Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
File:                     Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft (raw, json)
Hash identifier:          dQw2i8reV01ytRbHVXtWULk5rCq0FiFOLvybFdOIv58=
Subject key identifier:   54:70:11:D7:E5:D0:ED:51:37:CA:70:95:9C:E9:EC:F1:3C:96:CD:5B
Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24
Certificate issuer:       /CN=16f9f928b0ac67731991f374b8e194eb6542ac24
Certificate serial:       019DA3E69A5E315F314858222847585D9496
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
Manifest number:          16AD
Signing time:             Sun 19 Apr 2026 04:01:32 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:32 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:32 +0000
Files and hashes:         1: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl (hash: qm9UCcirpaiyksLkFRR47TfM8dcqyR+wa9IWVk+2EvY=)
                          2: b1Y-3WgMyGS1G7jrmGG-e81lNDA.roa (hash: GBEZ8Y0pqF1M+xMOeRWL/nxMJhb8iYsyNvr/SwhBu1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:9a:5e:31:5f:31:48:58:22:28:47:58:5d:94:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24
        Validity
            Not Before: Apr 19 04:01:32 2026 GMT
            Not After : Apr 20 04:01:32 2026 GMT
        Subject: CN=547011d7e5d0ed5137ca70959ce9ecf13c96cd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:8c:d3:e5:ab:d4:12:4b:01:5d:08:f4:6e:
                    9d:21:8f:a2:e4:8b:5d:d6:4b:69:cb:22:11:0d:1e:
                    df:9a:15:57:85:38:6a:39:6a:b9:67:a9:dd:45:79:
                    22:de:0b:c4:f4:7b:9d:05:cb:7d:37:e7:d1:9d:06:
                    96:53:4a:e9:ba:a2:9c:2c:4a:3b:6e:94:1c:a6:b2:
                    e9:88:31:0a:0e:f7:e6:f0:45:97:80:2c:a0:5b:ac:
                    e2:84:95:5b:11:29:09:ec:bc:81:8d:37:b3:f2:ea:
                    51:46:02:c8:5d:41:09:58:21:c6:36:a8:52:52:e5:
                    76:86:06:94:02:a8:1d:b5:d0:4a:44:2d:78:06:42:
                    18:e7:b4:75:f6:73:d2:80:53:4a:ba:87:75:b9:43:
                    da:22:fc:c4:61:bf:3c:79:d7:5f:91:bf:26:e5:e2:
                    64:c0:24:e9:92:a4:10:e0:51:15:c8:15:9e:8a:54:
                    ee:a8:cf:33:f0:c3:90:18:2f:5e:2a:33:14:7b:ee:
                    72:69:a1:6b:a8:55:57:ad:f8:ec:3c:9f:16:e9:8c:
                    75:45:54:39:c7:45:f0:6a:e0:ca:6f:bc:9c:92:c8:
                    30:5d:02:40:68:7e:31:ff:c7:f8:af:96:7c:d0:c4:
                    57:eb:f6:3a:79:cd:c6:17:e6:15:fe:bb:d2:5f:ea:
                    96:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:70:11:D7:E5:D0:ED:51:37:CA:70:95:9C:E9:EC:F1:3C:96:CD:5B
            X509v3 Authority Key Identifier:
                keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:01:38:82:6a:ae:e6:fb:79:a8:b5:69:04:f1:6d:e3:a9:60:
         b5:34:dd:39:e9:b7:b9:62:ad:fb:17:43:83:b9:4a:b6:6e:21:
         31:92:ae:fb:4a:ef:87:6b:26:15:ee:e1:f4:d8:69:c6:09:7d:
         92:68:ce:68:0d:14:de:54:82:6d:1f:83:f2:77:88:4b:dd:a4:
         ff:e6:dd:41:23:09:b1:71:07:a2:74:4f:c8:61:b4:d6:a3:be:
         78:95:f7:d1:ac:e8:b8:91:f7:43:05:c1:be:70:75:4e:52:94:
         6b:9f:bc:cc:ce:6c:e0:51:d6:b1:99:7d:3a:39:94:80:b6:68:
         c4:af:7a:b5:3b:89:b5:fe:3e:00:52:e2:c6:79:38:a5:c6:ed:
         18:93:3f:ad:20:2b:f3:ea:73:4a:4f:43:28:32:0a:84:b5:c8:
         d4:c0:d7:fa:61:37:85:62:9a:38:16:63:20:82:48:3b:b7:2e:
         11:be:b3:bd:fe:2e:17:9b:e0:a6:12:77:82:03:e6:58:30:f8:
         db:8c:5c:b5:2c:e5:8c:90:82:89:5f:c7:67:61:86:ea:89:dc:
         d4:a4:b4:cc:31:b7:af:f8:fc:ab:b8:48:92:40:d2:cf:a9:07:
         6e:53:05:4b:51:06:3c:b2:a8:5d:32:32:83:c1:8e:ed:3b:c2:
         cc:d6:e3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:49:04 2026 by rpki-client