Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
File:                     fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft (raw, json)
Hash identifier:          ikEiYnP10Xcm7g0JMbSwdiPm1j+hbXnCE5UKUmfDatQ=
Subject key identifier:   88:38:40:33:4F:6A:6D:A2:B9:74:92:D9:A5:7D:FB:6B:FE:90:33:1A
Authority key identifier: 7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50
Certificate issuer:       /CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
Certificate serial:       019FAC765AB843FFFD331824CE012220A54A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
Manifest number:          16A7
Signing time:             Wed 29 Jul 2026 06:01:05 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:05 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:05 +0000
Files and hashes:         1: fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl (hash: Ny3ze1XAxumXQtKwmngIOiyPXZWqvovTNz7L1LV0W+s=)
                          2: pnSX4g2lmq0K8FTBTKkZmOyOugg.roa (hash: V6XhkHNDk99HDBU8c9gDLWqCQBMIvpkfeeSqTLRceRo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:5a:b8:43:ff:fd:33:18:24:ce:01:22:20:a5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee3208e818dd74c0d6b43d927ea0d1893bed650
        Validity
            Not Before: Jul 29 06:01:05 2026 GMT
            Not After : Jul 30 06:01:05 2026 GMT
        Subject: CN=883840334f6a6da2b97492d9a57dfb6bfe90331a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:7e:f0:fa:85:b0:fd:a3:4d:cf:ee:e1:91:
                    12:aa:ff:a8:52:1d:bc:ff:15:af:74:06:55:f6:d4:
                    2f:79:a5:2f:61:74:58:72:d4:e4:00:30:d9:cd:3d:
                    1d:16:5e:7e:a2:45:2b:4b:3c:39:09:de:55:62:b9:
                    43:88:1b:5a:2c:f0:dc:aa:c9:c9:96:b7:12:e4:51:
                    f3:52:d4:8b:8e:39:d4:f0:07:2f:e6:83:bf:14:66:
                    f9:cf:9e:b0:2a:d8:38:52:75:f1:3c:52:a7:83:f3:
                    4b:02:3b:83:44:3e:2f:c5:f6:5d:f4:26:7d:fc:b7:
                    ec:77:80:a2:55:71:06:48:89:f9:44:65:92:fb:a0:
                    17:97:94:2d:45:83:4a:01:af:5b:be:ba:3b:c6:c9:
                    9b:47:01:d9:95:99:39:fb:da:a6:82:44:93:2f:c3:
                    4c:2a:69:9c:db:a2:13:a0:20:9c:1d:da:47:1b:a3:
                    6e:c3:cc:4e:c5:51:89:f8:a6:10:72:bb:db:fe:01:
                    d5:c0:9f:d0:03:42:26:ab:8d:55:ca:08:92:50:5e:
                    3a:3d:2e:99:06:d8:69:9f:e9:2b:66:c7:46:8b:e3:
                    08:e0:67:93:75:c3:ca:4f:25:ab:a6:fc:ae:72:00:
                    c6:9f:99:e2:e3:e5:0b:7d:aa:53:63:69:99:92:7d:
                    12:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:38:40:33:4F:6A:6D:A2:B9:74:92:D9:A5:7D:FB:6B:FE:90:33:1A
            X509v3 Authority Key Identifier:
                keyid:7E:E3:20:8E:81:8D:D7:4C:0D:6B:43:D9:27:EA:0D:18:93:BE:D6:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuMgjoGN10wNa0PZJ-oNGJO-1lA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/a4a87a-4f7d-40bd-b1f5-ff4a99783ab4/1/fuMgjoGN10wNa0PZJ-oNGJO-1lA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ee:c6:83:9a:1e:0f:35:ca:3d:ae:b8:77:b4:92:c1:55:09:
         d3:b4:28:35:5e:da:91:73:2e:37:6e:2c:f0:99:7d:88:b3:90:
         f3:e1:6a:ad:1f:f1:9e:3e:4c:e8:88:91:60:9d:ae:bc:0a:51:
         f8:bf:9d:70:a9:df:20:a3:78:75:04:62:9a:1e:5d:da:4e:07:
         c0:4e:78:f8:fe:5d:95:ad:e1:e7:2a:d3:9f:bf:f5:79:39:2f:
         c8:d8:42:be:b2:9b:07:ae:92:41:19:6a:c9:98:d2:93:2e:f4:
         3a:31:f2:17:1f:80:72:29:cb:30:8e:21:63:6c:80:7c:89:39:
         88:66:9f:92:04:c2:98:b4:16:63:db:e2:6a:82:6c:29:72:52:
         23:43:97:eb:32:5b:02:8b:29:0a:e9:4b:83:c0:d5:3e:c1:8c:
         6b:81:c6:ee:d8:87:19:5a:2b:1a:07:92:90:c1:c1:52:c6:7d:
         2b:10:99:64:27:e2:90:5d:1b:7a:92:60:fc:d7:d8:66:80:43:
         d8:26:93:a3:d7:88:97:c2:86:cc:04:0d:82:95:9a:72:3f:96:
         ab:7d:46:bd:e4:b3:1b:42:47:52:d8:7a:be:51:62:eb:67:11:
         0f:47:28:06:14:81:3c:65:36:80:99:cd:38:b4:79:86:de:f3:
         4f:58:21:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:13:42 2026 by rpki-client