Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
File:                     ftUAFk8HOBNbmuwE44_CTLkOD18.mft (raw, json)
Hash identifier:          R47ID+nXZjnoWhTkwLBThOrQBLF0oJeYDIMvvqt8t4w=
Subject key identifier:   CA:A2:00:79:72:D2:47:94:0D:E8:52:71:56:DC:7D:1A:71:28:9C:33
Authority key identifier: 7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F
Certificate issuer:       /CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
Certificate serial:       019EC224B1D62097E55122BE66EEAB42F9E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
Manifest number:          16AA
Signing time:             Sat 13 Jun 2026 18:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:45 +0000
Files and hashes:         1: 7q9RY1s7bkPLDFf-R4nEhz7s4U0.roa (hash: x5YDeNVEFuW8k3ZnPb/i30Kf2lB0qRZrnVGssw9mKpA=)
                          2: UQMWeuGBzStaoNEBdqaD6Sfu2QU.roa (hash: A3XBOP0i9HHKEaAgIMvo0xkJ9BA3b3wJo3xMjrp7ITM=)
                          3: ftUAFk8HOBNbmuwE44_CTLkOD18.crl (hash: S43EAw3bSYMJtsMdlbED3+v8lN9+EI5GSPZbbBKgDjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:b1:d6:20:97:e5:51:22:be:66:ee:ab:42:f9:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ed500164f0738135b9aec04e38fc24cb90e0f5f
        Validity
            Not Before: Jun 13 18:00:45 2026 GMT
            Not After : Jun 14 18:00:45 2026 GMT
        Subject: CN=caa2007972d247940de8527156dc7d1a71289c33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:25:cb:ad:77:86:85:46:8a:2f:e1:47:46:8a:
                    97:79:01:a2:2e:2d:43:ce:a7:9e:88:17:ef:2b:6a:
                    7a:f4:1d:c9:7b:78:9c:62:e8:7d:fd:a0:bd:8c:72:
                    07:64:34:79:3c:fb:ea:8c:0c:1c:87:41:ab:1d:6f:
                    4f:d1:26:4e:69:ab:1b:21:00:d1:48:f5:ff:d4:29:
                    32:36:f2:cc:a4:37:cd:60:c8:3f:d9:5e:0c:56:71:
                    06:0a:1d:8a:6a:87:4f:eb:af:a7:88:ea:b0:e9:17:
                    40:64:b0:2f:5d:73:21:93:b0:2d:1a:fc:a0:89:e1:
                    42:e2:71:ea:e0:b6:a8:22:57:a4:34:98:ee:71:b7:
                    d5:1f:37:42:e9:1d:85:c4:a5:cb:6e:ca:9c:20:80:
                    73:66:fe:e7:60:9f:21:5c:53:da:29:ab:cb:5f:65:
                    72:a2:f0:64:44:6f:a4:ff:c2:8d:be:c9:1b:10:04:
                    95:80:82:fb:0c:16:c2:12:48:86:ed:2b:b6:49:b3:
                    11:e2:10:10:ec:57:17:f2:f8:d6:74:f9:06:a9:04:
                    ca:dc:2d:9f:59:60:27:17:c0:0c:f8:35:3b:dd:ca:
                    b0:5f:aa:b2:a6:86:bf:c5:d6:98:f9:c7:1f:de:d7:
                    f3:db:8e:de:53:c2:3d:cb:69:a7:27:a2:a3:c0:68:
                    b9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A2:00:79:72:D2:47:94:0D:E8:52:71:56:DC:7D:1A:71:28:9C:33
            X509v3 Authority Key Identifier:
                keyid:7E:D5:00:16:4F:07:38:13:5B:9A:EC:04:E3:8F:C2:4C:B9:0E:0F:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftUAFk8HOBNbmuwE44_CTLkOD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9c5359-3452-42f3-880b-82d9a9eb430c/1/ftUAFk8HOBNbmuwE44_CTLkOD18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:77:e3:8c:a9:ea:b2:db:16:d6:93:e2:00:80:1a:b1:54:c6:
         46:67:40:d2:9f:46:01:60:b5:b9:66:ec:0a:a4:ee:93:90:a2:
         83:60:6a:9f:77:02:72:89:b2:a8:78:83:7f:c2:6b:18:57:74:
         ac:aa:45:e2:fb:2c:1e:cb:ad:f5:a4:d9:b6:72:e8:36:8f:3e:
         2c:24:0b:31:c3:fc:dc:30:ca:4f:ee:a3:5f:59:5b:3f:62:76:
         3a:27:d3:a2:45:74:fe:9b:8e:68:e1:ae:94:9f:cc:aa:9a:12:
         96:ca:75:d2:d8:38:c4:2a:bc:0a:fe:2a:d8:6f:a9:b1:42:7d:
         ee:10:ed:9b:5c:df:90:e3:e1:85:b1:61:40:6a:24:31:6c:87:
         06:da:07:18:44:27:3f:69:2a:ec:3f:99:aa:82:1a:11:cc:b7:
         35:9c:38:a9:7c:f5:80:3a:9f:eb:09:40:88:5b:95:b2:16:83:
         d1:3e:e5:49:30:f3:0d:5c:6e:d3:fc:6c:a0:39:cf:0e:61:cb:
         aa:4b:8d:fa:70:f7:ae:13:b1:61:26:48:3c:e1:6e:60:0a:ec:
         36:05:eb:a9:f1:ee:94:f4:11:74:de:4a:6f:23:e7:b7:26:10:
         2c:56:5c:15:c8:55:dc:b8:0d:cd:e5:40:44:5c:d8:4b:36:b5:
         91:67:2f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:03:09 2026 by rpki-client