Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File:                     Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier:          K34QzKF6iYfXyC/+MMHdt2VAkyBVMrlJQy84kHhKZbw=
Subject key identifier:   B7:0E:C8:99:76:5B:61:08:E6:6A:49:2B:56:88:70:FC:46:F7:86:97
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer:       /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial:       019E1E6CA2F7CD3199D50285BFE94FC3AB25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number:          1653
Signing time:             Tue 12 May 2026 23:01:36 +0000
Manifest this update:     Tue 12 May 2026 23:01:36 +0000
Manifest next update:     Wed 13 May 2026 23:01:36 +0000
Files and hashes:         1: AE9Lfl-4UbNnNijYfCBA7Dotnk0.roa (hash: 4272KJRiaDFrIJ1v9/e6Ri/6Hq4jjOw6FRmI0faWzNk=)
                          2: AjYgA83fEMBqjUVh5HogDvcF4y8.roa (hash: HmdReTlwO7q9dM9EymrF4uah3KgbjfgTzrb6znj83rY=)
                          3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: 3IFjkLjcbQqbeuwHVus9dANJeIcbpv7knQYmTaGRQoE=)
                          4: Un6YiMPdPmnXJEAfLjnF4ejn4-U.roa (hash: Vvj30zXhMxPg9hIHuIBZfVJuw/gM4ZcLB86Kjx9twm4=)
                          5: UziBeF9vZhF9BgfMO9asPeRvxQs.roa (hash: b93bcZj29ys10OmZ+k4Z6n8bU3xxStbAH0qnq54JvrM=)
                          6: XRdK0Q38L08ZiH0X_7usVjWgOqU.roa (hash: NUYv2BvkNVVgRi3KArH9hMTA+2Ow1tmbVRQjMS4xPYw=)
                          7: kHpTZdJdGSTy5cL36tdDAiifHMM.roa (hash: t+ZN1J9Tad6u02+/g5NMqtaDNj7REzYTAjeN7U4LYyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:a2:f7:cd:31:99:d5:02:85:bf:e9:4f:c3:ab:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
        Validity
            Not Before: May 12 23:01:36 2026 GMT
            Not After : May 13 23:01:36 2026 GMT
        Subject: CN=b70ec899765b6108e66a492b568870fc46f78697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fc:bf:64:04:df:f1:c0:af:41:6a:2d:8c:ba:
                    72:dd:94:79:bc:6d:43:e8:72:34:0b:67:f6:ff:cf:
                    88:75:a8:4b:c2:40:31:11:8c:a9:de:7d:4c:92:7a:
                    05:98:b3:f1:75:01:ff:e5:3f:37:4e:0b:0b:67:09:
                    c5:06:44:cb:22:88:af:87:a0:04:d1:1f:6a:dd:64:
                    36:1e:e8:fa:82:9f:7e:13:f0:f5:f1:55:2f:56:58:
                    2d:f2:bd:c2:b5:03:f4:0b:e7:63:10:c6:35:28:14:
                    a6:85:d0:40:de:eb:4c:7e:da:72:af:0a:79:8e:c7:
                    f8:4d:5e:0a:1f:14:b0:17:82:75:39:d7:ac:cd:4a:
                    e7:87:09:14:5f:86:56:6b:9d:cf:0b:bd:c4:e3:ae:
                    5e:58:f2:53:4f:d2:5d:15:61:e0:8c:be:be:52:50:
                    67:26:96:a7:cd:c5:a4:8d:d7:8e:f0:c8:87:89:b2:
                    d9:5d:5a:ae:ec:0a:4f:2c:d3:72:bb:7f:b6:98:3c:
                    8f:0a:9a:e0:45:3b:80:17:e0:49:c6:d7:da:bd:81:
                    b8:35:1b:3d:fd:8a:39:e8:16:df:9b:d9:fc:3d:39:
                    d5:2f:08:4e:45:25:07:dd:d7:ea:d1:1f:b8:e0:84:
                    e3:30:07:61:f8:97:f4:7a:69:26:a4:06:c4:9c:18:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0E:C8:99:76:5B:61:08:E6:6A:49:2B:56:88:70:FC:46:F7:86:97
            X509v3 Authority Key Identifier:
                keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d2:9d:4b:72:80:25:f8:cc:fd:0a:3c:f1:65:79:cd:f9:12:
         25:9c:19:d7:e9:5c:00:b8:66:50:8e:46:66:24:b1:62:8c:54:
         b2:9e:78:49:51:91:f9:93:05:78:5e:a8:84:48:4b:90:66:d4:
         38:5b:59:00:82:aa:89:79:e3:e9:7a:6e:81:62:e5:35:63:3f:
         54:fa:7e:c2:b9:31:7e:38:e6:4f:52:88:c2:14:e1:f2:d4:60:
         72:ca:ec:0a:b9:5d:ef:c3:2b:73:d5:8e:49:7a:0c:f3:e0:ed:
         81:80:08:43:36:49:19:d0:1b:7f:da:63:cf:50:cb:d0:fc:9f:
         2e:b5:40:72:77:87:f6:9d:64:50:b6:9d:bd:4f:fc:ee:71:03:
         57:87:8d:e6:69:c5:f4:ae:16:05:e4:8f:eb:15:ce:ed:a0:4d:
         17:5b:b2:58:ae:a5:68:19:11:31:47:cf:50:c9:d0:e8:a0:74:
         7a:17:c2:1e:b9:25:17:dc:a2:f5:24:9f:5a:78:17:be:d7:dc:
         84:04:98:88:71:93:46:14:f2:79:fa:43:ac:bc:40:40:83:c8:
         b2:4e:39:5a:a3:85:2e:db:ac:d2:f9:5d:0c:32:63:03:6e:5a:
         d9:c2:d3:cd:40:6e:2f:97:1b:00:29:ac:7a:bb:30:99:7a:5f:
         8c:15:84:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:48 2026 by rpki-client