Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
File:                     FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json)
Hash identifier:          sUehJAc++F89es+8hX4piyjnQ4UbMC50ykev/1LpTp4=
Subject key identifier:   80:B5:52:5C:F7:3D:F3:E8:7B:85:43:A3:B0:91:7D:7E:83:D6:C6:BB
Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B
Certificate issuer:       /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
Certificate serial:       019D99627F958BB34BC83FD63B2735AA143D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
Manifest number:          05C6
Signing time:             Fri 17 Apr 2026 03:01:02 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:02 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:02 +0000
Files and hashes:         1: Dry5_ZM0-5UWueV3Xh-0UF6oy_8.roa (hash: loIcYvo+tpFSssRwcMc7jqSuMGlvbkxXG14SU3atHhw=)
                          2: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: eU6wWpX3l3p7HQZQjBhMWJeZGoJolRaQXNJ+O+tvVag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:7f:95:8b:b3:4b:c8:3f:d6:3b:27:35:aa:14:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b
        Validity
            Not Before: Apr 17 03:01:02 2026 GMT
            Not After : Apr 18 03:01:02 2026 GMT
        Subject: CN=80b5525cf73df3e87b8543a3b0917d7e83d6c6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:67:55:08:f2:cd:35:cc:24:e6:05:ce:9a:
                    e4:af:a7:57:0b:dd:5b:dc:a6:3c:6d:c5:36:a8:5b:
                    c3:10:09:8a:43:19:d3:22:9b:58:f7:0c:20:72:59:
                    f9:33:cf:1f:97:5a:82:13:a5:60:78:e9:d8:97:29:
                    b3:34:ce:02:da:f4:00:2e:ee:9c:56:8c:bd:b1:02:
                    d3:53:a4:a6:6b:c6:fb:2a:7c:f9:52:1c:ae:27:2b:
                    06:b9:a0:d5:e0:1e:01:82:45:9e:a1:22:d2:68:4a:
                    6b:e5:b1:7d:fc:9e:a7:5c:88:ec:38:71:bf:68:df:
                    57:c3:58:a6:5d:9b:d2:98:ed:6c:dc:42:c2:d8:62:
                    ad:42:4b:b5:cc:d5:52:7a:5a:9e:00:54:36:2b:10:
                    f3:f5:40:41:8e:42:8b:3a:60:02:07:4e:72:8b:49:
                    36:3a:dd:73:b0:49:4e:f7:bb:79:1e:55:4a:51:7b:
                    0f:26:9f:ad:8e:e0:ec:34:d1:ee:5f:3b:07:31:41:
                    66:06:ad:a5:f1:4f:6f:26:6c:fc:35:28:fd:df:07:
                    ef:9d:aa:f8:8a:08:b9:54:0a:9b:54:92:6e:29:ec:
                    3f:76:b4:54:02:62:21:07:fb:da:b8:4a:d9:ca:1f:
                    bf:51:d3:5b:b0:c7:14:37:7e:22:08:d4:a5:34:6b:
                    cb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:B5:52:5C:F7:3D:F3:E8:7B:85:43:A3:B0:91:7D:7E:83:D6:C6:BB
            X509v3 Authority Key Identifier:
                keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:26:86:18:99:2d:d0:cf:61:0c:a0:5c:b5:c7:ff:87:16:10:
         8c:51:ed:69:a1:c1:a2:af:84:9b:8a:48:5f:af:18:d9:76:14:
         bd:25:5d:5b:3f:f9:4f:27:5a:a0:99:b2:bb:36:dd:2b:70:9b:
         e1:59:c7:ff:1f:3c:8b:65:bd:64:c0:da:1c:ee:42:a2:b2:4d:
         fa:30:88:b0:12:0b:ba:1b:da:78:51:00:5a:61:e8:ec:53:cb:
         f6:b8:cc:c2:79:9e:87:57:8f:40:86:73:18:34:4d:4d:ae:10:
         61:d6:db:60:ac:91:75:62:7c:f5:f5:bd:7a:bd:d0:8f:6a:80:
         6e:8a:9c:b7:39:f2:c1:c2:00:02:7d:8f:42:c0:c8:27:08:61:
         4b:1d:10:d4:9c:7b:8a:92:fd:01:27:a5:89:f0:b8:03:f2:f3:
         14:e6:7a:3d:15:ce:f5:1a:0c:d4:31:cd:13:75:31:3f:c6:dc:
         e1:84:56:cc:24:71:63:7e:aa:7e:6d:00:ff:f5:fe:42:ae:5f:
         5d:e7:0b:d1:40:3e:4f:0a:50:b7:e8:c0:64:89:9b:21:cc:e7:
         86:28:6e:c5:e4:21:6e:e6:c7:3c:e8:a1:91:ab:15:04:33:4d:
         63:da:ef:17:2c:96:91:6e:23:c0:81:56:b1:b4:cb:c6:0e:d7:
         c8:62:53:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:34:50 2026 by rpki-client