Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File:                     FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier:          ue/yz/W33qRsj1RtEAGDfyBQ2dTDJtVpwlo4R8k3ZHE=
Subject key identifier:   65:9C:A0:57:57:8C:23:DF:C4:18:EE:A5:ED:24:F9:CC:DC:7F:0D:E5
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer:       /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial:       01A1336B9AEE25755ACE98D511262BC52BE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number:          096E
Signing time:             Tue 13 Oct 2026 04:00:52 +0000
Manifest this update:     Tue 13 Oct 2026 04:00:52 +0000
Manifest next update:     Wed 14 Oct 2026 04:00:52 +0000
Files and hashes:         1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: 4uq19B4CTaGFbUyj5FdvcUiILaNYKGUHfS2cxS4o7oQ=)
                          2: mSf_6hw9LbwczEGLxS7bvwkiv9c.roa (hash: CPUV5PHm53/ZGx8XFmHD3voe3NEDlMd+rbTwW6kMNMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 04:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:6b:9a:ee:25:75:5a:ce:98:d5:11:26:2b:c5:2b:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
        Validity
            Not Before: Oct 13 04:00:52 2026 GMT
            Not After : Oct 14 04:00:52 2026 GMT
        Subject: CN=659ca057578c23dfc418eea5ed24f9ccdc7f0de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:ef:72:98:d7:2d:7d:2e:31:84:2c:6b:97:
                    9e:8a:6d:54:eb:ea:69:8e:db:38:f4:e4:38:9f:08:
                    c4:25:19:af:9b:63:26:c2:19:7c:58:10:85:54:b9:
                    46:f5:a8:f7:d4:cc:2d:9b:c9:c2:a5:08:2b:4b:ee:
                    ac:77:dc:0a:01:b8:62:31:4c:b8:bc:90:a1:91:c6:
                    55:a8:ce:ab:51:b9:97:82:cb:80:8e:28:0d:ce:a0:
                    e2:82:ef:93:0f:d9:c1:27:61:0f:e1:a1:9e:d4:e8:
                    da:7c:ea:d5:27:b2:ee:4f:01:d9:93:d1:13:e1:a5:
                    63:39:74:d4:df:0c:2b:5e:a9:0d:dd:ac:ba:e9:65:
                    f7:ad:f8:5a:14:6d:fe:5d:b8:a1:e1:40:f0:bd:93:
                    0c:9a:51:5b:d2:d7:09:85:e6:63:2c:3d:ff:e2:b4:
                    7d:54:2f:6c:a2:f2:2d:0c:9b:b0:6f:84:09:5b:d5:
                    bd:d1:18:b7:27:73:2d:8e:17:c1:f2:cd:7a:bd:5a:
                    ff:d2:fa:c8:b3:3b:78:ea:a9:37:9a:6f:2d:32:36:
                    f2:ad:74:85:1e:71:86:da:f9:24:0b:fa:20:38:37:
                    a2:af:0d:6b:ba:b7:58:ce:08:fd:6d:a0:ca:51:22:
                    9b:e5:5b:dc:9e:9a:b8:6d:07:b5:5d:7d:2f:b9:30:
                    53:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:9C:A0:57:57:8C:23:DF:C4:18:EE:A5:ED:24:F9:CC:DC:7F:0D:E5
            X509v3 Authority Key Identifier:
                keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ad:86:4c:0a:fd:95:6f:cf:7b:f1:b1:93:b9:40:b2:91:51:
         69:5c:59:41:39:6e:bd:59:36:4a:cc:50:d4:fa:80:8c:70:a8:
         7e:3f:cc:84:d0:1a:b6:46:a6:a9:11:f6:37:5e:35:ad:bd:3d:
         bc:f5:2e:f0:f8:75:89:72:8f:34:92:7e:76:ec:d2:6a:e3:af:
         9e:9e:f9:22:b4:43:77:89:94:85:66:9c:cb:9d:2c:78:df:77:
         3d:ca:e3:52:80:6f:10:0c:fc:1b:0b:36:b1:de:da:f2:00:fb:
         c2:c5:1e:75:dc:3c:35:3c:45:8f:9c:35:51:0b:f5:66:1a:ab:
         dd:b5:74:b6:8b:ec:0b:81:15:62:e1:e2:8e:6d:e1:aa:57:79:
         cd:09:a3:4c:23:bf:a2:99:60:81:db:d3:f0:86:a4:dc:f9:a1:
         e8:15:9d:1d:cc:9f:b7:b0:d0:99:9b:14:64:51:ac:f0:93:f2:
         a8:18:16:55:17:43:aa:ed:72:24:6a:3b:62:f8:c9:ca:a0:35:
         38:60:13:3a:16:3d:67:26:bc:ce:18:94:a4:5c:87:88:b5:69:
         0e:6e:cc:03:92:c3:25:8c:3d:fd:27:9c:d0:7e:b4:70:fe:68:
         66:ed:a1:74:08:9a:02:8a:2e:c3:88:6b:83:bc:1a:bc:f5:01:
         cb:e8:1b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 11:56:03 2026 by rpki-client