Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
File:                     1-v3j2ZJau-IPw8bZGEx99nBH-54.mft (raw, json)
Hash identifier:          gAFi7R+fN/MheLeHrYFQANZG0K/+6GixekdzWBkbUB4=
Subject key identifier:   B5:EC:01:DA:D0:76:1F:74:6B:1E:23:35:EE:59:F4:1F:97:E0:1A:D6
Authority key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
Certificate issuer:       /CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Certificate serial:       019E1EDA1A4585E9A107FC0259D480AE7B39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
Manifest number:          0259
Signing time:             Wed 13 May 2026 01:01:10 +0000
Manifest this update:     Wed 13 May 2026 01:01:10 +0000
Manifest next update:     Thu 14 May 2026 01:01:10 +0000
Files and hashes:         1: 1-v3j2ZJau-IPw8bZGEx99nBH-54.crl (hash: Iy71zjLBEEA6opfYvDjkvKuMUqyxd9BhxIu5toG6odQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:1a:45:85:e9:a1:07:fc:02:59:d4:80:ae:7b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
        Validity
            Not Before: May 13 01:01:10 2026 GMT
            Not After : May 14 01:01:10 2026 GMT
        Subject: CN=b5ec01dad0761f746b1e2335ee59f41f97e01ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2c:28:b5:55:eb:1f:39:c9:db:0f:20:71:23:
                    0d:51:ce:f2:8e:fd:b1:01:fe:bc:35:fd:65:60:27:
                    74:2b:06:f6:ac:3d:77:88:bd:a4:41:92:b9:7a:f4:
                    9a:a3:c3:cf:ac:16:94:2e:36:82:77:0e:20:4e:eb:
                    cf:6c:9a:e1:93:de:d2:34:38:16:62:3f:a7:a1:ed:
                    99:aa:9b:42:a6:43:f0:b0:69:dc:7c:14:83:e1:cb:
                    f2:52:4f:8d:01:28:70:ea:f5:60:54:75:f2:62:17:
                    16:2f:fc:01:55:68:9a:9d:6b:00:ea:ee:92:ca:9b:
                    30:c1:6e:02:be:69:17:5f:26:1f:1c:18:83:fd:8d:
                    68:d6:a7:e0:29:fc:17:0a:bd:2d:36:5a:5b:6b:dd:
                    24:e1:e4:a8:e7:f2:0d:2a:ef:ad:2b:b3:4d:b3:20:
                    cc:0e:e8:77:14:4e:03:7f:9f:c1:60:ad:d0:9f:84:
                    a6:e8:df:10:47:01:e9:a8:e9:b1:df:cf:39:f5:b0:
                    f2:ea:6c:51:c3:e5:64:85:8b:22:79:3d:c3:98:f2:
                    2e:ec:e8:f9:7d:d6:99:2d:96:19:b4:be:1c:e1:2e:
                    ed:81:66:cd:c8:dc:aa:33:1b:a5:af:b0:e0:9f:11:
                    68:77:37:94:c3:eb:d8:79:c6:4b:f1:d4:4b:3e:3e:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EC:01:DA:D0:76:1F:74:6B:1E:23:35:EE:59:F4:1F:97:E0:1A:D6
            X509v3 Authority Key Identifier:
                keyid:FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:60:3a:ce:da:ed:13:57:84:07:4d:88:e6:60:a0:23:9c:c5:
         90:75:0c:86:48:9b:df:66:fd:52:51:53:cc:66:98:63:18:6f:
         e3:0e:8e:60:b7:4d:c1:a5:b8:f6:cb:be:cb:4c:98:78:08:cc:
         19:fc:9b:85:00:65:f7:e5:d3:25:e6:36:85:00:a6:36:c0:49:
         be:41:6d:c6:bb:61:64:5d:ed:5a:61:42:d8:72:4c:25:5d:87:
         e8:42:df:7b:19:6e:da:0a:72:ff:b6:fb:cf:6d:c4:ee:31:fe:
         89:7c:c9:32:9b:b6:1e:0b:ba:24:16:fc:be:7d:9c:eb:eb:df:
         dd:40:40:fe:e8:53:f8:42:5c:ad:5f:fe:fd:8a:f7:21:00:a5:
         ce:7c:b7:f6:71:2d:f4:f9:6c:3a:57:b7:94:f8:68:cc:e4:33:
         16:13:b9:fd:2e:29:d8:ba:2d:06:cd:38:88:23:c3:0d:57:e6:
         e8:82:3e:bd:ed:74:b8:de:8b:61:f4:44:a5:8f:51:dc:62:a6:
         f6:cb:bf:5a:de:9b:9a:ef:f8:29:99:70:d2:57:ec:74:f8:91:
         03:06:3c:ff:9c:1d:5d:d3:10:37:52:76:db:e3:2e:bb:ef:f1:
         e7:98:ce:84:f2:be:57:d3:95:23:b8:64:29:d9:67:8d:97:fc:
         3c:9c:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:44 2026 by rpki-client