Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File:                     FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier:          Xw4kRjxJ1QpKBnbpLsRHIwn5IcpP3TpmE69oqoQdGtA=
Subject key identifier:   A8:3B:4B:D3:C4:F1:F0:64:09:10:ED:76:63:D3:48:58:A2:B9:71:29
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer:       /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial:       01A105134F13BD3E5297A2EC76CF0465D407
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number:          0956
Signing time:             Sun 04 Oct 2026 04:01:53 +0000
Manifest this update:     Sun 04 Oct 2026 04:01:53 +0000
Manifest next update:     Mon 05 Oct 2026 04:01:53 +0000
Files and hashes:         1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: talCVCj4PTeVZPt6M2ohm2SpNFqbFFB+Q0i/KGk9pGk=)
                          2: mSf_6hw9LbwczEGLxS7bvwkiv9c.roa (hash: CPUV5PHm53/ZGx8XFmHD3voe3NEDlMd+rbTwW6kMNMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 04:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:13:4f:13:bd:3e:52:97:a2:ec:76:cf:04:65:d4:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
        Validity
            Not Before: Oct  4 04:01:53 2026 GMT
            Not After : Oct  5 04:01:53 2026 GMT
        Subject: CN=a83b4bd3c4f1f0640910ed7663d34858a2b97129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:18:5b:e0:ec:30:e4:23:0f:cf:3d:dc:2d:a5:
                    48:36:25:46:b2:20:fc:35:b2:4e:db:de:21:85:7b:
                    5c:d7:e1:3c:ab:f0:36:ed:b1:ec:44:c5:06:f7:0c:
                    73:8b:94:f4:e3:1b:33:28:2e:a2:0a:b9:9c:1f:7f:
                    d3:da:e6:73:61:78:36:49:a3:72:3d:bb:2b:95:45:
                    db:93:c6:17:2d:3b:d9:06:c7:c0:c7:5e:44:60:2a:
                    65:63:fb:fc:d8:11:25:0f:b3:ef:36:6d:53:ae:e4:
                    36:9c:8e:b6:e8:5e:ee:76:c2:1e:9f:8b:38:99:97:
                    8e:c7:ab:7f:00:43:11:a9:c2:88:97:c8:b4:c5:d2:
                    74:11:13:08:fd:f3:9a:7f:b5:fe:80:38:af:bd:81:
                    f0:9c:45:00:36:ce:99:ea:ed:9a:c4:1a:58:fe:a0:
                    c5:97:80:ac:27:18:0b:0f:e1:4b:0b:c9:3c:8c:ec:
                    4a:ac:a9:4d:fd:fe:d5:a8:bd:ed:9b:80:0c:75:e2:
                    b6:a5:e5:f7:56:54:65:7f:08:67:c7:e0:4b:ee:cd:
                    12:4d:a4:71:41:33:09:2f:b5:4e:33:60:a0:81:58:
                    08:d4:1d:93:85:0c:cc:88:6e:3b:07:80:f8:25:2b:
                    d6:75:6f:b9:38:d6:1a:2a:9e:2f:ae:d0:78:b5:76:
                    2c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:3B:4B:D3:C4:F1:F0:64:09:10:ED:76:63:D3:48:58:A2:B9:71:29
            X509v3 Authority Key Identifier:
                keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:23:20:b6:94:dc:6e:de:85:ad:db:e6:aa:a2:cf:dd:7d:2a:
         e7:fc:c7:96:c2:14:ba:07:bd:38:58:6a:c1:2a:8f:56:7a:ff:
         d7:79:03:e3:73:c8:c0:4a:3d:1e:d0:27:2b:97:eb:42:90:d3:
         61:c2:1f:8e:b1:b5:f4:9e:d7:03:63:56:42:cd:63:96:e5:69:
         b8:bb:b6:26:5e:a9:15:ce:0d:ae:d7:da:b0:4a:bc:e9:9f:57:
         fc:de:ee:2e:1e:bb:91:d1:72:74:b9:67:13:08:e8:3e:a7:62:
         f6:34:f4:f8:3b:d8:7a:19:b9:d2:db:ca:1f:28:cc:77:44:ff:
         cb:01:9f:ef:9a:9b:04:e1:8b:1a:29:26:32:f6:33:04:a2:c3:
         04:6f:95:85:62:ac:81:40:07:99:36:be:ee:90:10:4a:7b:79:
         96:b7:25:3a:9e:08:0c:ff:5b:b1:08:59:01:9a:18:4f:7d:1b:
         c7:90:c6:b1:83:f7:56:86:20:c8:5c:91:3c:69:94:96:ab:10:
         fb:72:39:61:d7:ff:ba:df:03:ef:49:f0:2b:9c:5d:f6:08:55:
         28:19:6e:af:2e:ab:01:5d:36:61:a5:d9:66:9f:53:2c:4f:0d:
         ed:5b:75:1e:dc:e9:f5:f8:e3:78:9c:61:27:62:1e:39:42:66:
         9d:fb:78:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEFE08TvT5Sl6Lsds8EZdQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTI4YTBlMjQxZmZmN2FhMmU2NGFhMzg4MTU2ZjIyM2Uy
ZDIxNWYwHhcNMjYxMDA0MDQwMTUzWhcNMjYxMDA1MDQwMTUzWjAzMTEwLwYDVQQD
EyhhODNiNGJkM2M0ZjFmMDY0MDkxMGVkNzY2M2QzNDg1OGEyYjk3MTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Rhb4Oww5CMPzz3cLaVINiVGsiD8
NbJO294hhXtc1+E8q/A27bHsRMUG9wxzi5T04xszKC6iCrmcH3/T2uZzYXg2SaNy
PbsrlUXbk8YXLTvZBsfAx15EYCplY/v82BElD7PvNm1TruQ2nI626F7udsIen4s4
mZeOx6t/AEMRqcKIl8i0xdJ0ERMI/fOaf7X+gDivvYHwnEUANs6Z6u2axBpY/qDF
l4CsJxgLD+FLC8k8jOxKrKlN/f7VqL3tm4AMdeK2peX3VlRlfwhnx+BL7s0STaRx
QTMJL7VOM2CggVgI1B2ThQzMiG47B4D4JSvWdW+5ONYaKp4vrtB4tXYs9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKg7S9PE8fBkCRDtdmPTSFiiuXEpMB8GA1UdIwQY
MBaAFBaiig4kH/96ouZKo4gVbyI+LSFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2Et
ZmIyYTk4M2NjNjZhLzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2EtZmIyYTk4M2NjNjZh
LzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASyMgtpTc
bt6FrdvmqqLP3X0q5/zHlsIUuge9OFhqwSqPVnr/13kD43PIwEo9HtAnK5frQpDT
YcIfjrG19J7XA2NWQs1jluVpuLu2Jl6pFc4NrtfasEq86Z9X/N7uLh67kdFydLln
EwjoPqdi9jT0+DvYehm50tvKHyjMd0T/ywGf75qbBOGLGikmMvYzBKLDBG+VhWKs
gUAHmTa+7pAQSnt5lrclOp4IDP9bsQhZAZoYT30bx5DGsYP3VoYgyFyRPGmUlqsQ
+3I5Ydf/ut8D70nwK5xd9ghVKBlury6rAV02YaXZZp9TLE8N7Vt1Htzp9fjjeJxh
J2IeOUJmnft4+Q==
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:37:27 2026 by rpki-client