Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File:                     1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier:          Z/yLYI/MWeZgxMdx/KCjN3cmPuxLmd15Id9Aq+5Y3z4=
Subject key identifier:   A7:35:02:8D:FD:44:C1:31:78:C8:73:19:38:1B:DA:C9:7F:7A:6B:80
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer:       /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial:       019E1D224498A776AD435C542FCB4A50AAFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number:          0AB8
Signing time:             Tue 12 May 2026 17:00:45 +0000
Manifest this update:     Tue 12 May 2026 17:00:45 +0000
Manifest next update:     Wed 13 May 2026 17:00:45 +0000
Files and hashes:         1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: TweOXPk6LrYnskXUsXCy0M3Y1lPmmcWgkI/NOamR3tQ=)
                          2: BDsUG_qKwMK-zw5cb5re_OOs500.roa (hash: MK43bq66jUMUM5Ahm8KsScwtAMlZLSz7Ozov3YQzRIE=)
                          3: tB4j1pvJwB8N2xtUjgH-EaS2pKM.roa (hash: lQm30cKDdInn0Sofx9UuVyNM+EwoftWy+uBDomRAiDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:44:98:a7:76:ad:43:5c:54:2f:cb:4a:50:aa:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
        Validity
            Not Before: May 12 17:00:45 2026 GMT
            Not After : May 13 17:00:45 2026 GMT
        Subject: CN=a735028dfd44c13178c87319381bdac97f7a6b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a5:17:60:60:4f:6f:08:dc:0d:8a:78:97:4f:
                    30:e1:cc:0f:b0:6a:9a:fa:47:17:8c:50:60:4f:74:
                    f0:64:8a:6e:ab:2a:58:eb:07:11:49:c7:da:54:80:
                    8c:01:fc:29:36:da:d1:73:18:0c:8b:c1:43:3f:38:
                    74:53:0c:49:96:eb:ec:49:ba:43:42:ae:6f:97:78:
                    ca:fb:da:d4:52:27:f8:7e:ce:cf:7f:60:bc:b1:1d:
                    1e:81:07:4a:f1:dc:db:70:90:09:a2:32:70:23:37:
                    cb:e7:f3:72:da:85:cf:f5:eb:51:8d:aa:45:b9:42:
                    6f:ce:e5:a8:6b:94:e8:1d:92:b2:28:1d:2b:f0:dc:
                    65:3f:bb:66:30:99:f5:5f:1a:9e:2a:b4:2d:35:a2:
                    b4:fb:b5:3e:86:69:bc:b6:ea:a7:2f:c4:29:75:d8:
                    f2:9c:0a:11:04:68:4f:82:75:ce:c0:86:2e:ce:8e:
                    7e:41:a0:75:f3:2b:f5:24:a9:17:04:a0:18:37:4d:
                    0c:b8:c4:b7:1a:f7:36:fd:b6:d4:cd:1a:fc:0c:02:
                    da:0b:f3:3b:26:af:69:25:bf:ec:e7:84:c2:9a:ff:
                    9f:90:45:8c:61:7e:29:96:dd:c0:60:e3:85:33:49:
                    92:ec:4d:6d:ae:8a:5a:3c:26:7e:c9:16:92:05:d6:
                    0d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:35:02:8D:FD:44:C1:31:78:C8:73:19:38:1B:DA:C9:7F:7A:6B:80
            X509v3 Authority Key Identifier:
                keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d5:70:a0:de:9a:59:32:d6:c8:52:69:2b:b4:e2:a0:5c:6b:
         d8:9f:93:9b:c5:a7:70:4a:19:c3:cb:28:82:8b:7d:3a:73:45:
         d7:b2:49:f8:08:67:8f:05:67:8b:b8:fa:45:44:b3:a1:cf:8f:
         e8:ea:4f:86:19:6a:b1:82:9e:7b:32:55:7e:c4:77:3f:bd:d6:
         da:af:8f:20:18:61:95:19:f7:5c:05:22:37:07:8a:ef:f9:81:
         df:4e:8c:0e:83:63:45:81:a9:8b:e4:1c:02:bf:15:67:30:41:
         2f:73:6f:01:21:fd:84:f9:e5:a5:ff:ce:e1:50:64:c7:f8:5a:
         5e:06:de:5b:19:57:2e:32:6e:72:04:7d:88:bd:c3:d2:21:5e:
         45:f4:50:50:7a:d9:89:2e:69:50:1e:c7:76:be:bf:f9:d0:72:
         5b:3e:3f:e4:82:2b:a3:da:94:2e:4d:db:8e:21:b4:ce:07:87:
         0c:a2:7a:bf:47:fc:50:47:72:6d:c3:ef:70:02:71:5d:2a:27:
         17:73:cc:82:e4:d7:e0:31:d2:fe:eb:91:1c:70:a0:97:a6:2a:
         7a:e7:76:c7:d5:91:1f:68:87:4f:ce:03:9b:77:6a:22:3e:0d:
         1a:b1:9d:a8:82:bf:7c:17:bb:50:46:39:58:00:88:66:68:df:
         98:a6:aa:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:36:57 2026 by rpki-client