Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File:                     Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier:          f3U4aohXBPDi49OQa3iHorywBcL7nl0IwPuYXeRdeS8=
Subject key identifier:   6D:E0:84:27:21:19:42:EE:8E:17:1E:E1:34:B3:82:48:3D:67:A1:FA
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer:       /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial:       01A06E7069058BE0DB468DCC1F0F5A35C82B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number:          05F5
Signing time:             Fri 04 Sep 2026 22:00:55 +0000
Manifest this update:     Fri 04 Sep 2026 22:00:55 +0000
Manifest next update:     Sat 05 Sep 2026 22:00:55 +0000
Files and hashes:         1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: 46Z6w9dxB8/8pzR+qpdynPbmEkfauPV4+uCeHnJO9gk=)
                          2: OytMoAZMK8wtoSzZvtAHJ9Md1Mo.roa (hash: H/07CVFn18uiXemUf+RsWUhgJ/GpamvFqfgXdnjOQDU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:69:05:8b:e0:db:46:8d:cc:1f:0f:5a:35:c8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
        Validity
            Not Before: Sep  4 22:00:55 2026 GMT
            Not After : Sep  5 22:00:55 2026 GMT
        Subject: CN=6de08427211942ee8e171ee134b382483d67a1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c7:b4:56:20:c3:43:f1:bf:63:91:64:41:7a:
                    d7:9c:21:32:58:23:76:fa:98:79:1e:75:37:31:44:
                    84:4b:3a:90:99:b3:98:db:c7:92:80:07:07:60:81:
                    4b:d8:f6:be:21:f1:7e:3e:94:ff:20:88:44:16:69:
                    ea:ef:74:41:83:62:e0:f6:86:6a:0b:5a:b0:51:03:
                    b6:23:17:0c:4c:91:5a:69:b3:07:cd:14:88:bb:08:
                    ef:4e:50:5e:3e:fd:0b:a6:f9:88:77:99:01:84:b4:
                    f0:72:2e:e7:9f:94:9c:88:16:93:e3:eb:b2:1a:51:
                    f2:d9:80:f2:85:68:30:0e:d9:2a:57:c4:90:ce:28:
                    14:b6:6b:34:cc:19:eb:ae:09:0b:d1:2b:de:05:0f:
                    13:75:8a:6e:96:d2:8e:8b:71:21:df:e0:ce:49:b3:
                    07:fb:f0:e0:15:c1:92:ff:9c:b7:8b:02:04:aa:c0:
                    4b:70:17:82:76:df:ed:76:a8:fb:2a:71:6f:73:f7:
                    b9:0e:e8:8b:58:a1:ea:40:81:07:4e:9d:45:52:74:
                    8c:60:35:fb:b2:6b:5e:df:cb:77:8f:32:f3:52:57:
                    a9:84:33:0a:4d:8b:e1:05:6f:f4:32:ee:09:59:10:
                    88:32:82:0d:54:db:16:ac:3d:60:01:66:66:ad:9c:
                    b4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E0:84:27:21:19:42:EE:8E:17:1E:E1:34:B3:82:48:3D:67:A1:FA
            X509v3 Authority Key Identifier:
                keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:52:fa:0a:91:79:f0:40:32:96:d5:3e:49:09:75:94:ed:06:
         81:3c:3a:1c:9c:c5:0e:c7:5c:ac:cc:60:54:2d:23:fc:0d:c7:
         c5:6d:f7:f8:4e:0e:48:b3:0b:06:be:3d:ac:89:6d:06:5d:53:
         8c:9c:84:5f:31:74:37:17:a4:02:ab:14:cf:49:7d:a9:66:ee:
         66:b8:ef:fb:86:79:f3:8c:0a:0f:23:ad:c9:76:21:f5:7f:eb:
         8c:82:2c:de:e5:8b:39:8a:76:fa:20:e2:3b:aa:8e:a5:64:00:
         11:6e:dd:3d:73:cf:72:c2:b8:ac:6d:06:91:4b:1a:7e:2d:a0:
         84:ad:74:fb:c1:cf:53:73:e9:94:dc:2b:f9:ea:c9:83:58:c2:
         e0:74:1b:55:f7:5b:ae:a7:0c:8b:ba:dc:be:01:8a:2f:25:c9:
         12:69:cf:87:58:0d:aa:88:92:70:8d:2a:6f:05:03:6f:25:29:
         55:9c:03:4f:62:44:24:06:89:7f:fe:3c:66:28:2d:47:bd:e3:
         b8:d1:38:f4:63:ba:bb:14:c4:ea:2c:11:90:7b:61:0a:dc:42:
         a3:f4:13:52:b6:37:5f:36:ec:ae:71:ea:a0:1e:23:86:8e:b3:
         dc:b4:df:31:34:03:4e:32:04:07:40:0a:71:81:19:5e:03:b6:
         db:57:1d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:00:49 2026 by rpki-client