Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
File:                     FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json)
Hash identifier:          HeSJH7OJWpBUF6LQTFcbtaN/55HyuY45d+SDStmPp6w=
Subject key identifier:   2E:5A:88:44:F6:C5:25:21:05:66:A7:3B:56:A8:57:CA:CF:78:F4:55
Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A
Certificate issuer:       /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
Certificate serial:       01A02733A1ECF14BA153C37FDACD19C2EBBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
Manifest number:          1A16
Signing time:             Sat 22 Aug 2026 02:01:30 +0000
Manifest this update:     Sat 22 Aug 2026 02:01:30 +0000
Manifest next update:     Sun 23 Aug 2026 02:01:30 +0000
Files and hashes:         1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: c26RvJRIjuVczhg8jPz28Z9fbLuyyl1dWCSBxu9yBs0=)
                          2: oYoK3MKCDAt2Vl6sc2ZPRQPXck4.roa (hash: ojbwZkbf6RTWhGjCLnOZeAUwCGajo9XVRazbI1Jt8aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 19:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:27:33:a1:ec:f1:4b:a1:53:c3:7f:da:cd:19:c2:eb:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a
        Validity
            Not Before: Aug 22 02:01:30 2026 GMT
            Not After : Aug 23 02:01:30 2026 GMT
        Subject: CN=2e5a8844f6c525210566a73b56a857cacf78f455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dd:62:67:f4:57:f2:93:e4:74:d4:6e:26:56:
                    95:1d:ea:7a:44:91:13:71:84:89:53:33:89:1a:3d:
                    fd:3f:6d:92:93:85:6a:0f:73:06:b2:2f:47:98:bc:
                    f7:07:50:98:2e:24:37:0d:d3:1c:99:11:5e:92:0d:
                    ef:77:65:1e:ca:b1:c1:80:8b:c4:92:da:3c:b9:2d:
                    9a:c5:bb:0c:44:87:93:f1:14:5c:19:32:8d:38:8b:
                    96:71:24:d8:41:54:c9:26:42:49:c6:c3:d6:e8:59:
                    6c:d0:42:f5:38:e9:79:f7:ee:37:ae:88:f6:5c:09:
                    98:fb:c3:42:ea:7f:58:a6:a0:fe:3f:cc:e2:06:ec:
                    e1:8b:b7:df:31:04:44:06:8d:99:2c:94:cb:8d:8b:
                    73:5d:b5:34:ad:0e:84:25:50:99:30:43:73:6f:c0:
                    41:ef:23:77:b0:9b:bc:ec:f9:cf:ff:d0:8b:c2:4c:
                    bb:f7:66:5e:1a:46:62:c7:8c:79:35:12:97:36:d0:
                    b7:8a:65:ed:cf:b0:de:a7:53:41:82:a3:68:5f:af:
                    07:11:97:b7:29:42:33:8f:49:2d:70:dc:36:66:2f:
                    a6:45:f4:1d:9f:98:6f:8d:c5:a6:db:f3:b3:2c:b1:
                    09:44:30:7d:a7:15:c2:60:4c:6f:94:02:4a:86:dc:
                    b1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5A:88:44:F6:C5:25:21:05:66:A7:3B:56:A8:57:CA:CF:78:F4:55
            X509v3 Authority Key Identifier:
                keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:43:96:61:ee:d3:35:2a:08:ad:f5:0b:f6:be:e1:49:e8:cb:
         38:0b:c2:2e:78:00:fd:c1:81:36:8c:f9:cb:86:93:98:bc:0b:
         25:81:42:93:87:b3:fb:a4:ac:1c:5e:7b:8b:3d:36:f8:d2:19:
         fc:5c:cb:78:21:37:62:ad:75:33:7a:55:29:9f:50:ce:27:86:
         cf:ad:b7:ae:ef:0b:ed:6e:66:b6:86:67:df:e9:5a:4f:e8:8c:
         af:6a:6b:43:1f:83:5a:fc:56:c3:1b:8d:c9:d2:04:25:f3:9c:
         a6:c6:90:74:19:b9:2f:f2:fb:07:bc:bc:72:64:4f:b0:fc:30:
         35:d6:ca:92:5d:49:09:e1:6a:82:7b:01:a5:62:eb:d9:d3:b9:
         c8:28:18:8a:d8:2b:ce:f2:dd:86:9a:a5:85:96:ba:ab:3e:e9:
         4a:57:de:e0:4c:3c:81:36:a6:36:c9:6e:cd:d7:ce:ba:93:ee:
         3a:9a:1c:99:70:83:4a:3c:ad:1d:4c:f4:eb:89:43:31:0a:8e:
         1f:ae:be:40:52:ad:ba:dc:4f:2c:4b:d1:f4:9e:26:a6:16:f2:
         4f:a2:fb:f6:33:52:b2:07:a5:04:df:a0:0d:25:e7:8e:f9:9c:
         68:1b:87:42:85:ff:e0:74:de:89:14:85:2b:7e:5a:91:69:21:
         bc:94:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 04:13:56 2026 by rpki-client