Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File:                     FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier:          QCoJa6/kgNOywxcj2ffB0U0pX/lRQAS5LOnEn03YpKs=
Subject key identifier:   F4:59:ED:3D:92:07:A7:4A:9A:9B:35:69:AF:6A:24:85:2A:74:A5:D4
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer:       /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial:       01A026FCC0FB5D742D0C2B2D3F4703A5D268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number:          08E3
Signing time:             Sat 22 Aug 2026 01:01:33 +0000
Manifest this update:     Sat 22 Aug 2026 01:01:33 +0000
Manifest next update:     Sun 23 Aug 2026 01:01:33 +0000
Files and hashes:         1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: 7MmXSVuIBpMdMBesmPtc0Qs8PXyHi0t158RCW0SUgog=)
                          2: mSf_6hw9LbwczEGLxS7bvwkiv9c.roa (hash: CPUV5PHm53/ZGx8XFmHD3voe3NEDlMd+rbTwW6kMNMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:fc:c0:fb:5d:74:2d:0c:2b:2d:3f:47:03:a5:d2:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
        Validity
            Not Before: Aug 22 01:01:33 2026 GMT
            Not After : Aug 23 01:01:33 2026 GMT
        Subject: CN=f459ed3d9207a74a9a9b3569af6a24852a74a5d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6d:1f:20:ab:23:ed:5a:63:d7:0f:42:a5:df:
                    ad:c6:14:a0:f8:bf:2f:36:11:14:c8:cc:b4:ff:62:
                    89:73:91:c5:43:48:16:36:c1:cc:ab:35:99:1c:c2:
                    50:29:5c:06:05:b5:8f:4b:b6:29:56:49:ad:18:be:
                    77:6f:d3:6d:dd:0b:c4:5a:c1:95:0a:0f:33:6d:ef:
                    1c:7e:57:53:28:25:b0:da:ed:5e:83:af:f5:0d:6b:
                    bd:6c:ee:c8:6d:8d:44:5a:fa:53:0a:5c:49:a6:c8:
                    b6:63:46:19:11:ad:2e:3e:7f:45:ea:f1:97:74:67:
                    0d:7a:5f:23:b7:b3:30:2c:8c:8e:f2:1a:55:52:5e:
                    b8:d9:b6:ec:2a:52:92:ce:a6:2a:1d:fd:67:56:1f:
                    4d:6e:7b:e6:70:ce:02:d2:8d:57:f2:0f:48:c0:21:
                    05:c4:bd:f0:0f:8a:f7:1c:d5:ff:18:3d:84:1f:9c:
                    51:ca:21:d6:07:51:f6:33:48:06:92:34:2e:6e:3f:
                    33:26:9c:cd:50:ca:f6:6e:67:d2:89:5f:eb:52:1c:
                    66:89:db:6d:34:7a:ca:0c:7d:17:b2:62:02:19:91:
                    ea:59:af:9f:bb:b3:e4:08:69:4e:86:4c:a3:0c:4a:
                    3f:df:1c:30:66:d4:95:a3:bb:b0:4f:cb:2a:af:95:
                    ad:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:59:ED:3D:92:07:A7:4A:9A:9B:35:69:AF:6A:24:85:2A:74:A5:D4
            X509v3 Authority Key Identifier:
                keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:8d:ff:0a:a7:3b:2c:ca:48:ef:5d:45:8f:1b:c3:c5:74:b9:
         bc:a1:23:c7:a5:3a:ed:c1:6f:13:31:78:db:c1:df:dc:5b:55:
         be:5e:48:ee:9c:44:d7:d3:5d:d9:93:59:36:be:17:53:0f:6c:
         f7:1d:8d:ab:23:c5:f6:48:a6:64:b5:4d:9c:64:a3:2c:d4:f0:
         52:c5:b7:47:10:1a:a1:14:fd:89:1e:ca:6c:66:35:60:22:ef:
         60:14:67:aa:e6:26:f8:be:6d:27:17:59:5c:1b:c3:a1:dc:d1:
         14:d2:31:9a:5e:7b:ab:55:7d:e2:a9:f9:ba:fc:f2:bd:ee:2f:
         0e:75:9e:92:50:5c:09:24:db:9a:b3:1a:fc:47:29:12:09:4a:
         f2:67:b5:ef:f3:45:b4:80:f6:97:37:99:d6:38:b7:1a:07:cc:
         16:80:a6:4f:41:5f:e0:aa:2b:e5:60:53:02:8b:d9:09:65:81:
         bf:4e:c7:c4:b7:96:b2:ff:fa:27:57:83:dd:c5:31:8f:11:bd:
         c8:dc:d8:c4:11:63:ec:86:91:50:24:03:96:a5:e4:dc:72:7e:
         25:6f:2f:c0:74:39:65:29:6e:94:5c:7a:bd:50:ca:48:25:a3:
         f5:a8:c3:64:6b:70:69:23:fb:27:26:99:d5:e9:21:8c:6d:51:
         86:a1:36:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:20 2026 by rpki-client