Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
File:                     FFXKMFkjEziJJe4UQQCa0x1LtB8.mft (raw, json)
Hash identifier:          KCg5l2GE5MyOHdyuyLPhskNUsR9gUfzve9wWl63tK74=
Subject key identifier:   B2:42:84:13:B7:7F:E1:35:D1:E3:DB:89:D7:FC:75:2F:7F:BB:11:4A
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Certificate issuer:       /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial:       019EB6FC1BE06637CB42F97CD47AA168F67D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
Manifest number:          03AC
Signing time:             Thu 11 Jun 2026 14:00:35 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:35 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:35 +0000
Files and hashes:         1: FFXKMFkjEziJJe4UQQCa0x1LtB8.crl (hash: rnXWKbl2hSQmrx6fmXR7a5nkBmkCyBxJQtgH93VkRzE=)
                          2: OuWrpI5tA2nM39wIK9hf8zKRMpQ.roa (hash: 9qABw/PbuwVgydGcGw+YmrMyH005TQ2bdJfH/8dMgvY=)
                          3: W-lf8hwpKZ_Qz4QyYmLJuZ0Q150.roa (hash: 0CCMus3U6y/Vhpkh6RFJf4seKPVSo2QOmMSt3f+sxgc=)
                          4: WY4yKJ6FuiBdiFOznndYQM--z2g.roa (hash: 76Gd2waLyhSjE5zW3D9kYms7Etz3xgkY7SORNKkRpWI=)
                          5: ZQhaiJ1oc9r5-C3flapO26NGQ7I.roa (hash: plgNeQhV8RVh6yAaBxxXzVfBQT4+N5LviNtdc5/+xvc=)
                          6: Zf8BnsxBEzPifxA8SqDN9EEVzfs.asa (hash: goCO6KEz7zNZ6e8+cBVkdYSWfsyiMbes0UHqaLp/+8w=)
                          7: o3qzkkESXY7sQI9Ef9a47N0JYRI.roa (hash: +KpziTc4EL6AuFsdBC1mCWAUUjeoCRgVK2HMDiAy6Q8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fc:1b:e0:66:37:cb:42:f9:7c:d4:7a:a1:68:f6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
        Validity
            Not Before: Jun 11 14:00:35 2026 GMT
            Not After : Jun 12 14:00:35 2026 GMT
        Subject: CN=b2428413b77fe135d1e3db89d7fc752f7fbb114a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a3:49:00:8e:0c:80:ee:ae:2f:70:d5:86:96:
                    00:a5:7f:51:80:9a:2c:36:ee:c3:f9:fe:a9:fb:10:
                    02:95:d4:54:a2:e2:57:a3:7b:b5:42:6d:86:25:73:
                    85:ea:84:53:fb:74:c1:38:6c:7b:82:ab:f1:6e:89:
                    d6:c9:b8:62:e0:bf:9a:c9:36:e8:3d:1b:f0:b9:b2:
                    7c:b1:65:f2:4b:91:cb:05:c4:05:a4:cd:fa:db:ca:
                    95:52:c4:e2:78:b6:fe:e9:ab:17:25:ca:7e:cc:b7:
                    17:7f:56:79:0f:df:a1:dd:7a:8b:10:97:8c:89:45:
                    66:f2:04:74:0a:b1:56:84:94:18:38:fc:ec:d0:45:
                    cb:10:6e:c3:71:30:10:cf:da:90:6c:ab:a1:39:6d:
                    79:f3:6b:16:7f:81:aa:d4:15:e3:43:22:6a:84:71:
                    d0:64:6c:6c:5a:e2:39:22:9b:49:b1:1c:55:e3:90:
                    a6:5a:76:45:e0:47:a6:d5:fe:07:40:78:b2:db:cf:
                    17:47:ec:f4:c9:cf:9a:01:1b:8e:df:02:e2:d6:78:
