQcbXnUCSN6C605Kfd3PI8Gd8MonUHcj
SlliUH7qlKdsKDth6em1an+m4tVRKjhj7WJQzC9w5wePLf8oZ31AsP/V8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFdrfcezwW9CbNWKbaBODADHMzJMB8GA1UdIwQY
MBaAFBWNKl9Szf8VrpasX0yXYQ5ES2K0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAt
NTYyNDk4YzY4YTc4LzEvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8wZTM2ZTYtZGZiNy00ZDAyLTgzYjAtNTYyNDk4YzY4YTc4
LzEvRlkwcVgxTE5feFd1bHF4ZlRKZGhEa1JMWXJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHzmL7JL
FmhRdJnpuIhBitF/rsdZHtcgNDkTFn8A92vu11iOSbAEiLTbfuL3ITvz7yBD2s8X
WH0WcT9acsZICBEQPm7W3gJjeA2HGo4DoDtlYd94DfLclyBAkuyxhb5oNG+7ycd2
temwaqRIJgI7AIevr1Sp7FHUexfMHwxPeuEQAeitEV83/MmVadYQJaSFHMSj4LQQ
0zuIK37/EppABc1bmXEf93B11SRzagdcZzBMYHd1fBWSBvBvtFY4ZW3MsPiGAJ7k
N5IaDDREmxZ2Ar92UxKVe6h3TXADf+BZZAjtTdwsMFdtb1AkxgOXEDo9K7zpROt7
6VKaTbB/IhYc/w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:48:19 2026 by rpki-client