Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
File:                     FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json)
Hash identifier:          owom3t2nEaMMiEkWHuy6sOUOigG1hxOv4vcyq4RsWXw=
Subject key identifier:   C4:41:BE:CF:63:84:13:17:D1:F5:27:39:D7:F6:BD:FD:CE:8D:F7:A9
Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71
Certificate issuer:       /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
Certificate serial:       019F130ADB3502D8BF046BDDBE070CFF1D99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
Manifest number:          1988
Signing time:             Mon 29 Jun 2026 11:01:46 +0000
Manifest this update:     Mon 29 Jun 2026 11:01:46 +0000
Manifest next update:     Tue 30 Jun 2026 11:01:46 +0000
Files and hashes:         1: 1RanCO1mu-OiQ0iZEtdw-yAjkTI.roa (hash: yloj+KSnzpOLHXmmnW6y/9LvQrZ1HgM73eQl1+fYOuI=)
                          2: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: n8oZ/ASQfWlwykHR6dJarIvjk5xSLVqn9rW2EMOBeCE=)
                          3: G83x6tFUMdJXFpkh7ob8iQJOyWk.roa (hash: fqKR1JBeUu0DbH/b90tqdDXbcTIQ5RZlC7Ezhyu15AQ=)
                          4: IwnuHUcrSyqTDj2R1SrfqJthDz0.roa (hash: SAYzINhAcM78pjeHDBOp09qDlTIFRrqRQDRqGfJbZ6g=)
                          5: QguY6sNw_4yrqydTBsOIYz60GsQ.roa (hash: MwsRxWqp1y4l7li+nXNmzcRZf3idKS20ILN1jbY4EjI=)
                          6: YGxOWC67xnFdZpqiT6jQNZ3x7F8.roa (hash: IBA2eWmYoe53rLsRx6eyDDNbF8a4NYDcbQ80+DftLrA=)
                          7: bqonASN6m8_X-0PLTWyL1k78XVc.roa (hash: BHHdw7qa2kmdkeh9BUPFPvgX9iTcx117t99txuo1M88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 11:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:0a:db:35:02:d8:bf:04:6b:dd:be:07:0c:ff:1d:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771
        Validity
            Not Before: Jun 29 11:01:46 2026 GMT
            Not After : Jun 30 11:01:46 2026 GMT
        Subject: CN=c441becf63841317d1f52739d7f6bdfdce8df7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:12:33:bc:27:fd:5b:92:a5:ec:91:f8:4e:
                    df:9b:5b:c9:3e:9d:eb:c5:c4:5f:19:ad:e1:2c:88:
                    a1:b9:9a:00:04:a2:03:ef:74:72:eb:d8:7b:bb:8e:
                    70:40:7c:64:85:cf:06:88:6d:15:1d:d8:f3:47:17:
                    a2:7f:71:68:e9:c7:8a:5c:ed:ce:20:c7:03:1a:8b:
                    d1:c6:51:00:ee:7b:8b:e1:cf:8f:0b:d3:e5:43:8b:
                    27:db:d3:f8:a3:0c:8f:37:3b:2e:3d:cd:0c:91:b3:
                    c6:37:fd:78:2b:31:9d:be:cc:f0:86:e6:e5:c7:3e:
                    a8:98:4e:53:fb:fd:f8:3c:d9:e5:2e:54:f3:da:f6:
                    f3:ef:9b:29:f6:5b:14:12:57:8b:1a:75:c2:13:e7:
                    16:e9:5f:21:d5:9a:d5:7e:4a:af:34:e2:f2:32:6e:
                    84:e6:27:b5:2b:fd:f6:4d:e0:80:99:1d:4a:df:95:
                    2b:52:58:a9:c9:a4:54:43:f3:d6:2e:dc:a3:df:35:
