Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
File:                     sFRCxP_pwddh58VpNg6tBCQ4-QM.mft (raw, json)
Hash identifier:          igfBiyit751IN10751ERQFetyJXBi5CxYQXjoZIbgtM=
Subject key identifier:   CB:82:04:9E:5A:FD:6D:11:D3:28:D1:5F:00:70:5B:29:A2:42:9D:AD
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Certificate issuer:       /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial:       019E2A02D6B55FC943FCECADCFD655CF1CFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
Manifest number:          16C9
Signing time:             Fri 15 May 2026 05:01:29 +0000
Manifest this update:     Fri 15 May 2026 05:01:29 +0000
Manifest next update:     Sat 16 May 2026 05:01:29 +0000
Files and hashes:         1: RSgAiFfFUDOLRRmOCmbncd53Jto.roa (hash: R29MYZiBKSn2Fy47uX6Yiye7bvq2OW5L5W2duo3Eaes=)
                          2: SwUYDEAlxO6M5eWOj4TfdQ0JQ2c.roa (hash: kp4VVBnJ9x9RoYER3ShnXFsDjH+5JSgU9IM02fkmGYw=)
                          3: p16cU-7zatx3ndSU5oxcouZGGsA.asa (hash: 2m9k8zrzrHn7HIAqTxycPMDWckYHPav0fwCmzqUUYGo=)
                          4: sFRCxP_pwddh58VpNg6tBCQ4-QM.crl (hash: bYcU+2KylTSkGeRz9VNVPR/TCJLGW5kg4qd66APKlsA=)
                          5: zQ__yCcwrvF4SpWJekyRseIBHM0.asa (hash: 5Ccdj50AwmV19PztW4Q1959SDmAm1f7TUTOUsxH1IQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:02:d6:b5:5f:c9:43:fc:ec:ad:cf:d6:55:cf:1c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
        Validity
            Not Before: May 15 05:01:29 2026 GMT
            Not After : May 16 05:01:29 2026 GMT
        Subject: CN=cb82049e5afd6d11d328d15f00705b29a2429dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8f:a0:dc:94:12:26:69:bc:54:3c:5a:1e:d7:
                    3d:91:4a:ef:74:b2:27:2f:8b:a3:94:18:ea:14:3f:
                    89:2c:1e:d9:ae:6b:35:c2:55:df:2a:8f:92:30:2b:
                    b7:c0:cb:54:82:00:b6:ec:37:a3:ee:30:d9:d0:55:
                    80:35:25:b1:9a:7f:50:13:e2:8e:1f:72:69:ce:83:
                    76:87:7d:26:da:03:df:38:30:4d:b5:e8:97:76:b6:
                    1a:0f:dc:2b:4a:98:3e:a4:bd:81:db:08:28:58:ed:
                    6b:47:39:7d:7d:95:90:b6:bb:51:24:cf:c1:0f:67:
                    c6:3b:31:74:52:e7:eb:1b:1a:88:6d:30:c1:8c:55:
                    33:76:78:de:62:21:e2:60:e4:fc:78:b5:3a:2f:5f:
                    b7:30:2c:1d:73:25:2b:8e:49:24:16:cf:8f:5c:62:
                    3b:d4:fd:9f:4a:ea:99:51:9e:8d:c2:b5:1f:1a:0d:
                    f8:50:f1:5c:49:60:eb:d3:29:46:b8:0d:a8:c8:56:
                    03:9d:f8:1f:b1:a7:90:ef:ee:51:0c:04:dd:dc:fd:
                    73:b3:12:dc:26:2f:2a:af:99:56:61:20:68:a2:b2:
                    c6:12:94:ab:9c:62:5e:36:8a:9e:eb:7f:63:34:91:
                    e4:66:91:38:58:0c:e8:7e:05:48:5f:65:62:b3:dc:
                    ef:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:82:04:9E:5A:FD:6D:11:D3:28:D1:5F:00:70:5B:29:A2:42:9D:AD
            X509v3 Authority Key Identifier:
                keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:6c:66:3c:8e:0e:9d:98:66:2c:f7:0e:73:a6:56:20:39:e8:
         33:8f:37:27:e5:fc:1b:e8:78:96:f4:55:80:79:ee:28:40:37:
         9a:f2:c6:26:ac:b6:6f:82:e8:1a:89:2a:8c:d6:5b:88:6a:d2:
         6d:65:c0:19:3f:fe:dc:95:fa:ba:29:4c:0f:8e:5c:d3:66:cb:
         88:08:72:ed:24:30:bf:55:66:51:20:30:b0:3b:45:d9:16:f8:
         ed:4f:a9:17:15:0e:d0:b8:7e:e5:91:66:33:f7:a6:1f:3d:8a:
         22:e5:c9:36:71:8b:fc:d3:7c:c0:fa:d4:4f:23:6c:3a:59:07:
         63:d9:e9:9c:09:70:db:e7:b4:f8:bf:02:d6:27:10:70:7b:43:
         e1:74:70:6e:83:c5:21:75:e0:bd:4b:d9:03:b4:28:38:94:0f:
         18:b8:d5:4f:6c:c6:2d:70:5e:4c:92:9f:40:72:11:b9:33:57:
         8f:04:cd:0c:75:28:7a:c4:c8:2c:ff:03:48:66:81:8f:79:e0:
         ed:17:5e:91:70:55:7e:2d:d1:8d:6c:b0:94:e0:11:b0:ce:fb:
         8a:ac:32:fd:a0:d0:66:58:0e:a9:85:98:a0:ce:b1:6f:e0:0b:
         eb:5c:b1:e7:9e:9d:bd:56:52:71:8d:ef:cd:ee:22:f5:47:6f:
         c1:bf:0e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:10 2026 by rpki-client