Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File:                     FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier:          yZG26EbHfYguybDMXN7TE34dAqQzWQ7axsgwXz0lWM0=
Subject key identifier:   A1:FA:1D:A7:9D:45:67:BD:AD:61:9A:D9:B6:A4:A0:A1:0E:9E:31:EA
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       019D390A387AE7258759F061A1786DECB9AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number:          1895
Signing time:             Sun 29 Mar 2026 10:01:04 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:04 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:04 +0000
Files and hashes:         1: 8eUjrNm6imMBEiASLOUuqltQoVs.roa (hash: ZfpOTqbTAn2CuRX0LoEyNNAQ5rM0VLzFBNYb2IBiGIE=)
                          2: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: L8xMI61vKqOzrGhPfoOvwE9Lid0lLSUNIej2SpHQ6Zk=)
                          3: FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa (hash: glk6t/DUYkuI6x781kKCmhQHELR1hKXbP1AbR2kHTMc=)
                          4: OpTwdj69eMigXueWV1BOB2dxLbA.roa (hash: 2kgLJoiz6VCqwiPbikEb5+NrvRferle8wU/FOd3hfZM=)
                          5: XdEB96U82mHFGVm_nS4xtciGIkQ.roa (hash: hdzlPow2QIj+p15z7CdLi4KjuG4H8crIwMXk1C1mtMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:38:7a:e7:25:87:59:f0:61:a1:78:6d:ec:b9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Mar 29 10:01:04 2026 GMT
            Not After : Mar 30 10:01:04 2026 GMT
        Subject: CN=a1fa1da79d4567bdad619ad9b6a4a0a10e9e31ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1c:55:8e:ee:77:10:98:58:d9:1c:5d:47:97:
                    3d:41:df:6a:3b:03:40:70:66:a1:4e:8d:2c:ee:92:
                    88:b8:2b:ab:a4:39:03:df:4c:50:c8:a1:26:93:6b:
                    bb:4f:c5:40:20:a0:37:a9:b3:a0:31:0c:93:60:95:
                    d4:90:20:56:a8:9c:a2:f8:44:f8:32:ca:b8:b7:74:
                    bd:37:74:7b:19:a4:e5:2d:3b:de:89:1b:50:98:23:
                    7b:6f:12:b9:11:68:7a:71:d8:56:f2:a4:f5:e0:da:
                    4a:11:2f:13:04:1d:9f:45:ea:53:86:0d:8c:dc:dd:
                    df:13:e5:a5:12:b9:a4:64:32:c6:7e:5b:a2:5e:e5:
                    ee:b7:f2:38:22:fb:60:4c:5b:40:d2:38:36:74:b4:
                    22:38:78:13:93:91:c6:df:cc:3e:a4:df:a4:1d:72:
                    d0:e7:a5:1a:d5:66:83:b7:f4:96:44:0d:62:8f:77:
                    fb:6e:cd:0e:b2:5f:44:e7:14:71:fe:2b:ce:cd:8d:
                    c3:42:88:91:39:1f:66:b9:f4:30:eb:cf:58:3b:ed:
                    c3:49:67:36:45:89:8a:c1:9f:ce:39:b9:de:9b:63:
                    ed:94:89:92:a4:c4:f7:73:c7:0b:b5:b0:ff:cb:a3:
                    99:c9:a6:cc:d4:1b:73:6b:e2:db:4e:7a:a9:33:e0:
