Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
File:                     FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json)
Hash identifier:          BP+eum8IU2avcA3XIdF9wjdRCqKUQpbPoN+1UOa0yqA=
Subject key identifier:   04:4A:53:03:AA:69:A0:CE:7C:90:FD:C7:84:33:EC:13:6E:6B:5E:CB
Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0
Certificate issuer:       /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
Certificate serial:       01A03B95B34CCA41E9A3E96ED72DF874B623
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
Manifest number:          0447
Signing time:             Wed 26 Aug 2026 01:01:01 +0000
Manifest this update:     Wed 26 Aug 2026 01:01:01 +0000
Manifest next update:     Thu 27 Aug 2026 01:01:01 +0000
Files and hashes:         1: 5GiUHvvRvMlg3hS53jo9G5Kr9tU.roa (hash: NmHcAKuahD6OKhRyNCtW1vNB5eydtw5obgklH1AcyCA=)
                          2: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: 1FhepV6WmUN7SRY9aL8bkWwqwiHVJi7EpZDNPE5rtt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3b:95:b3:4c:ca:41:e9:a3:e9:6e:d7:2d:f8:74:b6:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0
        Validity
            Not Before: Aug 26 01:01:01 2026 GMT
            Not After : Aug 27 01:01:01 2026 GMT
        Subject: CN=044a5303aa69a0ce7c90fdc78433ec136e6b5ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ed:a7:39:c3:19:dd:33:3c:f5:ed:a8:37:b8:
                    ac:f1:a9:7e:7f:66:f2:3c:a9:ac:a1:33:4e:ec:42:
                    4c:cd:9b:dd:e2:87:39:db:0a:00:fa:e9:bc:a2:aa:
                    c5:63:4a:48:2d:63:a5:52:de:50:94:6e:0d:1d:da:
                    bc:ee:10:9b:3e:d0:7a:30:66:f9:35:71:c2:6e:bb:
                    37:10:22:e0:dd:9f:6c:1d:3e:53:6d:ea:81:f1:9e:
                    e9:35:d5:72:da:16:b5:1a:91:82:82:e1:a2:f3:be:
                    79:a0:bf:3e:51:f3:9b:70:af:94:fe:93:b8:4f:48:
                    88:f5:c6:e2:ee:1c:ca:58:3a:fb:2b:ad:fd:77:2d:
                    ef:db:66:19:95:fd:e1:9d:90:fb:ef:53:19:14:6f:
                    cc:fe:5a:d7:9e:1c:4e:b5:df:cc:19:e7:23:0b:b5:
                    6c:93:1a:81:90:80:e5:a4:69:b3:c0:36:4f:4e:1c:
                    30:18:a6:c2:8e:05:16:58:e3:fb:87:fa:f9:38:06:
                    25:4b:6c:a9:e4:18:6b:76:fb:85:bb:87:fd:34:bf:
                    b1:5e:34:1b:e9:4d:25:7a:fe:62:ad:94:ec:cf:01:
                    9d:20:53:af:60:17:3e:14:d4:cd:7c:51:50:06:00:
                    84:e6:a6:fb:78:ab:fd:7f:a3:08:b3:5a:64:94:09:
                    9e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4A:53:03:AA:69:A0:CE:7C:90:FD:C7:84:33:EC:13:6E:6B:5E:CB
            X509v3 Authority Key Identifier:
                keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:82:35:1c:95:8e:23:4d:64:ca:36:42:1d:29:cd:0d:d3:eb:
         8e:bb:c2:db:44:bc:d1:ce:45:63:d9:d5:ba:7c:cc:47:9c:39:
         07:f6:9d:86:a3:ff:dc:2d:2c:15:d9:10:e3:e7:8e:c4:bb:98:
         91:f7:94:45:19:f3:00:32:1a:ea:5a:97:b0:93:f2:aa:7a:20:
         44:14:93:87:af:26:2c:b9:92:6c:fc:7d:fd:0e:38:7a:8b:ab:
         95:cf:cc:37:7b:0a:1d:3b:4e:27:2e:e0:58:6f:06:aa:57:2f:
         d0:0d:0a:21:6e:77:69:9d:fc:af:45:6b:de:44:58:b3:27:f7:
         67:54:c6:51:08:4f:3d:20:0c:b9:b1:32:d7:06:dd:5d:aa:84:
         a6:d8:8f:35:fa:d6:a4:36:bc:46:42:0c:e0:4e:33:a1:8a:6d:
         c0:ac:b2:97:50:29:0c:fe:9e:b8:91:60:b8:c6:d2:f0:32:97:
         11:cf:9f:9f:b5:31:23:9e:56:f6:d7:ab:0e:f8:2c:16:74:48:
         f0:64:77:9c:c4:55:7c:b0:51:c1:32:92:46:00:59:66:b9:64:
         ce:ea:8f:b6:86:16:bf:65:9e:9b:41:86:4f:04:2a:a3:72:28:
         8c:19:e6:67:7e:ee:c7:f4:3e:1d:ff:f0:90:84:66:ff:1d:fb:
         8d:85:03:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:37:57 2026 by rpki-client