Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
File:                     Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft (raw, json)
Hash identifier:          KkxKEe67sxmY6Fahj6SSKQf0DO68ue+mnoUyMhZUwnw=
Subject key identifier:   6A:DB:BF:09:5D:AE:02:3E:69:55:68:7F:A4:87:81:72:81:22:EB:B7
Authority key identifier: 16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D
Certificate issuer:       /CN=16f91ff671f1de5143aa21a008e26e27946ab85d
Certificate serial:       01A15D0D06C7583F199321EF09E5413F291E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
Manifest number:          1AB3
Signing time:             Wed 21 Oct 2026 06:01:36 +0000
Manifest this update:     Wed 21 Oct 2026 06:01:36 +0000
Manifest next update:     Thu 22 Oct 2026 06:01:36 +0000
Files and hashes:         1: Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl (hash: nTogukdakvRl26OI2Nc2L4wXaAkZiiU0BQzyHO9RTws=)
                          2: xpG2n7uOaA6uJtKoLlPX_didybY.roa (hash: yoBkvwTXsxWufbIraEfKOn7JbJXfeY9e9MM70Sw1B2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5d:0d:06:c7:58:3f:19:93:21:ef:09:e5:41:3f:29:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f91ff671f1de5143aa21a008e26e27946ab85d
        Validity
            Not Before: Oct 21 06:01:36 2026 GMT
            Not After : Oct 22 06:01:36 2026 GMT
        Subject: CN=6adbbf095dae023e6955687fa48781728122ebb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fa:5c:0f:d9:7c:73:c3:95:3e:00:60:bd:5e:
                    29:cc:86:a1:3d:f1:a6:9c:4f:b1:78:04:f1:4d:a0:
                    f4:8b:4e:96:8d:33:72:1e:c9:d3:89:6a:13:86:4b:
                    9c:92:c5:e6:34:35:83:99:1d:5c:df:e8:35:33:67:
                    e5:c4:73:2d:a7:e2:89:1e:05:d5:fe:b5:41:23:52:
                    b0:c8:0d:4c:b5:b5:d7:0b:59:be:41:5c:46:22:06:
                    60:42:69:ec:75:e1:d5:7d:1e:24:c9:de:5a:b4:da:
                    8c:7d:52:b2:ab:04:96:e3:6f:eb:65:00:6d:25:ad:
                    9a:44:81:4d:ab:72:78:fe:ef:2f:37:82:35:6c:21:
                    eb:92:e2:75:14:3a:3e:20:96:c5:c0:80:b4:04:ba:
                    07:13:16:07:c9:c9:69:50:ff:59:cd:77:e9:15:9c:
                    85:2e:b2:b9:a3:6a:72:37:88:90:d0:88:ad:23:0b:
                    f2:17:72:24:cd:9a:21:8a:10:97:5b:33:d8:cc:b3:
                    35:eb:5a:7a:8d:a7:02:07:69:c7:f0:43:fc:8f:99:
                    b3:29:f3:7c:71:d2:dd:64:6c:a4:e5:48:5f:81:b1:
                    80:43:4d:d2:2c:d1:ef:48:33:f5:09:e3:64:20:63:
                    aa:17:0e:77:de:f5:19:d0:00:e5:ff:54:c1:6f:db:
                    a2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DB:BF:09:5D:AE:02:3E:69:55:68:7F:A4:87:81:72:81:22:EB:B7
            X509v3 Authority Key Identifier:
                keyid:16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:88:2b:42:97:2a:bc:c1:30:ca:e3:06:4d:57:0b:45:4c:7e:
         3c:e0:3f:c2:f5:03:f8:f9:cf:22:e0:3f:ca:db:ae:50:72:8f:
         db:b3:6f:69:1c:4e:3c:2f:88:d7:bb:8f:c2:01:89:2f:45:3e:
         4f:a4:38:be:1c:be:b1:49:e9:93:e6:73:6e:65:be:cd:94:6a:
         43:08:23:7b:2a:85:b1:aa:6f:5a:c5:b6:97:54:c9:09:73:aa:
         89:22:bc:1f:c7:67:b0:6f:26:99:43:2a:b4:35:0e:89:ef:09:
         10:99:ae:23:d6:2e:b3:6f:da:d9:52:28:38:1f:54:f7:01:d2:
         81:e2:1b:62:a3:ce:b9:30:3e:96:56:1d:5c:5f:1a:7d:94:1c:
         1b:c0:9b:99:30:ee:5d:4f:86:36:58:9e:10:15:69:f3:95:89:
         32:17:a2:1c:7c:6f:c5:23:8b:fe:82:6f:40:5b:82:dd:df:12:
         f3:01:0a:9c:71:c6:c8:bd:b5:af:41:c6:ec:31:a0:54:4e:3d:
         fd:06:8f:e8:74:c9:4e:42:b2:f6:6d:ef:a4:05:91:1c:0f:5d:
         89:76:1c:f7:5b:f1:ca:a2:da:f4:c2:77:c1:09:dd:7e:fc:d3:
         3e:b8:0d:0a:bf:6d:21:0a:cb:a9:67:63:97:3d:50:70:36:a6:
         0c:02:16:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:14:13 2026 by rpki-client