Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File:                     FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier:          L8XfMYEcLNzSqPdEiq5GLG1QBsWD0fdoBaQLRzBUi6A=
Subject key identifier:   F6:B5:37:8B:77:A3:A6:BF:F9:54:EE:FF:95:22:8C:45:D7:54:45:45
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer:       /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial:       019E1EA2DB8A86904137DD73606E795DFD2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number:          0A26
Signing time:             Wed 13 May 2026 00:00:49 +0000
Manifest this update:     Wed 13 May 2026 00:00:49 +0000
Manifest next update:     Thu 14 May 2026 00:00:49 +0000
Files and hashes:         1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: AR1ap1HZLeL1ZDOsuOL1n+AAwk4wL9hBGDuvbHnMP04=)
                          2: MBwPXOKM_iWsdzlsSXqDs7ZTH3I.roa (hash: 6X+PmBDPGX3JlUhHkCIG/oJUZITMm91IUs89tz0dREE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:db:8a:86:90:41:37:dd:73:60:6e:79:5d:fd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
        Validity
            Not Before: May 13 00:00:49 2026 GMT
            Not After : May 14 00:00:49 2026 GMT
        Subject: CN=f6b5378b77a3a6bff954eeff95228c45d7544545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:14:00:a9:bc:cf:9b:87:d2:01:d3:33:4c:7e:
                    b8:e0:8a:9e:b1:9a:18:e9:c7:78:b8:7a:c3:aa:b3:
                    3c:19:d4:bd:96:7e:f1:ee:4c:c6:79:c1:bd:7c:60:
                    c3:09:59:1a:02:6e:f0:d0:9b:57:86:ef:07:ce:66:
                    85:46:27:82:de:64:ce:73:0b:73:f9:c3:0c:ae:95:
                    e8:db:9f:fa:0e:93:ea:0c:5d:23:ce:7b:a1:75:5e:
                    60:41:d4:eb:9d:c6:a7:dd:78:33:10:67:3c:21:a8:
                    26:e8:78:5b:d2:5a:1b:df:82:7e:be:72:b5:b3:a8:
                    7b:63:f3:ea:5b:6b:67:d4:65:6a:e5:3e:0e:fa:b4:
                    71:0f:1f:3f:f2:dd:37:85:dc:f7:d4:14:97:d7:4b:
                    20:11:30:4d:e6:0b:5c:ec:8e:7c:df:c9:e5:29:63:
                    4b:40:05:91:a3:67:48:83:1e:5d:f7:f5:c5:d1:74:
                    28:7b:da:52:cd:cf:16:b2:49:4b:63:cd:9c:a3:82:
                    47:fd:2e:fb:1b:f9:0c:c0:68:4b:28:d4:0e:fd:f6:
                    d9:30:fa:8e:dc:23:bc:1c:51:d5:58:0a:17:f5:08:
                    e8:cc:cd:30:a1:c6:d0:54:57:49:68:ff:6e:c3:f7:
                    5a:4b:38:f8:b6:38:67:4b:c0:8b:4e:db:ea:e9:33:
                    fc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B5:37:8B:77:A3:A6:BF:F9:54:EE:FF:95:22:8C:45:D7:54:45:45
            X509v3 Authority Key Identifier:
                keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:fe:b1:1f:ca:db:8e:2e:b3:1f:37:37:1c:0a:a2:04:04:90:
         ce:a1:90:e9:ed:9f:99:f1:82:a0:bc:58:99:85:21:ea:d3:1a:
         7b:60:dd:15:c8:b9:ff:6a:27:37:56:09:30:4e:84:3f:cf:51:
         02:65:03:18:46:ff:5e:6f:c2:d7:c8:51:b7:30:d0:d9:dd:44:
         6c:c0:64:1e:4c:64:f4:f7:84:77:8d:39:50:c9:d7:dc:01:64:
         f4:3e:71:29:b4:ab:11:b0:88:79:0b:27:5f:49:90:3f:72:4a:
         51:26:cd:9c:58:bb:01:4b:c4:cb:98:4a:ce:73:d5:76:24:43:
         7c:7e:97:0a:a5:0b:78:27:b9:8e:64:f1:e2:c4:b9:7c:43:63:
         1a:37:77:32:d2:ed:1d:df:dd:14:40:7c:b9:f8:ec:50:87:15:
         a0:ec:f3:4d:a5:06:9b:02:bd:c8:ac:0f:2a:9d:21:e9:2c:e9:
         5f:5d:9b:58:c2:e8:33:11:3c:55:e0:47:2b:7e:62:f5:94:6e:
         bf:a0:90:86:5f:20:33:eb:fa:89:ea:6d:4d:f9:41:44:c7:c3:
         ce:7b:94:94:9c:0f:b3:22:ba:3e:6e:51:7b:9d:10:6b:6a:c6:
         58:2c:ad:b8:b1:1c:f5:23:9b:b5:85:85:22:d3:4e:1c:fa:2a:
         89:ed:d0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:26:45 2026 by rpki-client