                    c6:7f:10:05:ca:81:59:1b:a8:75:2f:97:9c:08:e3:
                    60:24:1a:62:ae:55:9c:12:4b:c2:f4:16:8e:c0:49:
                    7d:11:65:5f:43:c0:da:24:aa:81:f9:d1:50:bc:d0:
                    06:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:42:84:13:B7:7F:E1:35:D1:E3:DB:89:D7:FC:75:2F:7F:BB:11:4A
            X509v3 Authority Key Identifier:
                keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2a:57:f2:27:a3:4b:81:db:d1:03:b1:7c:72:31:61:9f:06:
         b9:0c:f8:f8:74:1d:14:51:e1:58:1f:58:8c:89:68:f5:4b:23:
         64:52:46:23:2f:9e:20:5e:04:41:48:9e:db:31:93:82:20:e0:
         ca:97:10:cf:06:e9:af:b0:be:67:bc:18:b2:4a:02:a5:22:2a:
         fc:9c:9d:dd:cd:f0:5b:af:56:ec:63:34:41:cb:ea:13:bb:e8:
         12:37:69:27:fd:0b:d1:45:ad:78:f6:50:e1:12:f3:77:9c:89:
         ab:af:ae:78:8b:b1:b6:de:88:fd:0a:a2:c9:9e:aa:bf:fb:84:
         7c:06:5c:42:6e:40:a7:0e:da:d8:e7:39:10:6b:99:11:f5:42:
         b7:6b:d7:45:b8:3b:91:93:90:7c:6f:f9:a8:f1:ef:e3:1d:9f:
         43:b2:80:2a:f0:bc:4c:fe:80:3d:28:3d:bb:a2:2a:c7:7b:b9:
         99:3b:40:b1:f3:04:e7:bc:47:99:13:e7:90:64:a6:22:35:b3:
         5c:9e:c7:46:d3:2a:81:3f:e3:09:68:f2:6f:39:52:c4:98:a7:
         72:ae:61:17:f6:e9:e4:fc:21:dd:bc:65:16:79:2e:7e:a5:d2:
         fe:99:11:51:ec:7e:74:18:61:8c:1f:e5:72:41:f2:1b:05:bb:
         d6:3b:c4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62/BvgZjfLQvl81HqhaPZ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0NTVjYTMwNTkyMzEzMzg4OTI1ZWUxNDQxMDA5YWQzMWQ0
YmI0MWYwHhcNMjYwNjExMTQwMDM1WhcNMjYwNjEyMTQwMDM1WjAzMTEwLwYDVQQD
EyhiMjQyODQxM2I3N2ZlMTM1ZDFlM2RiODlkN2ZjNzUyZjdmYmIxMTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaNJAI4MgO6uL3DVhpYApX9RgJos
Nu7D+f6p+xACldRUouJXo3u1Qm2GJXOF6oRT+3TBOGx7gqvxbonWybhi4L+ayTbo
PRvwubJ8sWXyS5HLBcQFpM3628qVUsTieLb+6asXJcp+zLcXf1Z5D9+h3XqLEJeM
iUVm8gR0CrFWhJQYOPzs0EXLEG7DcTAQz9qQbKuhOW1582sWf4Gq1BXjQyJqhHHQ
ZGxsWuI5IptJsRxV45CmWnZF4Eem1f4HQHiy288XR+z0yc+aARuO3wLi1njGfxAF
yoFZG6h1L5ecCONgJBpirlWcEkvC9BaOwEl9EWVfQ8DaJKqB+dFQvNAGDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJChBO3f+E10ePbidf8dS9/uxFKMB8GA1UdIwQY
MBaAFBRVyjBZIxM4iSXuFEEAmtMdS7QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDIt
OWIyNmNhYjc5NDUxLzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDItOWIyNmNhYjc5NDUx
LzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARipX8iej
S4Hb0QOxfHIxYZ8GuQz4+HQdFFHhWB9YjIlo9UsjZFJGIy+eIF4EQUie2zGTgiDg
ypcQzwbpr7C+Z7wYskoCpSIq/Jyd3c3wW69W7GM0QcvqE7voEjdpJ/0L0UWtePZQ
4RLzd5yJq6+ueIuxtt6I/QqiyZ6qv/uEfAZcQm5Apw7a2Oc5EGuZEfVCt2vXRbg7
kZOQfG/5qPHv4x2fQ7KAKvC8TP6APSg9u6Iqx3u5mTtAsfME57xHmRPnkGSmIjWz
XJ7HRtMqgT/jCWjybzlSxJincq5hF/bp5Pwh3bxlFnkufqXS/pkRUex+dBhhjB/l
ckHyGwW71jvESw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:06 2026 by rpki-client