Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
File:                     1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft (raw, json)
Hash identifier:          PXu8HIp2hFUGz+A92hyWhBbzCve0tdiIR9t9Lts3wls=
Subject key identifier:   BC:B2:4E:9F:85:E3:FC:65:BD:B6:33:CF:EB:47:97:14:D4:0E:C1:43
Authority key identifier: FA:98:32:F0:7A:1C:65:D7:E3:53:F4:8E:08:6F:CF:25:08:68:88:FF
Certificate issuer:       /CN=fa9832f07a1c65d7e353f48e086fcf25086888ff
Certificate serial:       019E1DC78D153A949AF6374F278EA5AEB64E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
Manifest number:          01D1
Signing time:             Tue 12 May 2026 20:01:17 +0000
Manifest this update:     Tue 12 May 2026 20:01:17 +0000
Manifest next update:     Wed 13 May 2026 20:01:17 +0000
Files and hashes:         1: 1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl (hash: Wa4/1Zn9pJaoFPzcN0gEtPmhGfXaxIjyIM6RUM4QLGU=)
                          2: OQLXEqiI0-t-jDFZ7Aw_RfcOogA.roa (hash: M/HaQZELEO7odM10mCvVSjhkNjEOwFy6fTyGxP3z8UM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:8d:15:3a:94:9a:f6:37:4f:27:8e:a5:ae:b6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa9832f07a1c65d7e353f48e086fcf25086888ff
        Validity
            Not Before: May 12 20:01:17 2026 GMT
            Not After : May 13 20:01:17 2026 GMT
        Subject: CN=bcb24e9f85e3fc65bdb633cfeb479714d40ec143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:7f:53:df:3d:d1:f2:c1:2f:36:33:80:07:
                    19:4c:a4:92:4e:9e:65:79:9a:01:fd:8a:e8:45:75:
                    e2:aa:fb:66:98:3c:f2:96:f2:7a:eb:94:f7:73:da:
                    4a:89:2f:86:48:d8:98:87:4a:1a:12:5a:00:c0:34:
                    0d:57:f5:17:80:d3:84:8f:36:df:89:ef:b6:43:71:
                    12:ca:26:61:40:f8:df:05:4a:51:13:eb:61:c2:97:
                    3e:fc:3d:c2:e0:01:d6:9b:d9:45:4d:68:a8:3d:e4:
                    43:87:5e:50:70:c9:29:a3:e5:c8:a8:e6:df:8d:9a:
                    24:b9:02:3d:54:4c:75:53:eb:b9:90:a0:a8:ca:f9:
                    9e:e5:3b:65:5c:ec:dc:81:8d:4e:7b:e2:5e:a1:bd:
                    5e:b9:d8:4d:5c:91:ca:b3:29:aa:e7:cd:e2:60:d2:
                    bb:63:aa:12:f4:38:68:76:c4:38:1e:a4:5e:72:ed:
                    f1:b8:ba:34:02:d5:52:51:55:88:39:c0:10:d8:0a:
                    dd:46:fe:fa:f2:de:20:6d:ca:38:c4:cb:c2:2f:82:
                    6a:bd:aa:66:43:2f:aa:c1:58:3e:22:99:98:95:75:
                    45:e6:e4:1d:8e:78:57:3b:18:89:91:e3:c1:89:92:
                    e7:5d:fe:33:0a:15:d7:8c:fe:a5:01:a2:7e:de:7d:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B2:4E:9F:85:E3:FC:65:BD:B6:33:CF:EB:47:97:14:D4:0E:C1:43
            X509v3 Authority Key Identifier:
                keyid:FA:98:32:F0:7A:1C:65:D7:E3:53:F4:8E:08:6F:CF:25:08:68:88:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pgy8HocZdfjU_SOCG_PJQhoiP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4c9e86-1ad7-4a8f-a55b-92cf01fa7e6c/1/1-pgy8HocZdfjU_SOCG_PJQhoiP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:77:35:1f:05:12:6d:8f:80:6e:ab:4d:e7:d9:7b:f8:9d:89:
         d5:d2:cb:c1:34:65:fa:6b:8e:0c:9c:95:bb:2b:74:28:bc:36:
         42:c8:6f:d9:6f:37:99:4e:a1:a7:b2:6b:32:41:22:06:2e:da:
         29:4b:0f:79:e8:49:48:97:6f:9f:16:da:01:65:68:48:28:ad:
         ed:7d:76:93:70:8e:a7:15:5e:66:73:2a:49:20:33:35:63:59:
         84:09:11:0a:dc:b7:7a:8d:d5:87:5a:33:99:0d:b2:69:41:df:
         48:2f:c1:7a:2c:72:21:51:d9:2a:50:d6:62:d0:54:66:f6:8a:
         01:5b:1b:11:f0:b2:f3:98:b0:79:4f:55:67:8b:ce:bf:64:53:
         b2:a5:88:72:f3:ee:4a:29:ab:ac:36:20:54:5b:9e:ca:32:fb:
         75:de:7f:e3:b0:c2:99:d4:a6:e0:8f:05:35:eb:0d:b5:73:ed:
         d0:7c:c5:63:fd:bd:6e:31:fd:ab:0a:73:b8:db:51:29:f0:fe:
         d5:ec:30:ad:8e:2e:73:67:9f:20:fc:cd:8c:f3:66:dc:15:2c:
         20:ad:2b:dc:e6:e0:34:92:d4:73:6b:f7:86:d2:12:2d:bd:5c:
         43:34:b6:b4:45:3e:55:71:4c:40:06:e3:f2:d9:0d:d9:97:ba:
         bb:ea:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:45:42 2026 by rpki-client