Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File:                     0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier:          bF6sIJcvrs5F47ZMp1iHcIk1X95S4x5o/5lq0k+eKY4=
Subject key identifier:   16:83:55:D6:DF:15:A3:D4:29:E1:55:7D:05:39:B9:97:A6:EE:AE:10
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer:       /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial:       019F9091297AB495CF48DF907D5B476E98E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number:          16FD
Signing time:             Thu 23 Jul 2026 20:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:59 +0000
Files and hashes:         1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: n7BPk6ML20N76+1o6RIT1g4DFCbmLM5fyQpiNNMHe8A=)
                          2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
                          3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
                          4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:29:7a:b4:95:cf:48:df:90:7d:5b:47:6e:98:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
        Validity
            Not Before: Jul 23 20:00:59 2026 GMT
            Not After : Jul 24 20:00:59 2026 GMT
        Subject: CN=168355d6df15a3d429e1557d0539b997a6eeae10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:17:60:3f:87:53:e1:d8:d0:f1:c7:35:17:c4:
                    f5:f4:6f:c9:04:a3:6c:99:c0:ca:d6:63:1a:6f:b1:
                    85:22:95:0a:b4:85:dd:d5:97:61:21:99:29:10:ed:
                    5f:88:58:65:53:c6:5d:bb:8f:c6:be:0b:a6:92:0e:
                    fa:6f:95:7b:75:50:96:9a:e7:fe:b5:68:86:88:4a:
                    da:a9:60:8b:e8:11:e5:4e:f8:0e:94:d7:0f:cf:14:
                    f3:cb:5f:7a:71:a3:cb:9d:8e:69:80:df:95:e4:3c:
                    8c:ed:bb:6d:dd:73:06:6b:dc:da:43:46:30:80:d4:
                    5e:7d:44:4a:3d:38:52:d5:37:f4:10:de:65:54:0d:
                    cc:a0:8b:68:82:0f:31:31:0e:4b:79:94:9e:a1:33:
                    b7:8b:3f:1b:95:eb:7d:bf:20:03:c9:40:e1:e7:32:
                    0e:6d:fc:bc:2e:18:2f:e2:d2:05:be:23:44:f4:c4:
                    85:9d:48:2b:cd:86:2b:8a:0c:01:1a:ac:d7:1c:64:
                    52:e3:0d:51:0a:30:1b:22:09:1f:52:4f:b2:fb:3f:
                    48:8f:be:2b:e9:e3:1b:a9:0b:5c:62:b7:73:c6:c3:
                    78:58:9d:25:07:d5:34:3f:a6:b3:c5:e6:c9:2e:a1:
                    7e:35:ac:61:78:dd:a2:e6:2e:78:45:89:ba:56:d6:
                    e7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:83:55:D6:DF:15:A3:D4:29:E1:55:7D:05:39:B9:97:A6:EE:AE:10
            X509v3 Authority Key Identifier:
                keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:8e:dd:ab:55:c0:52:dc:ae:ee:3e:45:a0:c2:1c:d1:ae:84:
         79:e6:75:ea:74:0e:93:64:9b:7a:df:3f:b7:77:87:28:63:06:
         94:1e:62:45:b5:f7:e4:ff:34:d6:04:bf:e3:f8:8c:aa:d3:c3:
         31:f2:9e:38:2f:3c:ae:79:64:45:06:e4:c6:a2:2d:69:05:68:
         ab:64:90:ab:a6:9b:5a:c0:22:10:55:fa:ff:82:35:49:36:24:
         8f:06:4f:ab:c5:53:eb:51:62:4a:2e:10:de:89:c3:70:a8:14:
         79:18:79:c2:7b:25:ec:fb:95:4e:39:8c:bf:6b:ab:08:28:ad:
         da:a5:07:f9:fb:25:be:da:a4:b3:49:52:7c:53:77:5a:c6:9b:
         28:13:48:89:33:a5:9c:5e:6f:8c:0d:12:81:8f:25:7d:51:23:
         90:35:b8:2b:53:af:3a:98:94:bd:d8:87:78:88:8d:f2:cc:35:
         d1:45:94:b3:62:8e:34:b2:18:d9:6f:9b:4e:a8:71:8a:5d:ed:
         7d:ea:2c:e2:4b:eb:3f:ae:bf:01:99:4d:fe:0e:b8:dc:6a:ca:
         cf:3d:f0:8d:64:4d:69:e7:bd:59:99:d1:34:30:a3:79:0f:c0:
         8f:cb:56:1a:72:50:f2:0c:3a:e6:e2:c6:04:9a:d3:c1:00:84:
         3f:16:52:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:21:12 2026 by rpki-client