Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File:                     FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier:          UxDs3n0ccNz+cEy59/lDrojuxgYGjAKuANPCQzhHYIw=
Subject key identifier:   2C:2B:C1:A3:FF:F3:3F:42:70:6A:FA:5E:F0:F6:92:94:56:96:7C:3F
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer:       /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial:       019E2B1506CF8F8E59767D70733D0BD33B68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number:          07DC
Signing time:             Fri 15 May 2026 10:00:58 +0000
Manifest this update:     Fri 15 May 2026 10:00:58 +0000
Manifest next update:     Sat 16 May 2026 10:00:58 +0000
Files and hashes:         1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: OmnBAEWhsNY/R+MygaA/1CrSQa5s5PYLpalk31D8e3Y=)
                          2: mSf_6hw9LbwczEGLxS7bvwkiv9c.roa (hash: CPUV5PHm53/ZGx8XFmHD3voe3NEDlMd+rbTwW6kMNMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 10:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:15:06:cf:8f:8e:59:76:7d:70:73:3d:0b:d3:3b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
        Validity
            Not Before: May 15 10:00:58 2026 GMT
            Not After : May 16 10:00:58 2026 GMT
        Subject: CN=2c2bc1a3fff33f42706afa5ef0f6929456967c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:13:f6:50:a2:69:c1:00:44:c7:35:12:b7:96:
                    65:92:88:4e:4c:2e:b7:6d:ae:63:84:b9:62:4a:0f:
                    e4:06:f1:a7:98:df:bc:98:71:fd:e0:66:5f:79:a3:
                    aa:a7:cc:d3:8a:5c:09:22:fd:75:26:c6:e8:aa:82:
                    b4:66:4e:bf:c0:d9:ac:1f:09:7b:78:27:7f:a1:d3:
                    76:34:05:22:23:2d:65:0f:14:a2:d1:e7:e1:f4:b1:
                    b1:39:b9:f0:21:47:9d:70:f7:36:0a:08:82:9f:52:
                    3f:91:ac:9d:d0:dc:cd:3f:28:c9:ac:e2:05:74:41:
                    41:40:ab:db:60:50:eb:4f:98:e3:2e:00:7f:71:5e:
                    3c:c9:96:5b:71:d2:46:0f:1a:e1:d3:25:79:c7:a0:
                    27:c9:d6:e6:6f:0b:3b:4b:ef:97:59:f5:2a:eb:b1:
                    33:e0:be:26:73:a9:36:b5:66:ed:49:f1:10:93:0a:
                    d1:8f:f9:41:8e:61:4c:26:a7:e3:00:87:67:b2:db:
                    d9:0f:18:ba:bf:bc:d1:1a:ac:cd:e1:3f:18:74:58:
                    b6:cc:f7:40:b9:9e:85:8e:33:90:dd:c2:2b:54:2f:
                    6e:7f:46:83:23:ad:17:7d:68:46:bd:66:89:a4:9d:
                    8e:ec:1f:d4:df:68:81:9a:01:36:c2:ba:08:67:81:
                    ba:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2B:C1:A3:FF:F3:3F:42:70:6A:FA:5E:F0:F6:92:94:56:96:7C:3F
            X509v3 Authority Key Identifier:
                keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:f9:fc:61:0d:82:39:42:0e:e4:c3:0b:8b:b6:ca:81:31:4f:
         0c:e0:8b:44:5b:e0:19:7e:da:ba:53:01:6b:8a:e4:1c:16:f1:
         1d:48:39:96:d1:55:1e:0c:3b:2d:f0:f5:83:30:66:f7:8e:28:
         9b:30:28:34:07:41:fa:6c:c8:dc:aa:4a:b4:dc:10:36:5a:bd:
         19:3c:f4:84:ed:ad:35:31:ce:5b:af:65:ac:d3:a6:a0:37:a9:
         25:43:84:5f:52:6c:55:34:02:ff:fa:86:9f:d7:0d:59:ee:8f:
         e9:bb:9f:de:e9:a9:79:3f:ae:09:f2:db:b8:da:f5:8e:24:75:
         69:c1:98:e4:b2:69:c9:6b:15:62:88:f8:99:2d:fb:92:17:46:
         d8:da:ae:90:c7:02:d5:05:37:bc:84:3e:8d:ab:98:0a:5f:d0:
         bd:20:5c:88:9d:ce:44:f5:17:85:27:cf:9c:36:ec:04:58:96:
         27:b1:f2:14:17:1e:4c:ba:a8:65:7a:c4:0c:c1:2e:20:13:4d:
         0a:94:c1:78:1d:ac:0a:60:47:6e:67:9e:b4:e2:d7:67:4b:bd:
         1c:c5:54:ef:e7:e1:53:7b:49:88:60:e2:5b:75:6b:9a:0a:01:
         23:6e:39:17:f3:97:c7:03:db:c1:88:cf:f2:b9:4c:ed:e2:94:
         0a:0d:f5:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:46:15 2026 by rpki-client