Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
File:                     FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json)
Hash identifier:          yL48mFoaQxb8e/9oE10lIVvVal7AY4TMRz4uVQlFH+Q=
Subject key identifier:   A9:3C:BA:A5:91:31:1E:DB:29:6C:17:66:A0:A9:CA:C4:3D:92:CD:8D
Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33
Certificate issuer:       /CN=16044f658bbc92270785f7bb072ac936895f4933
Certificate serial:       019E1EA2CCDBA6C806CAD7FB845A1F1D8E0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
Manifest number:          019B
Signing time:             Wed 13 May 2026 00:00:46 +0000
Manifest this update:     Wed 13 May 2026 00:00:46 +0000
Manifest next update:     Thu 14 May 2026 00:00:46 +0000
Files and hashes:         1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: ah7TJeBjGtUalPN4IVb/M10oLPDIB1OquOjvnOn0Geo=)
                          2: WatKg_0MoVqhZNrvrktjemd-kkU.roa (hash: HB6mZ1x55io1eH3g2s4HymshoqNX8HC4t8plzzNViRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:cc:db:a6:c8:06:ca:d7:fb:84:5a:1f:1d:8e:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933
        Validity
            Not Before: May 13 00:00:46 2026 GMT
            Not After : May 14 00:00:46 2026 GMT
        Subject: CN=a93cbaa591311edb296c1766a0a9cac43d92cd8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cd:fd:ed:ce:e2:ad:f5:5c:c3:17:26:d3:53:
                    b0:d1:e1:ff:6d:79:b5:3a:6d:a5:86:0b:5e:1f:57:
                    ae:9a:d1:b9:73:0d:a3:a3:8a:fe:86:8a:81:ac:b7:
                    01:36:d2:cb:5f:07:4d:c7:58:4e:3d:25:17:8f:4f:
                    6d:8a:6a:0a:36:96:de:68:fb:cc:b2:5d:4b:82:87:
                    1c:30:4f:be:cb:f2:a1:1f:3a:6b:98:ee:6b:2e:3e:
                    4b:44:3f:3a:51:b5:7a:28:d5:d3:0f:a2:3e:b5:cf:
                    8d:20:0b:aa:31:e3:8d:31:02:2f:b8:af:49:d2:4e:
                    f2:b6:d5:89:d0:60:f5:0d:32:73:bb:23:6a:1f:3b:
                    f0:1c:40:bb:03:12:d9:fa:1f:44:ef:e0:61:32:1e:
                    a2:3f:23:33:ee:5e:76:27:02:02:ce:48:14:9a:fb:
                    3f:07:cb:b1:fe:c7:4c:0a:13:57:5b:40:11:f6:4f:
                    ee:04:30:c8:71:db:44:93:b9:ff:ee:35:3f:f3:c1:
                    49:7e:96:2b:13:aa:cd:15:7f:82:ae:76:5a:74:42:
                    1e:f8:98:bf:f1:21:77:09:b2:bb:30:6d:8b:28:f4:
                    67:67:cd:c3:3c:3c:d3:5e:23:98:af:06:b8:c0:9d:
                    ed:77:f6:c2:82:2d:06:d4:18:bd:ed:d2:10:9d:dd:
                    8d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3C:BA:A5:91:31:1E:DB:29:6C:17:66:A0:A9:CA:C4:3D:92:CD:8D
            X509v3 Authority Key Identifier:
                keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:3f:35:88:b3:cd:22:f7:a3:eb:39:2d:ee:b7:c1:b0:cc:f2:
         d4:c0:9d:ae:c5:a2:f2:c5:95:05:1c:ea:aa:9a:76:50:68:66:
         92:ab:40:3c:e5:18:f9:f6:c1:ca:32:a0:e8:21:f5:8c:3c:cf:
         88:5e:d9:28:b0:3d:d8:a6:35:0a:11:cc:5c:ea:17:2a:02:79:
         e3:0c:f0:3f:35:a2:f6:6b:6b:70:cc:0c:16:86:72:01:68:41:
         7a:7e:d0:22:f8:7f:f9:79:1e:4f:5f:58:86:5f:e3:2e:a2:50:
         89:b0:6c:02:4e:c7:d3:43:1b:fc:3c:a0:e0:d8:d8:da:04:cd:
         e0:e6:9d:ae:78:9f:36:9e:64:63:6f:41:9c:18:68:61:21:03:
         e1:de:1e:37:70:1c:8a:e0:f6:bc:ff:51:f1:8a:04:01:e5:5f:
         aa:1f:31:ff:f1:d0:76:ae:0a:7c:8b:ec:93:0e:02:51:2f:d6:
         65:a3:28:a4:d4:b7:1e:1e:0e:8b:e0:2d:73:ec:5c:fa:39:e1:
         e0:49:76:62:04:4e:d3:16:72:82:8e:5d:8b:66:a8:9b:c4:f8:
         c3:85:9c:d8:f2:ed:d5:86:50:7e:40:6a:e3:aa:a9:10:fa:09:
         e7:46:82:fc:12:70:22:02:46:32:80:c4:ce:90:2f:18:ef:52:
         f2:6f:48:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:29 2026 by rpki-client