Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
File:                     Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft (raw, json)
Hash identifier:          2UBEsIxNx+rMft75so6fUIeKvrTRvGHI2rzE8fGLAwI=
Subject key identifier:   9D:EC:EA:AC:22:5F:D5:1B:C6:B0:FB:6C:58:8D:08:2A:B0:AB:30:7F
Authority key identifier: 16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D
Certificate issuer:       /CN=16f91ff671f1de5143aa21a008e26e27946ab85d
Certificate serial:       019FA89A5F9CDA447E15C7180E5C0339764D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
Manifest number:          19D1
Signing time:             Tue 28 Jul 2026 12:01:56 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:56 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:56 +0000
Files and hashes:         1: Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl (hash: vYSwLXX509LsAnnVJup4hAms90pjnTietGCNAwFoDno=)
                          2: xpG2n7uOaA6uJtKoLlPX_didybY.roa (hash: yoBkvwTXsxWufbIraEfKOn7JbJXfeY9e9MM70Sw1B2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:5f:9c:da:44:7e:15:c7:18:0e:5c:03:39:76:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f91ff671f1de5143aa21a008e26e27946ab85d
        Validity
            Not Before: Jul 28 12:01:56 2026 GMT
            Not After : Jul 29 12:01:56 2026 GMT
        Subject: CN=9deceaac225fd51bc6b0fb6c588d082ab0ab307f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:90:66:7f:06:79:a3:90:04:0c:06:bc:e9:
                    e4:1c:5e:18:7b:08:1d:87:de:0b:6e:97:2d:df:8d:
                    84:3e:34:e4:34:a5:a8:43:82:f4:46:b2:ae:27:de:
                    db:d9:74:a1:c8:34:7e:2e:39:c9:1b:ab:30:c9:f1:
                    4c:cb:98:4a:80:67:d4:6a:8f:ed:6c:e4:a8:71:31:
                    11:9c:9e:10:ee:a6:9b:5b:ec:8f:1d:af:6d:52:13:
                    ae:7c:62:9b:84:36:b7:9b:04:ff:31:a3:40:e2:da:
                    07:92:83:d2:0a:28:77:38:f2:eb:1e:94:23:8e:ef:
                    55:8d:ca:85:bb:a4:e2:ac:ee:63:19:fd:23:3b:9e:
                    4d:69:74:8b:6e:e6:8f:d2:91:5a:bd:19:63:a9:9c:
                    d5:e7:80:64:4b:bd:ae:ae:0c:16:a6:74:2f:74:ce:
                    da:03:09:7a:3f:6b:6f:d9:45:6b:ee:1e:63:37:65:
                    53:11:b9:74:42:c4:f1:ab:54:a4:88:ea:af:79:a7:
                    9e:63:e1:5b:2a:27:e3:1f:ea:4d:d8:28:a6:12:f3:
                    37:1d:fe:47:7a:fd:ca:dd:90:8d:33:07:15:6d:cc:
                    64:b8:e1:76:36:c7:e0:60:29:5c:1e:f2:61:61:5a:
                    c7:9e:d6:0e:8d:ad:b2:35:c7:28:df:7e:a2:85:6c:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:EC:EA:AC:22:5F:D5:1B:C6:B0:FB:6C:58:8D:08:2A:B0:AB:30:7F
            X509v3 Authority Key Identifier:
                keyid:16:F9:1F:F6:71:F1:DE:51:43:AA:21:A0:08:E2:6E:27:94:6A:B8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/096951-d573-4cee-95f9-aa85a8c0aec1/1/Fvkf9nHx3lFDqiGgCOJuJ5RquF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:08:c5:ec:86:c2:ef:1c:c4:23:d4:eb:00:ab:36:ae:ed:
         db:88:3f:a4:67:f8:e4:c7:60:a7:a7:32:8d:92:c2:1f:c7:a9:
         c0:23:a9:2e:67:9d:d0:0c:14:cc:2d:b8:d7:f5:c2:3f:58:8b:
         0b:62:13:1c:fb:11:fe:1f:93:a8:db:3f:f2:30:e0:fc:3d:d8:
         c5:04:24:4a:e6:e2:1b:08:14:98:aa:ed:14:fd:c8:cd:89:67:
         db:21:97:d3:7a:7c:a9:48:5d:5b:3b:66:67:a8:cd:d6:a1:8d:
         37:53:ad:73:7a:3c:6d:a2:ac:97:b2:d2:40:2d:1f:7c:2c:9c:
         e4:ce:0b:b9:78:50:18:fe:ad:ad:7a:7e:19:2e:6e:f2:58:09:
         3c:46:ec:8c:b7:87:42:df:0a:cc:49:a8:83:33:19:a3:64:44:
         8e:03:27:94:b6:25:7f:a7:57:ab:00:09:33:d8:8f:5c:3b:96:
         27:83:be:07:d6:49:16:66:24:6c:62:97:13:6b:68:dd:ef:4a:
         c5:cb:85:90:6f:2a:5f:40:ad:9a:91:84:32:37:22:82:21:76:
         e2:c3:95:94:11:ae:8e:f6:26:e6:bf:6b:dc:b3:74:ec:ae:5b:
         e3:be:00:8f:7d:fe:f4:7c:0b:af:b3:39:0e:bc:46:6d:6d:ef:
         56:bc:06:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:09:42 2026 by rpki-client