Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File:                     1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier:          8pSuHRWpayQPtv4Bkri6QN6Wsr2rzeUm+Kc7s3dHXT0=
Subject key identifier:   06:EF:0A:D7:36:33:8C:5A:59:FE:A2:E2:04:CF:54:96:91:0A:55:B0
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer:       /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial:       019F905A3E8BC6F1AE1B86DD399DD3EBAC2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number:          1957
Signing time:             Thu 23 Jul 2026 19:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:01 +0000
Files and hashes:         1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: FkcxFNf4uY0xwZqVdWjV+2mt/0i7UKa/BAdVxJjg1zg=)
                          2: pXi_lWorquYMeFo_GByXEjAC2iQ.roa (hash: C5ppARZwdDpqOjifyYQPpcbZiTRFDLNkGmS29XOlq5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:3e:8b:c6:f1:ae:1b:86:dd:39:9d:d3:eb:ac:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
        Validity
            Not Before: Jul 23 19:01:01 2026 GMT
            Not After : Jul 24 19:01:01 2026 GMT
        Subject: CN=06ef0ad736338c5a59fea2e204cf5496910a55b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:5a:6f:17:87:6b:10:11:b2:40:6f:31:68:
                    9b:c2:5b:e9:ad:61:52:00:43:8b:4b:2d:55:ba:d7:
                    a8:75:0f:0e:19:5c:a2:c3:59:9f:4b:f9:40:e6:03:
                    bc:a5:6f:a0:5e:43:13:4d:03:a3:b9:4f:51:9c:68:
                    75:d9:5d:da:1d:95:21:d3:37:b8:89:11:e2:bf:1a:
                    8e:ab:4b:ee:95:75:f4:87:e8:d0:40:6a:1f:92:af:
                    6c:db:e8:ba:ef:2a:ff:07:0b:a0:44:62:92:93:35:
                    77:19:74:b3:60:ce:85:f3:84:24:26:b8:51:84:3c:
                    e2:03:53:08:38:0e:dd:dd:49:c5:49:bd:b9:3d:91:
                    27:e7:f9:cc:4b:d3:9d:94:39:b7:ee:f6:1e:05:88:
                    98:c9:71:e9:64:68:17:c2:af:b6:8f:c2:eb:96:be:
                    2b:96:47:3b:56:cb:0a:d7:2a:99:86:f8:21:e7:e6:
                    0b:be:0b:8c:6f:20:36:c6:a2:1c:5b:5c:ae:a5:0d:
                    86:54:28:bb:3f:6b:f8:73:62:29:4e:ae:8e:2e:31:
                    70:a7:cd:56:5b:34:cc:75:3d:40:c3:fe:9a:dd:69:
                    ff:aa:fa:22:b1:e0:7e:2e:af:9b:70:d6:4e:13:10:
                    d7:97:d1:46:9c:ce:8f:15:e1:d1:bd:aa:c1:08:f2:
                    e7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:EF:0A:D7:36:33:8C:5A:59:FE:A2:E2:04:CF:54:96:91:0A:55:B0
            X509v3 Authority Key Identifier:
                keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1a:26:d4:07:9b:ab:df:bb:a5:1c:30:d8:71:dc:64:56:dd:
         31:1b:d5:42:0b:a7:cc:c3:65:fe:8a:e1:60:28:f1:05:68:7b:
         ff:87:ae:ca:5e:3a:24:86:62:ae:fc:f6:19:ae:4e:f7:2a:51:
         5a:5e:65:fd:c7:b7:2a:78:bc:27:3d:7b:95:53:67:c0:4c:a2:
         90:96:c3:d5:9f:b5:94:40:43:74:ae:80:b8:a6:4d:56:fe:42:
         97:ee:a8:37:92:a4:a9:6f:57:77:6f:80:8b:1d:57:0e:7e:1b:
         31:f4:d3:0e:9f:08:c1:ef:22:39:58:4d:43:24:08:aa:88:35:
         57:a9:a0:35:51:64:7b:5d:93:d8:e4:5d:d0:1b:51:b1:c1:b9:
         af:06:4f:f4:d7:31:20:89:77:b9:dc:81:7a:39:59:7b:27:48:
         dd:27:e3:0d:9b:99:f7:cb:3f:a4:4e:5a:eb:22:5d:79:07:09:
         b8:53:f0:bd:62:43:aa:49:5d:30:e4:f5:de:de:59:36:48:dd:
         dc:f6:7b:3a:28:a2:23:5b:a1:85:94:d9:b7:cf:b7:0b:c8:10:
         6d:19:aa:ce:19:02:96:dd:c0:4c:e9:51:82:34:e5:fd:04:53:
         d4:cc:22:90:5f:c7:6d:f7:b0:ab:c6:69:cf:7d:f9:bf:e9:ae:
         b7:d0:15:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:12:58 2026 by rpki-client