Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File:                     FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier:          nbBiQfirMBUPyFuJp4efILzvp3Mro8uvoKEoFJxsVDY=
Subject key identifier:   D9:26:B5:1F:DA:77:7F:30:07:27:C3:2E:EB:02:02:58:DF:8E:B5:CF
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer:       /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial:       019FAABE47E5ED939203C86C4FA9B9883166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 22:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:24 +0000
Files and hashes:         1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: KAd/7JxkLTJ0gx+8LPrAn2ZxA8Ro3AChQCLpk68lP4c=)
                          2: X9c9GMVeYaYQqH2XyexJIcOVd5Q.roa (hash: LMkSmQgBQGug0NOzVugCkxvy72yFENtMgmfAEYQ2z28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:47:e5:ed:93:92:03:c8:6c:4f:a9:b9:88:31:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
        Validity
            Not Before: Jul 28 22:00:24 2026 GMT
            Not After : Jul 29 22:00:24 2026 GMT
        Subject: CN=d926b51fda777f300727c32eeb020258df8eb5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5f:30:25:af:e0:c1:52:84:c2:a6:98:04:8a:
                    e6:38:ac:34:ec:54:b2:76:4c:ee:cb:74:3a:2b:83:
                    d4:7a:b0:73:01:e0:bc:80:7c:15:7e:bc:32:3c:73:
                    30:76:da:4a:b6:59:0d:63:3a:f2:9d:e1:e3:96:46:
                    83:ae:7c:8a:19:cb:2b:62:44:0b:d1:7b:90:6a:82:
                    15:99:9b:47:74:bd:36:49:ef:a8:d6:9e:67:12:83:
                    5d:89:18:a5:e5:6b:7f:99:be:0f:25:1d:20:d3:15:
                    ae:02:1b:a8:f3:35:bb:b6:77:88:cd:0a:2c:e3:3a:
                    63:60:bf:bb:a8:c9:0a:e5:62:83:3f:83:e8:d6:1e:
                    64:f9:28:03:de:32:e9:09:77:e1:ad:18:40:15:2e:
                    ad:e4:d3:cb:da:66:55:40:20:94:2e:f6:8e:ad:9b:
                    6c:f8:c7:c3:17:52:4a:55:74:03:6b:74:a2:a5:13:
                    d8:17:ca:1f:78:18:05:6e:ad:22:72:20:3c:3e:29:
                    c8:22:78:f9:96:e1:8c:13:58:8c:f3:5b:20:dc:0c:
                    1f:24:ae:3f:54:f8:98:66:a7:c2:c5:e8:ec:7b:87:
                    2e:94:6a:e9:d9:11:f0:1e:83:c7:50:9c:18:aa:b0:
                    a8:d5:7e:20:0b:61:f1:a3:1e:51:ce:4e:ac:7e:26:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:26:B5:1F:DA:77:7F:30:07:27:C3:2E:EB:02:02:58:DF:8E:B5:CF
            X509v3 Authority Key Identifier:
                keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:8e:ca:d6:5a:22:f8:fb:ef:df:81:66:9f:44:21:00:ed:84:
         00:3b:e9:32:cf:b6:96:41:af:35:f0:7b:0d:9a:eb:77:81:05:
         ef:19:4b:02:fd:65:00:7d:4d:11:99:54:ad:81:7c:fb:67:aa:
         6f:02:85:bc:e4:e5:df:0e:a0:76:9b:5b:f1:a1:c5:ee:da:0b:
         04:7e:30:41:5f:be:78:02:69:58:17:08:66:f8:0a:42:ec:8a:
         5e:54:04:c9:be:04:79:9b:5c:de:6a:2d:00:38:6d:23:5e:f6:
         f1:74:94:d6:41:11:97:ee:7b:c8:5e:f7:9f:ad:ac:39:54:47:
         19:6a:06:6e:c7:7c:6a:d0:38:d1:c8:5b:77:44:ef:17:d8:49:
         7e:66:d4:9a:a4:10:84:c7:7f:78:a2:b9:40:d8:3f:af:ec:c3:
         80:13:30:12:2d:5d:08:58:2a:6f:a7:23:14:c6:10:3b:5a:3b:
         05:08:cb:91:7d:c6:ba:09:11:27:44:65:f1:9d:2d:38:e2:28:
         b0:77:a4:03:4c:8a:2a:dc:50:f7:1e:2d:f9:99:7c:95:4a:f6:
         9d:90:e3:5d:9e:30:e8:a5:5c:5b:f2:01:07:aa:ca:29:eb:b6:
         8e:72:72:a9:3f:cf:51:e3:4b:f3:57:76:d5:03:06:36:7b:8f:
         3a:e5:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:24:21 2026 by rpki-client