Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
File:                     1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft (raw, json)
Hash identifier:          O7StK0v2f+QVaYHkJWiz8PSna4KyHfeoeKxorpHqrLk=
Subject key identifier:   AE:92:75:49:C3:05:6E:C7:08:A2:61:E8:55:B2:30:50:FB:7A:4A:EC
Authority key identifier: FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7
Certificate issuer:       /CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
Certificate serial:       019E1DFE3D6C0EC2732C12BAEC6FEC78EE5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
Manifest number:          07A2
Signing time:             Tue 12 May 2026 21:01:01 +0000
Manifest this update:     Tue 12 May 2026 21:01:01 +0000
Manifest next update:     Wed 13 May 2026 21:01:01 +0000
Files and hashes:         1: 1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl (hash: lVlKN26jn0YlRdHHxQoZqnBAgVjbRS51kk7/NveD3SY=)
                          2: NLxrIIugp3R4DpT8Bd4iByRao_Y.roa (hash: wBPPunNUH66uF/lnjqaErJgsT6xEJ8SJhXS+mFEdnAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:3d:6c:0e:c2:73:2c:12:ba:ec:6f:ec:78:ee:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa4f44ba814b8c94b7afe3022ee01462f513bff7
        Validity
            Not Before: May 12 21:01:01 2026 GMT
            Not After : May 13 21:01:01 2026 GMT
        Subject: CN=ae927549c3056ec708a261e855b23050fb7a4aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:29:55:cd:93:71:60:e2:07:a3:bb:d1:ec:4b:
                    91:24:6a:1c:79:5b:fa:2b:50:21:b7:91:ac:39:63:
                    ee:99:54:8f:5e:79:38:dc:03:71:4c:d6:1a:cf:62:
                    b8:8c:8a:84:a8:6f:7f:31:7e:79:2b:0f:d8:cb:09:
                    6c:3a:e6:58:3b:f5:54:bd:fd:6e:24:05:1c:f1:cc:
                    09:aa:8c:dc:1a:93:7d:90:40:40:d4:8c:89:35:1d:
                    6c:ad:5c:1e:19:d1:63:c6:b8:c3:fd:a8:8a:91:03:
                    11:78:05:a3:b1:80:82:2f:02:66:2d:61:1a:ba:83:
                    dd:88:18:ce:25:a3:f2:63:dc:3a:97:a5:53:62:86:
                    ad:be:eb:8e:1b:d7:a3:51:cb:c8:b0:65:c0:c1:f7:
                    d3:ac:44:0e:f6:75:e0:5e:66:06:be:06:9c:1b:60:
                    4a:bd:fb:6c:77:8a:ed:6f:18:c3:5e:97:ff:e1:d1:
                    4d:ba:09:68:fa:15:53:1b:49:c0:fc:61:80:ba:9f:
                    bc:c2:3d:80:98:83:c6:69:1e:7e:71:ab:3d:5e:ff:
                    21:12:06:11:27:c7:d2:a3:32:b3:2d:71:b4:9d:a1:
                    07:44:0f:dd:7f:81:56:0b:a2:92:89:10:36:32:e9:
                    4c:16:30:94:5a:ec:8b:bf:b4:3d:5c:b4:f8:2f:78:
                    1f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:92:75:49:C3:05:6E:C7:08:A2:61:E8:55:B2:30:50:FB:7A:4A:EC
            X509v3 Authority Key Identifier:
                keyid:FA:4F:44:BA:81:4B:8C:94:B7:AF:E3:02:2E:E0:14:62:F5:13:BF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/912110-6fc2-424a-a955-da621cd756d7/1/1-k9EuoFLjJS3r-MCLuAUYvUTv_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:40:b0:67:bd:f4:74:f1:86:19:9d:62:3a:2b:8a:68:52:4f:
         ab:59:1a:61:ea:00:18:c4:de:7e:fa:e0:ef:2b:f4:c7:bc:f3:
         af:85:e7:9c:11:20:1d:00:35:e7:74:93:d8:5d:f5:fc:ed:d1:
         d1:6a:8c:64:11:77:c7:10:29:6f:b7:69:a7:af:90:55:53:df:
         1e:2e:ff:aa:93:34:16:43:92:8b:48:4d:3e:79:a8:b3:6a:02:
         40:8b:d7:dd:bd:fe:d8:46:6f:2c:bf:f7:47:03:02:ed:a3:7f:
         32:af:9f:a4:bf:eb:fb:db:dd:ce:e5:bf:49:72:d1:39:e4:c6:
         c7:ce:e1:13:09:01:77:18:02:f7:ca:57:07:6a:bd:ed:72:83:
         de:13:5c:14:0e:96:e0:51:1c:be:8b:12:85:8f:9e:e3:90:11:
         ce:4b:78:c9:65:7a:8c:20:be:77:32:95:25:6a:e2:0c:c5:e0:
         b0:24:39:11:47:7d:9d:34:c2:80:ac:65:f3:16:d0:c5:24:c6:
         5d:03:dd:7c:d8:2f:a7:56:6e:4e:6f:85:e0:82:b6:12:9f:b7:
         be:dd:d8:70:b5:6f:0a:70:78:4b:ab:87:2b:56:bf:6e:85:e7:
         79:07:c9:3e:0c:d2:52:b1:94:e3:18:3a:f6:b5:3b:be:72:f7:
         7a:db:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:48 2026 by rpki-client