Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
File:                     FvLalTudPdkr-T3cMtdfCQwhaIo.mft (raw, json)
Hash identifier:          vpUNQoyqXx5Osp4g5koKCnH+DOa3l6g8BGcT4Wp3nEw=
Subject key identifier:   7A:C0:04:16:C8:17:08:6D:2C:7C:BC:1D:CA:99:65:96:AC:7A:13:0E
Authority key identifier: 16:F2:DA:95:3B:9D:3D:D9:2B:F9:3D:DC:32:D7:5F:09:0C:21:68:8A
Certificate issuer:       /CN=16f2da953b9d3dd92bf93ddc32d75f090c21688a
Certificate serial:       019FF9B6438E107B015184FCD8A8C7740170
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
Manifest number:          26
Signing time:             Thu 13 Aug 2026 06:01:39 +0000
Manifest this update:     Thu 13 Aug 2026 06:01:39 +0000
Manifest next update:     Fri 14 Aug 2026 06:01:39 +0000
Files and hashes:         1: 3IHqLLkxVs3Vh8yEcjMD0oPxjbc.asa (hash: jRJrXJ1qgKQxOTKyJcFm9wLNo+treZCginrY9uArjoU=)
                          2: 6rA0LXSt08NUBPhJSG_oai4J-rE.roa (hash: nmJl/0XmzX7COjsp7I0rKKF/K7SYrnKOPs6qkB2yoYU=)
                          3: FvLalTudPdkr-T3cMtdfCQwhaIo.crl (hash: R5ZUVHUFtGYWOWUyQ1jHZ+WwJ8wmD8A5jG0vOwORFvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:b6:43:8e:10:7b:01:51:84:fc:d8:a8:c7:74:01:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f2da953b9d3dd92bf93ddc32d75f090c21688a
        Validity
            Not Before: Aug 13 06:01:39 2026 GMT
            Not After : Aug 14 06:01:39 2026 GMT
        Subject: CN=7ac00416c817086d2c7cbc1dca996596ac7a130e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0c:f3:e8:1c:15:f3:64:9e:c1:e7:13:2e:13:
                    8d:b7:6e:91:6a:70:f8:16:93:3e:bc:cb:6f:42:6b:
                    42:26:e2:5d:99:9b:39:81:59:6b:92:ba:5f:18:29:
                    12:d3:12:55:60:98:2b:fe:29:78:5b:ab:36:f7:97:
                    b6:05:1b:15:9c:b0:32:09:4c:38:c2:10:42:b1:82:
                    4a:9d:85:cd:a1:b1:69:f0:69:5a:41:37:f5:f7:11:
                    75:67:71:8a:ec:92:48:60:82:c1:1e:ab:83:de:4d:
                    af:ae:61:7a:e8:88:dd:e0:8e:37:99:19:3d:9c:39:
                    d4:02:c6:f7:1d:fc:59:dd:ba:34:59:ed:7f:b8:27:
                    24:ee:56:e0:2a:5c:19:11:f2:27:4c:24:96:19:31:
                    57:f5:64:ee:09:19:c6:72:7a:f9:22:a8:5f:bf:6b:
                    7b:c0:e2:a7:fb:dc:4d:4a:bf:f2:40:d7:50:52:34:
                    d9:4d:33:55:93:3e:21:00:6d:45:ea:c8:82:ea:69:
                    d0:6c:20:ba:df:9f:e2:1e:9b:fc:cd:75:78:e9:da:
                    62:c6:d4:2f:90:89:44:0f:7e:1c:aa:b9:43:29:85:
                    5c:00:b2:1c:d9:69:32:d2:90:69:97:bc:9c:d5:6c:
                    a7:e8:e9:fa:d1:68:b4:aa:f1:36:06:ec:9c:df:c0:
                    c2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C0:04:16:C8:17:08:6D:2C:7C:BC:1D:CA:99:65:96:AC:7A:13:0E
            X509v3 Authority Key Identifier:
                keyid:16:F2:DA:95:3B:9D:3D:D9:2B:F9:3D:DC:32:D7:5F:09:0C:21:68:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvLalTudPdkr-T3cMtdfCQwhaIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/694500-5bd5-484c-8f17-681ed6f4388e/1/FvLalTudPdkr-T3cMtdfCQwhaIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4f:7a:d9:90:06:75:98:ef:4d:d3:5c:e9:90:2c:52:3c:ca:
         83:63:f4:cb:6d:54:63:84:62:dc:8c:b5:7a:de:2c:81:c1:85:
         2e:6b:56:40:dc:ae:88:94:1c:bb:8a:32:5c:2d:39:d9:ac:c1:
         94:57:3e:40:9b:d6:b4:4e:4a:7a:87:bc:d9:14:a7:64:6f:6c:
         7e:87:bc:90:0b:d4:14:ab:7d:62:49:92:b1:cb:35:3e:cb:16:
         35:0c:d4:65:e3:89:c3:ff:91:56:7d:9c:80:4a:91:8b:91:e0:
         7b:28:fd:41:99:b3:dd:2f:0c:8b:59:9b:e3:56:fc:de:aa:95:
         83:85:fb:a6:4c:7f:5e:c9:ec:ac:ad:a6:08:01:85:c2:49:4a:
         7a:27:25:d6:8a:fc:72:8b:8d:63:ef:db:a6:8b:22:e2:b4:c7:
         47:42:cf:15:e1:f3:ea:48:49:5b:ff:66:16:78:2e:29:34:72:
         9c:db:b7:4e:0b:4e:5c:6e:b9:8d:f4:64:df:72:25:08:e7:ab:
         20:9f:db:e2:e8:c5:a9:0a:02:7c:76:1e:75:e8:bf:0a:23:45:
         d4:23:4c:3f:b6:f6:1f:aa:68:55:76:65:04:5a:cb:ca:cc:7d:
         73:db:76:fb:7d:bc:5b:27:7a:df:e9:69:a8:07:fe:33:19:c5:
         bc:e6:02:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:56:26 2026 by rpki-client