Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File:                     FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier:          CMZ8u2S4usPoB7BCFCHtQmqEy7h+4fu0r2zuLVJowEA=
Subject key identifier:   93:96:D8:22:B2:C3:7B:D8:FD:21:20:9C:D9:F6:99:22:22:AF:F4:59
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       019E295DD47A5C5FAF551FDB3483425A2A12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number:          190F
Signing time:             Fri 15 May 2026 02:01:15 +0000
Manifest this update:     Fri 15 May 2026 02:01:15 +0000
Manifest next update:     Sat 16 May 2026 02:01:15 +0000
Files and hashes:         1: 1RanCO1mu-OiQ0iZEtdw-yAjkTI.roa (hash: yloj+KSnzpOLHXmmnW6y/9LvQrZ1HgM73eQl1+fYOuI=)
                          2: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: mwzEiXh9rx5IjzBzYjBGNlSbJf7zi9FhXWxkt2axVeI=)
                          3: G83x6tFUMdJXFpkh7ob8iQJOyWk.roa (hash: fqKR1JBeUu0DbH/b90tqdDXbcTIQ5RZlC7Ezhyu15AQ=)
                          4: IwnuHUcrSyqTDj2R1SrfqJthDz0.roa (hash: SAYzINhAcM78pjeHDBOp09qDlTIFRrqRQDRqGfJbZ6g=)
                          5: QguY6sNw_4yrqydTBsOIYz60GsQ.roa (hash: MwsRxWqp1y4l7li+nXNmzcRZf3idKS20ILN1jbY4EjI=)
                          6: YGxOWC67xnFdZpqiT6jQNZ3x7F8.roa (hash: IBA2eWmYoe53rLsRx6eyDDNbF8a4NYDcbQ80+DftLrA=)
                          7: bqonASN6m8_X-0PLTWyL1k78XVc.roa (hash: BHHdw7qa2kmdkeh9BUPFPvgX9iTcx117t99txuo1M88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5d:d4:7a:5c:5f:af:55:1f:db:34:83:42:5a:2a:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: May 15 02:01:15 2026 GMT
            Not After : May 16 02:01:15 2026 GMT
        Subject: CN=9396d822b2c37bd8fd21209cd9f6992222aff459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:91:f1:ef:51:75:05:38:72:91:2a:21:ac:
                    76:b7:04:71:28:35:be:d8:ac:ce:80:e7:12:5a:84:
                    7b:79:4f:22:d6:e2:63:6d:43:cc:c7:d5:8d:0f:13:
                    d3:21:61:84:bc:f0:68:8b:c8:40:ed:95:4a:d5:b4:
                    e1:f5:ed:1a:63:ac:e8:63:34:17:32:b5:a5:61:18:
                    3a:6b:aa:b5:f9:ae:f2:8e:00:bb:30:ca:ab:9c:5b:
                    a0:4a:5a:ea:cc:db:03:50:ce:87:1e:36:be:d6:a8:
                    cc:86:27:d2:37:fc:05:ff:42:bb:f7:a2:d1:14:0a:
                    f8:c8:c4:bf:cd:a4:31:9c:4d:18:c6:ff:94:a8:2f:
                    8f:50:40:66:68:45:80:5d:11:4a:41:77:71:b6:52:
                    af:25:65:6b:7e:eb:e8:a9:1d:97:5e:88:4e:c4:39:
                    9f:2c:ad:ab:4f:58:a3:03:58:b8:65:6c:45:27:4f:
                    53:90:9f:e1:97:2b:04:5c:8d:f8:b2:03:ef:07:f1:
                    58:2f:46:7f:71:da:94:61:66:b5:fb:21:c9:e9:c6:
