Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File:                     FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier:          NAgK8Vqot4Avg1/rB7amfaWgHGMoU2SFFJgtZYhOe/I=
Subject key identifier:   26:3B:30:D6:FE:73:3D:4A:05:F3:6C:AD:67:5F:72:93:7F:50:95:0E
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer:       /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial:       019F94371D3BAB1FE599F89086AD57886343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number:          0897
Signing time:             Fri 24 Jul 2026 13:01:07 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:07 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:07 +0000
Files and hashes:         1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: ZWfMofX5IuUZI7/YCpfxdeH64ntDZEmEabXpAEEFnYA=)
                          2: mSf_6hw9LbwczEGLxS7bvwkiv9c.roa (hash: CPUV5PHm53/ZGx8XFmHD3voe3NEDlMd+rbTwW6kMNMo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:1d:3b:ab:1f:e5:99:f8:90:86:ad:57:88:63:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
        Validity
            Not Before: Jul 24 13:01:07 2026 GMT
            Not After : Jul 25 13:01:07 2026 GMT
        Subject: CN=263b30d6fe733d4a05f36cad675f72937f50950e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:44:51:02:cd:5f:1b:a0:cf:a1:eb:50:f4:
                    06:60:a4:78:b7:32:72:75:7d:a7:c4:27:37:5a:84:
                    2e:b8:4d:a7:87:6e:75:4b:0c:e6:9f:87:fa:5f:54:
                    83:c1:3f:51:5a:5b:ba:69:94:bc:99:03:e5:d0:97:
                    41:c2:50:81:7d:09:8a:2f:ef:32:56:9a:28:27:6a:
                    68:1b:9c:ae:d0:9a:6c:ac:c8:3a:b6:8f:49:4a:9c:
                    98:ed:59:3b:03:77:6c:79:b8:b1:d1:58:03:2a:a2:
                    35:39:b5:84:4c:47:15:24:da:6a:c5:56:86:81:ca:
                    e5:12:3f:5f:62:a8:20:41:bf:4f:a8:cf:77:3e:6a:
                    ba:6d:d6:33:25:37:60:f6:98:bf:37:2a:1e:d6:c3:
                    48:83:6f:39:da:a3:89:3e:08:8c:ea:60:50:1b:1a:
                    ef:df:a5:b8:cc:e3:87:08:0f:c1:f4:68:0b:a6:74:
                    a4:46:24:d2:c8:87:06:02:41:05:88:04:dc:30:0a:
                    ba:f7:e9:6e:5b:7d:8b:7b:a0:db:9d:15:d3:94:61:
                    70:8c:9c:c0:d4:a7:00:70:36:83:f2:b8:bd:3c:66:
                    b0:20:d7:e3:c6:9c:52:36:00:2c:00:7c:9e:73:80:
                    2d:ea:fa:b6:c0:70:c8:23:6c:95:6c:69:f9:4d:75:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3B:30:D6:FE:73:3D:4A:05:F3:6C:AD:67:5F:72:93:7F:50:95:0E
            X509v3 Authority Key Identifier:
                keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5c:90:2a:7c:df:f3:17:c3:ff:ff:81:22:e2:46:a9:72:be:
         c9:4e:cd:3a:55:3d:6d:ae:2c:e4:09:e6:13:cc:86:83:2f:c4:
         f1:5c:84:0a:f4:9b:39:5a:96:bd:5d:68:0b:e3:3c:00:22:4c:
         b9:e4:1b:25:65:99:08:08:52:4d:49:c2:78:18:d2:f0:f5:b8:
         f3:90:56:6f:4f:98:ee:5d:62:83:b8:14:a1:0d:7b:9e:e8:94:
         70:29:84:26:2d:c1:3e:7b:e3:3a:10:bf:ef:20:c1:a8:0b:3a:
         b2:5e:b6:60:9a:0f:a2:36:37:93:3c:9d:09:10:a2:bb:13:d5:
         11:fd:a8:a9:72:dc:58:fc:af:b6:65:8c:22:91:11:98:86:b3:
         73:85:6a:42:a8:76:2f:3b:20:b6:28:9c:04:4d:31:6e:e8:86:
         50:00:37:ef:ad:38:c7:d5:03:93:eb:7d:7f:47:3a:48:33:43:
         64:77:11:d9:ce:c9:c2:4d:c5:6a:ab:3f:66:da:3c:a7:9f:ef:
         4e:23:1d:8a:e1:da:48:15:00:96:ff:9f:c2:6e:9b:49:06:9c:
         66:a8:54:8c:79:d2:c1:e2:90:09:31:c7:a6:59:b4:0d:1a:ae:
         06:08:d1:86:81:70:67:13:26:f3:21:48:fd:aa:b4:d2:c4:8c:
         69:fe:a9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:10 2026 by rpki-client