                    4e:2b:4a:d3:d7:02:c2:30:eb:e7:57:f5:b9:9c:af:
                    b6:14:8e:4e:64:e2:f3:13:4a:1a:7f:c3:88:50:1b:
                    bd:36:8b:74:8f:28:cd:2a:f1:87:b3:c2:cb:20:38:
                    75:dc:2f:23:4e:dd:33:f1:9b:a3:a8:59:02:fb:1a:
                    b3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:41:BE:CF:63:84:13:17:D1:F5:27:39:D7:F6:BD:FD:CE:8D:F7:A9
            X509v3 Authority Key Identifier:
                keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:46:e8:cb:b6:ea:66:a7:8a:3b:07:20:34:3d:f5:f6:93:a6:
         8c:76:61:93:5a:b0:9b:95:9b:4c:e2:1f:8c:d0:37:30:32:a7:
         33:9d:fc:6a:44:77:78:70:cd:6f:b2:4a:80:6e:96:1b:31:86:
         4f:0d:e7:23:d4:f5:94:d6:8b:63:0f:d0:44:ac:f5:03:51:f4:
         c3:f7:14:74:f6:bd:27:7a:9b:01:31:bc:42:e4:37:c7:29:96:
         0b:e6:02:c3:59:b1:02:be:44:3e:b2:32:79:93:94:d7:93:6e:
         60:15:77:3f:fa:dc:bb:88:45:3a:ea:3a:30:68:67:c7:fd:ad:
         27:c6:89:18:f9:9a:97:3d:da:1d:f2:9f:8f:7d:a2:c8:4d:4a:
         75:32:e9:58:b0:fe:57:f6:2c:a8:c0:f4:f0:98:d8:80:2d:7b:
         c1:21:6b:43:6c:b6:5c:fd:53:60:c2:79:16:68:a3:d3:8d:d5:
         cf:fe:43:f4:fa:95:a2:77:1d:f4:b7:6b:c3:a1:61:95:2a:8f:
         b2:34:76:0f:5a:b5:bf:19:74:a0:a9:90:1c:f7:5c:9f:03:82:
         01:eb:b7:03:83:1b:9f:f5:b3:79:37:83:45:b0:41:0b:a9:c3:
         20:cb:8b:0a:e3:cc:89:3a:44:dc:0e:a2:b8:65:ad:23:41:a7:
         11:02:77:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8TCts1Ati/BGvdvgcM/x2ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj
YTM3NzEwHhcNMjYwNjI5MTEwMTQ2WhcNMjYwNjMwMTEwMTQ2WjAzMTEwLwYDVQQD
EyhjNDQxYmVjZjYzODQxMzE3ZDFmNTI3MzlkN2Y2YmRmZGNlOGRmN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyogSM7wn/VuSpeyR+E7fm1vJPp3r
xcRfGa3hLIihuZoABKID73Ry69h7u45wQHxkhc8GiG0VHdjzRxeif3Fo6ceKXO3O
IMcDGovRxlEA7nuL4c+PC9PlQ4sn29P4owyPNzsuPc0MkbPGN/14KzGdvszwhubl
xz6omE5T+/34PNnlLlTz2vbz75sp9lsUEleLGnXCE+cW6V8h1ZrVfkqvNOLyMm6E
5ie1K/32TeCAmR1K35UrUlipyaRUQ/PWLtyj3zVOK0rT1wLCMOvnV/W5nK+2FI5O
ZOLzE0oaf8OIUBu9Not0jyjNKvGHs8LLIDh13C8jTt0z8ZujqFkC+xqzLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRBvs9jhBMX0fUnOdf2vf3OjfepMB8GA1UdIwQY
MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt
ZWQ3OTE1NDM2YjI3LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3
LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUboy7bq
ZqeKOwcgND319pOmjHZhk1qwm5WbTOIfjNA3MDKnM538akR3eHDNb7JKgG6WGzGG
Tw3nI9T1lNaLYw/QRKz1A1H0w/cUdPa9J3qbATG8QuQ3xymWC+YCw1mxAr5EPrIy
eZOU15NuYBV3P/rcu4hFOuo6MGhnx/2tJ8aJGPmalz3aHfKfj32iyE1KdTLpWLD+
V/YsqMD08JjYgC17wSFrQ2y2XP1TYMJ5Fmij043Vz/5D9PqVoncd9Ldrw6FhlSqP
sjR2D1q1vxl0oKmQHPdcnwOCAeu3A4Mbn/WzeTeDRbBBC6nDIMuLCuPMiTpE3A6i
uGWtI0GnEQJ3qQ==
-----END CERTIFICATE-----
Generated at Mon Jun 29 16:35:17 2026 by rpki-client