                    6a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:FA:1D:A7:9D:45:67:BD:AD:61:9A:D9:B6:A4:A0:A1:0E:9E:31:EA
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9e:23:a7:10:97:15:ee:92:c6:ec:03:bf:8c:ca:da:64:d3:
         3d:51:5d:98:7d:18:a4:d9:ce:64:bc:d7:7a:8b:9d:f9:2d:f4:
         9b:9f:a1:20:d4:3e:0f:97:94:6f:d0:e3:7c:fe:5e:2f:3b:00:
         c1:5f:8c:85:18:c0:14:ad:01:9b:c9:1f:c3:30:e4:bc:ef:98:
         37:f1:ef:ce:0d:83:b3:69:bc:4f:29:a6:86:26:a5:42:9e:08:
         f1:ab:35:a5:d0:28:d5:4b:61:01:84:4e:a0:6b:3a:fe:8c:ba:
         3e:b2:33:78:b8:fc:74:df:92:8b:db:dc:37:61:6c:9c:74:7c:
         c9:1c:61:9d:5d:b3:e4:77:46:db:f2:68:33:ff:0f:e7:01:fb:
         dc:59:de:f3:db:9c:23:cb:ad:d9:c1:c0:37:91:ba:cb:bb:3d:
         2e:2d:53:c1:11:ce:a9:b5:79:5d:59:ce:d3:cf:10:90:f8:65:
         1d:b3:f6:49:41:75:4e:e5:a9:b3:a0:d1:5a:c5:0e:79:ca:81:
         3d:1e:68:78:31:cc:57:f9:87:4c:95:e9:4c:19:4e:1e:34:73:
         73:aa:6f:32:d2:12:05:6a:5b:93:0d:ce:ab:65:5f:ad:ef:06:
         f7:f5:4b:41:7d:db:20:08:37:5d:47:64:24:e0:39:c2:da:0d:
         75:f0:88:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cjh65yWHWfBhoXht7LmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzQ4MzhiYjMxN2I4MTg2Njk5ZjBhNDQ4NWRiNmQ5ZGEx
OTA4ZDIwHhcNMjYwMzI5MTAwMTA0WhcNMjYwMzMwMTAwMTA0WjAzMTEwLwYDVQQD
EyhhMWZhMWRhNzlkNDU2N2JkYWQ2MTlhZDliNmE0YTBhMTBlOWUzMWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhxVju53EJhY2RxdR5c9Qd9qOwNA
cGahTo0s7pKIuCurpDkD30xQyKEmk2u7T8VAIKA3qbOgMQyTYJXUkCBWqJyi+ET4
Msq4t3S9N3R7GaTlLTveiRtQmCN7bxK5EWh6cdhW8qT14NpKES8TBB2fRepThg2M
3N3fE+WlErmkZDLGfluiXuXut/I4IvtgTFtA0jg2dLQiOHgTk5HG38w+pN+kHXLQ
56Ua1WaDt/SWRA1ij3f7bs0Osl9E5xRx/ivOzY3DQoiROR9mufQw689YO+3DSWc2
RYmKwZ/OObnem2PtlImSpMT3c8cLtbD/y6OZyabM1Btza+LbTnqpM+Bq9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKH6HaedRWe9rWGa2bakoKEOnjHqMB8GA1UdIwQY
MBaAFBU0g4uzF7gYZpnwpEhdttnaGQjSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUt
M2ExNDRjNzBlMGIwLzEvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8xNGMxY2EtMTg3NC00N2FjLWExOGUtM2ExNDRjNzBlMGIw
LzEvRlRTRGk3TVh1QmhtbWZDa1NGMjIyZG9aQ05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADp4jpxCX
Fe6SxuwDv4zK2mTTPVFdmH0YpNnOZLzXeoud+S30m5+hINQ+D5eUb9DjfP5eLzsA
wV+MhRjAFK0Bm8kfwzDkvO+YN/Hvzg2Ds2m8TymmhialQp4I8as1pdAo1UthAYRO
oGs6/oy6PrIzeLj8dN+Si9vcN2FsnHR8yRxhnV2z5HdG2/JoM/8P5wH73Fne89uc
I8ut2cHAN5G6y7s9Li1TwRHOqbV5XVnO088QkPhlHbP2SUF1TuWps6DRWsUOecqB
PR5oeDHMV/mHTJXpTBlOHjRzc6pvMtISBWpbkw3Oq2Vfre8G9/VLQX3bIAg3XUdk
JOA5wtoNdfCInQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:56 2026 by rpki-client