Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
File:                     FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft (raw, json)
Hash identifier:          zJbu5rWMnLZ9xXBs18ESOa/ebeqZQ+KoI/WsGObkM/8=
Subject key identifier:   56:A4:7E:7E:A5:1C:8D:07:A1:A0:9C:F0:84:EA:58:A3:95:05:9D:84
Authority key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Certificate issuer:       /CN=16e49258dc76546dc595084d2593e181cd47983f
Certificate serial:       01A0F6E8B9C8D1EB545E127E16D7F0265EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
Manifest number:          1A81
Signing time:             Thu 01 Oct 2026 10:00:41 +0000
Manifest this update:     Thu 01 Oct 2026 10:00:41 +0000
Manifest next update:     Fri 02 Oct 2026 10:00:41 +0000
Files and hashes:         1: FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl (hash: lsAY9cwA7wR/y79CbUnebBDRA1+EVjm3FBW1lzd3WrY=)
                          2: X9c9GMVeYaYQqH2XyexJIcOVd5Q.roa (hash: LMkSmQgBQGug0NOzVugCkxvy72yFENtMgmfAEYQ2z28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 05:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f6:e8:b9:c8:d1:eb:54:5e:12:7e:16:d7:f0:26:5e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e49258dc76546dc595084d2593e181cd47983f
        Validity
            Not Before: Oct  1 10:00:41 2026 GMT
            Not After : Oct  2 10:00:41 2026 GMT
        Subject: CN=56a47e7ea51c8d07a1a09cf084ea58a395059d84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:59:16:bb:30:f6:82:7e:09:c2:df:bb:23:
                    d7:70:a7:09:f2:64:74:2e:8c:6b:1d:61:af:4b:82:
                    9f:f3:fe:0d:0f:a4:7e:5e:d6:95:3d:ee:2d:b6:06:
                    2b:d2:7b:1d:a9:8c:ce:d5:a3:b2:64:b8:14:89:8d:
                    14:09:a8:7c:e3:36:b7:ce:06:33:60:bd:a8:ef:75:
                    8a:e2:fd:39:2f:73:51:0a:70:d1:0e:15:1a:96:02:
                    ba:5c:5c:f2:47:82:e0:84:96:72:a0:c8:b9:69:65:
                    75:e8:6e:85:f7:15:35:ec:a4:78:34:8c:69:09:83:
                    91:d8:a9:d2:b5:28:06:f3:33:cf:19:1a:88:77:71:
                    44:ae:40:06:b9:f0:d2:d2:4a:66:c7:0b:a9:c0:cd:
                    a8:1b:a1:8f:13:8a:39:43:f5:44:04:27:63:de:5f:
                    48:13:90:0a:fc:6e:2b:a1:67:a6:3d:ad:81:dd:53:
                    4f:db:67:34:17:7d:e6:ca:1d:5a:1e:03:95:17:65:
                    fe:1c:9c:5d:38:b1:82:b3:0b:98:7c:f1:f1:f3:9c:
                    1f:b0:0e:0e:33:ec:5b:3a:6a:d3:17:bc:b3:2b:3c:
                    53:0a:67:18:e3:c6:1f:b7:3f:27:51:f6:9d:c6:9e:
                    af:7c:1b:3a:10:97:71:7b:2b:a9:ae:40:a7:46:a3:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A4:7E:7E:A5:1C:8D:07:A1:A0:9C:F0:84:EA:58:A3:95:05:9D:84
            X509v3 Authority Key Identifier:
                keyid:16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:30:00:78:64:a6:be:9c:14:87:05:cb:35:33:f9:f2:2d:91:
         6a:d5:31:72:65:59:1d:27:73:b2:2c:d0:1e:66:83:ab:e6:b9:
         62:5e:a7:75:3d:df:46:2a:12:4c:88:e7:59:5d:8c:08:68:8f:
         13:c5:71:f8:2c:c3:29:83:89:cd:aa:03:4f:7e:a3:41:df:77:
         50:6a:33:9f:f4:41:76:28:67:e2:ca:7f:fd:41:e0:55:76:d0:
         d6:8d:5a:89:62:3b:46:db:4a:46:e3:af:2e:01:02:00:51:ea:
         0e:d1:1d:c4:20:29:e0:b6:55:fd:30:ba:2d:d5:c2:12:1b:bf:
         48:27:a0:93:a1:65:76:81:05:9c:0c:e5:76:b4:2d:69:19:ee:
         7b:b4:2c:17:83:cd:f9:18:25:71:b4:5b:5b:9b:65:39:c0:78:
         c6:e3:bb:cc:b4:11:58:7d:49:9e:d9:de:5b:50:92:3f:b6:fb:
         17:e3:20:24:d4:f9:20:1c:08:e9:62:b9:78:73:02:d5:e3:87:
         e2:6f:e1:91:ae:bd:25:2b:92:3a:b9:9d:2c:b8:1b:4b:c4:04:
         93:c6:a9:37:30:52:29:26:d7:39:21:ae:8e:49:25:d7:b6:33:
         ac:37:dc:7f:4f:45:68:19:9a:c8:7b:96:36:31:af:f4:b8:02:
         a4:47:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:12:45 2026 by rpki-client