Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File:                     FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier:          1a3uTDN5CUcs4uhBSkHB3vr/phJinmS5HnR97E4nVC8=
Subject key identifier:   76:BC:47:3E:C7:3C:DB:81:DD:29:56:A6:1F:4A:81:47:48:E4:D2:CE
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer:       /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial:       019E2A70A7CA6A1425A2401A262423B35CB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number:          190E
Signing time:             Fri 15 May 2026 07:01:26 +0000
Manifest this update:     Fri 15 May 2026 07:01:26 +0000
Manifest next update:     Sat 16 May 2026 07:01:26 +0000
Files and hashes:         1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: TbWkpxU0o8Dwg2Q5zi/LIte74TRwPMgBdYeOXRGS7TI=)
                          2: X9c9GMVeYaYQqH2XyexJIcOVd5Q.roa (hash: LMkSmQgBQGug0NOzVugCkxvy72yFENtMgmfAEYQ2z28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:70:a7:ca:6a:14:25:a2:40:1a:26:24:23:b3:5c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
        Validity
            Not Before: May 15 07:01:26 2026 GMT
            Not After : May 16 07:01:26 2026 GMT
        Subject: CN=76bc473ec73cdb81dd2956a61f4a814748e4d2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ce:e7:dc:5a:8e:10:32:95:26:ad:45:1b:b7:
                    69:2a:9d:d2:db:11:a8:27:ca:46:e7:ae:22:2e:3a:
                    f2:c0:00:8c:62:23:95:e5:5b:c0:c7:59:7f:9a:94:
                    de:cf:47:38:e2:d8:25:9a:2b:8d:77:2a:a9:fa:70:
                    eb:b6:54:50:1b:2c:58:e7:95:3f:89:7c:f9:b4:36:
                    bf:da:2d:15:ad:18:60:db:83:3d:29:b5:f9:34:e6:
                    2e:53:73:c8:1a:17:b8:f8:54:f6:86:ee:77:4a:0a:
                    f9:6f:b5:f3:62:38:40:c3:5b:80:d0:a9:7a:47:e5:
                    a5:0a:18:26:63:e6:a4:70:6b:f4:9a:f3:08:20:d5:
                    83:02:e4:f0:29:c8:13:a7:1f:92:1e:31:9f:3f:db:
                    03:12:75:43:c3:c2:09:8f:8c:0e:97:5c:ca:48:60:
                    10:c1:ac:41:71:e0:83:33:b3:cc:81:96:11:57:1e:
                    3a:23:6a:31:81:a4:5a:51:3b:4f:6e:97:53:fb:6e:
                    52:8e:1f:f7:4a:a1:54:e8:bd:10:5c:7d:0f:b3:8a:
                    fb:7b:6f:b5:84:a0:51:ff:f7:c6:d4:95:05:6f:5f:
                    58:d4:39:f7:7f:5f:cc:55:da:e2:2e:1e:58:7e:a5:
                    63:c7:63:6e:3b:9c:35:5f:66:cd:6e:a9:84:16:3c:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:BC:47:3E:C7:3C:DB:81:DD:29:56:A6:1F:4A:81:47:48:E4:D2:CE
            X509v3 Authority Key Identifier:
                keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:28:9f:15:fc:14:2a:60:2f:8e:6b:50:2b:e8:b6:22:e6:e2:
         48:12:c2:19:58:77:53:df:24:9c:b5:e9:61:41:3f:0a:54:cc:
         e9:3e:56:fe:32:06:ca:d0:d2:be:53:f7:87:a7:bc:8f:1a:e1:
         20:84:22:6e:0a:35:0b:65:b7:80:71:3a:1a:d2:38:fd:dd:a1:
         bb:98:e5:27:d8:8d:7e:62:66:07:00:e3:cc:e9:83:2c:3d:76:
         a2:83:bb:13:d3:9e:d7:f7:d9:33:0a:04:88:51:81:ca:c4:0c:
         eb:2c:00:1d:e6:c5:d5:21:13:43:1c:12:b3:0e:be:32:f0:f3:
         56:54:5c:7e:7f:fe:b5:b3:66:fb:e3:0a:96:0f:2b:c0:e9:3f:
         3f:a9:de:d4:59:17:85:c5:69:d2:a5:cb:d1:6f:dd:94:b8:8f:
         42:b7:35:55:b6:06:84:cd:f2:ce:e3:9b:8f:c4:7d:fb:a3:d7:
         b2:c4:0c:ad:ef:84:e4:05:41:a1:f3:b0:d1:68:d6:b7:90:17:
         74:d6:5d:9c:c3:31:39:58:a3:fe:96:b4:04:d1:31:ce:9e:91:
         ac:63:37:3b:10:6e:bf:a6:be:e6:cf:ac:ea:e6:14:65:42:f7:
         ba:fc:55:4e:48:fa:ee:fa:78:8f:8d:f3:f6:60:28:0e:f2:e3:
         16:ad:98:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:01:44 2026 by rpki-client