                    6e:ec:4b:a0:12:86:52:1f:0f:09:6b:5b:c6:cb:c7:
                    89:59:98:8a:e8:36:9b:66:50:8f:d8:85:88:0a:0f:
                    56:44:3f:a5:e5:82:a2:fd:18:ad:16:d9:ad:26:d8:
                    db:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:96:D8:22:B2:C3:7B:D8:FD:21:20:9C:D9:F6:99:22:22:AF:F4:59
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:fc:ac:78:87:9c:81:f2:6a:44:5a:f3:24:18:4c:67:c7:45:
         55:c1:9a:e9:8e:67:3e:9c:96:f4:3c:23:42:f1:15:f4:f1:c9:
         26:15:47:01:9b:55:b9:3a:45:4a:d0:9a:d0:ce:d4:7b:dd:e1:
         dd:2c:61:0c:ca:80:8c:53:bb:11:0b:1b:83:a1:7c:d6:f4:77:
         f0:7e:65:db:eb:71:c6:24:35:ac:a1:18:96:95:bd:7d:30:35:
         68:a5:49:a4:74:b1:39:3b:83:3e:a6:58:6d:eb:3b:8d:ee:6a:
         0a:3a:f5:d0:db:69:b4:cc:34:7a:da:36:fc:e2:99:84:3f:40:
         dd:1b:89:1e:39:93:6d:d5:09:2b:9a:0a:15:6d:c2:cb:33:df:
         c0:e6:d1:fd:3f:18:bd:71:96:f3:db:a7:76:f6:a4:15:23:04:
         f6:44:6e:3f:bd:90:c8:fb:9f:cf:2a:a1:0d:fa:98:46:d1:bc:
         6b:b3:bf:4c:f5:5a:91:44:ac:6f:69:8b:c4:f0:c1:70:77:fc:
         5f:ab:aa:b6:ed:9a:54:7e:6a:9e:3e:02:04:6c:d7:cb:dc:26:
         1d:cf:6c:51:6b:0e:16:42:38:bd:bd:65:65:4d:ec:d9:a2:2f:
         55:43:63:fc:6e:56:65:3c:cc:1e:e5:91:b1:eb:92:04:4e:83:
         38:38:ec:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4pXdR6XF+vVR/bNINCWioSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj
YTM3NzEwHhcNMjYwNTE1MDIwMTE1WhcNMjYwNTE2MDIwMTE1WjAzMTEwLwYDVQQD
Eyg5Mzk2ZDgyMmIyYzM3YmQ4ZmQyMTIwOWNkOWY2OTkyMjIyYWZmNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTCR8e9RdQU4cpEqIax2twRxKDW+
2KzOgOcSWoR7eU8i1uJjbUPMx9WNDxPTIWGEvPBoi8hA7ZVK1bTh9e0aY6zoYzQX
MrWlYRg6a6q1+a7yjgC7MMqrnFugSlrqzNsDUM6HHja+1qjMhifSN/wF/0K796LR
FAr4yMS/zaQxnE0Yxv+UqC+PUEBmaEWAXRFKQXdxtlKvJWVrfuvoqR2XXohOxDmf
LK2rT1ijA1i4ZWxFJ09TkJ/hlysEXI34sgPvB/FYL0Z/cdqUYWa1+yHJ6cZu7Eug
EoZSHw8Ja1vGy8eJWZiK6DabZlCP2IWICg9WRD+l5YKi/RitFtmtJtjbHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOW2CKyw3vY/SEgnNn2mSIir/RZMB8GA1UdIwQY
MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt
ZWQ3OTE1NDM2YjI3LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3
LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvyseIec
gfJqRFrzJBhMZ8dFVcGa6Y5nPpyW9DwjQvEV9PHJJhVHAZtVuTpFStCa0M7Ue93h
3SxhDMqAjFO7EQsbg6F81vR38H5l2+txxiQ1rKEYlpW9fTA1aKVJpHSxOTuDPqZY
bes7je5qCjr10NtptMw0eto2/OKZhD9A3RuJHjmTbdUJK5oKFW3CyzPfwObR/T8Y
vXGW89undvakFSME9kRuP72QyPufzyqhDfqYRtG8a7O/TPVakUSsb2mLxPDBcHf8
X6uqtu2aVH5qnj4CBGzXy9wmHc9sUWsOFkI4vb1lZU3s2aIvVUNj/G5WZTzMHuWR
seuSBE6DODjsog==
-----END CERTIFICATE-----
Generated at Fri May 15 11:15:36 2026 by rpki-client