Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File:                     FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier:          OlbErbyNfggMSxiRkCwD1MrJ5TrXXa3h7P4MZWm6aYY=
Subject key identifier:   BB:E8:F0:79:43:6B:24:4D:DE:DC:C5:E9:D6:2F:57:CA:09:C7:1A:EB
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer:       /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial:       01A001A5A415646CC61103B76B28B3316BA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 19:00:27 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:27 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:27 +0000
Files and hashes:         1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: qLixRswr+TU6b2UZ8aaQ1z+ksYdhZoZYpwZyolvsXQw=)
                          2: X9c9GMVeYaYQqH2XyexJIcOVd5Q.roa (hash: LMkSmQgBQGug0NOzVugCkxvy72yFENtMgmfAEYQ2z28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 19:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:a4:15:64:6c:c6:11:03:b7:6b:28:b3:31:6b:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
        Validity
            Not Before: Aug 14 19:00:27 2026 GMT
            Not After : Aug 15 19:00:27 2026 GMT
        Subject: CN=bbe8f079436b244ddedcc5e9d62f57ca09c71aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:39:d6:c3:93:27:06:95:57:ce:b7:6b:4f:72:
                    a1:d0:95:8a:4a:62:e8:48:ec:20:0e:34:f3:8b:a4:
                    8d:77:f7:e4:34:58:73:2b:1f:e3:be:2d:b6:21:f2:
                    3e:34:18:97:7a:eb:be:02:6c:af:31:78:27:37:f7:
                    39:b2:f3:81:1f:4e:c9:60:c1:cd:b3:51:09:6a:3e:
                    dd:f3:9d:b2:19:48:3d:9a:19:eb:fd:da:0b:19:2c:
                    fd:87:bb:fa:11:61:f0:e4:29:b7:a6:a4:26:24:ff:
                    c6:f6:7b:18:9f:3b:bf:86:6f:96:de:f3:b9:dd:23:
                    dd:46:db:5b:c9:2f:7b:11:e7:93:53:11:0e:fd:ae:
                    52:96:2a:78:77:80:48:81:38:37:6d:ce:c9:59:81:
                    85:03:62:6d:5c:b3:a8:01:ba:d2:2d:4b:3e:f8:45:
                    c3:fe:41:74:a4:c7:fa:92:14:d4:89:38:89:21:6a:
                    7c:b5:17:38:2e:21:4e:cf:af:09:56:57:a2:a3:d9:
                    5f:d1:da:ca:36:c7:63:3a:1c:0e:be:54:c8:4b:a8:
                    fd:de:0b:db:47:9c:ba:6d:c5:f3:fc:51:92:19:fe:
                    72:31:cc:01:bd:fa:94:a6:eb:7f:d5:e7:e2:4c:3c:
                    2e:c7:12:8e:73:dc:0f:e2:84:aa:18:f4:df:d4:93:
                    f3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E8:F0:79:43:6B:24:4D:DE:DC:C5:E9:D6:2F:57:CA:09:C7:1A:EB
            X509v3 Authority Key Identifier:
                keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3e:f6:3e:c5:bd:d4:09:2d:1b:82:0a:57:61:96:2f:81:7d:
         25:2c:6e:d5:1d:5d:15:4f:f0:30:c4:a6:99:a9:78:03:6c:cb:
         52:b5:9f:ac:62:8b:fa:86:03:c4:bb:ad:ec:a2:ba:d9:86:5f:
         1c:7e:ba:e4:d5:a1:36:f5:28:61:87:3f:d6:e9:a0:af:54:73:
         7f:46:19:f4:4f:88:c7:2e:c2:d5:d3:03:17:b4:ec:d6:e1:d1:
         bc:6e:e5:7d:ff:29:9b:74:73:cc:98:52:77:75:d2:f5:64:c7:
         e5:30:50:18:19:3d:f0:20:d4:8d:ef:e8:fc:5e:1e:87:5f:68:
         4a:bf:bd:a1:8f:bc:a0:a2:62:1c:57:64:76:e4:5d:b1:38:7f:
         4d:8f:08:fd:94:c5:9a:06:4f:b3:4d:d4:0d:19:f4:05:04:f5:
         90:30:9f:0c:12:ea:f0:75:99:dd:d6:b6:4d:2f:b2:89:c7:21:
         2e:bc:53:3a:3c:44:9b:98:f6:37:89:b7:a7:8c:34:2c:5f:7d:
         ab:f2:5b:ef:89:23:5c:5d:a9:4e:a1:a3:57:d0:d7:74:c3:02:
         4f:02:6c:f1:f3:8c:65:7d:c1:ba:11:f3:0d:dc:01:9d:a7:3f:
         ce:55:f0:6a:cb:ae:d6:01:81:0b:7a:2a:22:00:55:b6:1b:6c:
         bf:9e:1c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:22:13 2026 by rpki-client