Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File:                     _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier:          BYj7aIJOSzLkA+PZffL9Db+0UII7lby9Bz5iaukuMCc=
Subject key identifier:   62:22:70:E2:42:79:C1:03:09:4E:99:FF:06:45:D1:F1:64:9C:0B:16
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer:       /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial:       01A025E9B4E8A818C525E7F7EF5A2B7DAF56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number:          16B2
Signing time:             Fri 21 Aug 2026 20:01:08 +0000
Manifest this update:     Fri 21 Aug 2026 20:01:08 +0000
Manifest next update:     Sat 22 Aug 2026 20:01:08 +0000
Files and hashes:         1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: sRXfwlDGwtkNbGiQQuGSlSPXEe6MYxaU2+OwuRx6c+A=)
                          2: pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa (hash: cY4H2iigWEWrWAaGXnc1Tjbm637H9ISvb9VWaDHjJoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:25:e9:b4:e8:a8:18:c5:25:e7:f7:ef:5a:2b:7d:af:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
        Validity
            Not Before: Aug 21 20:01:08 2026 GMT
            Not After : Aug 22 20:01:08 2026 GMT
        Subject: CN=622270e24279c103094e99ff0645d1f1649c0b16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:67:c4:9f:cb:a9:3f:1f:00:d9:09:35:c7:9a:
                    1e:bf:a7:c9:f8:6b:98:1a:13:2b:6c:80:d3:f9:49:
                    c7:50:b5:b2:2d:8f:3f:68:f6:de:78:9c:e1:d2:9a:
                    f1:d8:e7:ca:95:cc:c8:02:87:5a:17:38:4d:eb:4f:
                    4b:70:3e:a6:d9:76:34:6f:e4:9e:83:03:a9:55:af:
                    80:61:bd:d1:f6:98:89:e8:ac:c2:7f:a9:ec:c4:7f:
                    5a:9e:bf:e3:77:bd:17:a6:27:ec:09:52:5c:e9:dd:
                    3c:02:78:99:81:e1:f4:87:7a:39:b2:53:1b:d9:ce:
                    72:98:d2:54:7b:a2:81:2f:88:64:df:d5:9f:a3:09:
                    00:41:7b:e4:78:b5:ab:d5:e2:4a:06:3c:83:2c:0d:
                    9e:3c:71:1b:45:95:8d:76:3d:bb:7f:f3:3c:42:93:
                    ef:7d:a0:2b:52:4f:76:e5:40:0d:7b:a0:2a:d1:47:
                    cc:2d:cc:70:8a:59:d7:55:0c:c7:24:25:e1:94:07:
                    7a:80:04:d8:3e:36:d0:ca:58:24:02:0b:76:6b:ea:
                    5a:3c:9b:57:3b:3d:37:54:da:36:d3:53:e6:e1:f1:
                    87:50:3e:8d:94:1d:77:73:5a:82:58:83:4e:27:92:
                    be:70:ff:f7:d1:dd:cb:59:c6:50:25:2c:fc:4c:77:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:22:70:E2:42:79:C1:03:09:4E:99:FF:06:45:D1:F1:64:9C:0B:16
            X509v3 Authority Key Identifier:
                keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:83:76:56:62:9c:c2:e7:c6:d1:68:69:ae:de:3f:a3:65:
         c1:83:ab:4c:c8:c2:02:b5:f8:77:22:be:3e:aa:b5:5a:b9:63:
         73:c8:12:b3:73:c1:10:d0:28:5d:a2:2f:ff:ec:a4:ec:e6:85:
         61:2a:13:16:c0:f3:4d:9a:51:67:e7:07:40:75:4e:6d:a1:3d:
         2e:6a:58:2f:ee:a8:d5:f9:db:77:ac:b8:80:8e:f6:61:87:e6:
         fe:7e:09:fb:8d:34:04:29:56:b2:8e:31:27:c8:91:08:01:37:
         3f:66:55:e9:67:29:67:82:8e:7b:d2:64:a9:9b:02:dd:56:da:
         26:64:89:d3:6c:31:43:4a:cd:11:06:48:b0:33:f2:56:bc:c7:
         00:31:5e:a1:f6:5d:78:5b:d0:5f:29:06:02:f8:08:d9:41:b1:
         88:1a:fe:29:75:11:28:69:8e:38:e9:25:39:1e:03:a3:28:36:
         0f:ee:6d:51:03:70:16:45:ea:0e:53:ca:23:4d:98:37:18:cd:
         6a:f6:8a:c4:8f:08:16:69:1b:b1:93:5c:59:ae:43:8e:ba:24:
         80:21:b3:e2:37:05:1f:51:ca:cb:1e:c3:25:62:94:5a:c7:52:
         8c:50:be:53:39:44:77:81:19:13:5d:fe:de:e8:0c:73:e8:2c:
         64:79:ae:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:34:13 2026 by rpki-client