Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File:                     FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier:          yVKotwpmzU7w+bmgbQgEZ3PmRXZ6w/rW0jOAuzTvTE8=
Subject key identifier:   66:4E:6F:E8:D2:F2:E3:0B:D1:4F:77:9B:B1:E5:AB:83:20:D8:86:FE
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer:       /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial:       01A134B5230223179CDFDB493865B486B4C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number:          1AA1
Signing time:             Tue 13 Oct 2026 10:00:48 +0000
Manifest this update:     Tue 13 Oct 2026 10:00:48 +0000
Manifest next update:     Wed 14 Oct 2026 10:00:48 +0000
Files and hashes:         1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: iMHvq1iu0tNr/dIcgCILlGxlbTpnZ1M+z3Ka8GAQRjM=)
                          2: X9c9GMVeYaYQqH2XyexJIcOVd5Q.roa (hash: LMkSmQgBQGug0NOzVugCkxvy72yFENtMgmfAEYQ2z28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:b5:23:02:23:17:9c:df:db:49:38:65:b4:86:b4:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
        Validity
            Not Before: Oct 13 10:00:48 2026 GMT
            Not After : Oct 14 10:00:48 2026 GMT
        Subject: CN=664e6fe8d2f2e30bd14f779bb1e5ab8320d886fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:b4:51:b4:49:35:ee:fd:4e:7b:6c:75:e6:
                    52:89:25:22:f0:a4:07:44:d4:a8:0d:7c:97:c3:d9:
                    e7:54:8b:18:df:3b:a6:42:6c:d8:ad:32:6d:27:89:
                    23:4a:86:e4:06:29:c3:0c:9f:78:5b:af:44:de:14:
                    d2:cb:a6:02:12:eb:ef:22:33:32:50:d0:39:5c:e5:
                    ed:88:51:4b:de:cc:9d:71:d2:07:82:b8:70:fb:8d:
                    a3:1f:96:ef:58:1a:14:1d:1f:19:4f:9d:29:56:e6:
                    ad:20:6c:19:58:9d:94:f5:02:47:a7:6f:12:c3:2a:
                    a6:03:e8:6e:13:0d:93:66:cb:5f:05:66:75:14:a8:
                    1e:c9:b2:bf:1e:cb:6b:4b:d7:32:9c:c1:3c:60:33:
                    89:b6:8e:89:e2:9f:ac:aa:cb:9b:5e:94:68:1c:73:
                    b5:94:a2:0a:6a:68:9e:1b:e3:a3:6b:bc:8c:ae:f1:
                    89:05:ad:5b:21:90:bc:30:f4:c7:d9:22:a1:37:7a:
                    c0:22:0f:2d:a4:ca:9d:01:26:03:7d:bf:49:8f:d9:
                    f1:b4:0d:fa:5e:25:e3:c0:22:24:97:c6:6f:c9:eb:
                    93:19:bf:ee:1e:4a:7a:31:5e:1d:51:d5:c6:52:d6:
                    4d:0a:18:79:0e:41:e8:29:5d:bc:76:9c:02:b2:cd:
                    08:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:4E:6F:E8:D2:F2:E3:0B:D1:4F:77:9B:B1:E5:AB:83:20:D8:86:FE
            X509v3 Authority Key Identifier:
                keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a7:22:21:39:a9:01:f5:a7:31:d2:8c:1c:10:b0:cf:f2:f3:
         db:8a:e6:b9:30:c2:f8:84:4c:fc:63:04:ad:b1:28:15:e2:9e:
         73:4c:9d:8c:9c:2d:ef:50:58:90:11:f1:cb:f0:ef:fe:4b:1d:
         25:60:2c:47:d4:d3:c8:18:f0:2a:e6:41:e7:1b:dc:d9:3e:b3:
         5c:be:22:ff:5e:03:29:f7:dd:55:2d:4d:f6:82:d1:94:38:32:
         57:05:f9:9d:88:83:c7:ac:18:f5:ce:a2:ab:4a:f5:ad:98:07:
         56:cc:de:d2:38:c0:ad:0a:43:2b:43:40:a3:fc:72:63:29:88:
         4d:c1:55:53:bb:4f:9c:5b:5d:30:33:f6:d7:d9:56:45:8a:e1:
         cb:dd:ef:12:9c:84:c8:f5:26:3a:36:d2:81:91:f5:6a:f5:99:
         cd:4e:9f:f3:dc:ea:aa:f8:1d:07:c7:41:17:b1:fa:6b:17:51:
         24:ec:56:70:e5:b2:4d:30:fb:29:e5:97:c8:3e:63:c1:c8:ff:
         42:90:12:6a:ef:a9:e6:53:7d:31:13:7f:95:1a:6b:a6:94:fa:
         46:4c:b1:ac:bf:44:9b:89:2e:28:ae:41:9f:ff:7a:90:1f:aa:
         65:26:e5:17:ae:d7:ea:3f:87:43:25:55:bc:f7:89:15:fe:cc:
         ba:85:4d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0tSMCIxec39tJOGW0hrTGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZTQ5MjU4ZGM3NjU0NmRjNTk1MDg0ZDI1OTNlMTgxY2Q0
Nzk4M2YwHhcNMjYxMDEzMTAwMDQ4WhcNMjYxMDE0MTAwMDQ4WjAzMTEwLwYDVQQD
Eyg2NjRlNmZlOGQyZjJlMzBiZDE0Zjc3OWJiMWU1YWI4MzIwZDg4NmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLK0UbRJNe79TntsdeZSiSUi8KQH
RNSoDXyXw9nnVIsY3zumQmzYrTJtJ4kjSobkBinDDJ94W69E3hTSy6YCEuvvIjMy
UNA5XOXtiFFL3sydcdIHgrhw+42jH5bvWBoUHR8ZT50pVuatIGwZWJ2U9QJHp28S
wyqmA+huEw2TZstfBWZ1FKgeybK/HstrS9cynME8YDOJto6J4p+sqsubXpRoHHO1
lKIKamieG+Oja7yMrvGJBa1bIZC8MPTH2SKhN3rAIg8tpMqdASYDfb9Jj9nxtA36
XiXjwCIkl8ZvyeuTGb/uHkp6MV4dUdXGUtZNChh5DkHoKV28dpwCss0IRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZOb+jS8uML0U93m7Hlq4Mg2Ib+MB8GA1UdIwQY
MBaAFBbkkljcdlRtxZUITSWT4YHNR5g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnVTU1dOeDJWRzNGbFFoTkpaUGhnYzFIbUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wZjE2ZjctMTQ1NS00M2RiLWFjYjQt
ODMyN2E5NTJiMmI4LzEvRnVTU1dOeDJWRzNGbFFoTkpaUGhnYzFIbUQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wZjE2ZjctMTQ1NS00M2RiLWFjYjQtODMyN2E5NTJiMmI4
LzEvRnVTU1dOeDJWRzNGbFFoTkpaUGhnYzFIbUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaciITmp
AfWnMdKMHBCwz/Lz24rmuTDC+IRM/GMErbEoFeKec0ydjJwt71BYkBHxy/Dv/ksd
JWAsR9TTyBjwKuZB5xvc2T6zXL4i/14DKffdVS1N9oLRlDgyVwX5nYiDx6wY9c6i
q0r1rZgHVsze0jjArQpDK0NAo/xyYymITcFVU7tPnFtdMDP219lWRYrhy93vEpyE
yPUmOjbSgZH1avWZzU6f89zqqvgdB8dBF7H6axdRJOxWcOWyTTD7KeWXyD5jwcj/
QpASau+p5lN9MRN/lRprppT6RkyxrL9Em4kuKK5Bn/96kB+qZSblF67X6j+HQyVV
vPeJFf7MuoVN5g==
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:25:44 2026 by rpki-client