Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
File:                     1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft (raw, json)
Hash identifier:          J68cpB3vGtcCVmrgrhGcQcDy+6feoSzzrgl+O/Q/BH0=
Subject key identifier:   A3:F8:55:61:22:10:F1:FB:78:BC:5E:A2:EF:70:FD:5B:C6:42:15:45
Authority key identifier: FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92
Certificate issuer:       /CN=fad92323d22b44275dcecd4de295b44794623e92
Certificate serial:       019F8FB588418081715542ADA9C3C9809F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
Manifest number:          109C
Signing time:             Thu 23 Jul 2026 16:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:06 +0000
Files and hashes:         1: 1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl (hash: yqpQ4B12gnG/yasEcpDTk0t4LF5/W5XbMiCY8hUaQjA=)
                          2: UL-CgnrNPYQJO2OLIuI1mhSYtDA.roa (hash: GGk+R1Gc40YBitEs0cmNl7DC/ssfY6330gew4Jn1Fl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:88:41:80:81:71:55:42:ad:a9:c3:c9:80:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad92323d22b44275dcecd4de295b44794623e92
        Validity
            Not Before: Jul 23 16:01:06 2026 GMT
            Not After : Jul 24 16:01:06 2026 GMT
        Subject: CN=a3f855612210f1fb78bc5ea2ef70fd5bc6421545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:ed:42:6a:76:d5:9d:08:d8:77:82:ae:f6:
                    72:2c:9a:49:01:aa:ef:8b:83:36:fe:88:b0:26:1f:
                    5d:3e:aa:2e:9f:56:0b:f6:94:c6:22:36:16:23:65:
                    96:88:4a:c9:e7:f2:09:a6:94:d6:8c:49:7b:37:e5:
                    50:a6:03:76:3d:70:eb:ba:cc:73:bd:78:f8:d4:b3:
                    1d:10:7e:7d:61:2b:d4:64:66:5c:d5:5f:b3:10:b2:
                    4e:11:3f:d3:67:dd:46:50:b8:f0:96:30:14:50:4a:
                    6f:da:f4:8b:ea:aa:a8:b3:b5:2d:d7:ee:df:07:53:
                    f3:67:51:98:f8:d5:3f:01:21:47:f0:f4:30:75:73:
                    6b:0b:38:dd:7d:c7:c1:ba:61:69:a9:e2:fe:ec:69:
                    c9:3d:4f:57:f6:e0:0e:37:17:a6:2b:cc:07:2c:b0:
                    18:01:29:81:aa:d5:8b:aa:2c:48:62:b5:2f:ff:60:
                    d3:43:4e:5e:53:a2:ea:b3:40:9b:6b:b4:b3:40:00:
                    24:09:d9:14:e3:cf:3a:59:e9:e8:7d:c7:68:81:db:
                    fe:08:19:48:41:6d:3b:c1:a5:77:57:c5:09:ee:69:
                    dd:76:7f:2e:de:1a:db:f1:31:b6:2c:c6:1a:37:a0:
                    9b:8a:d2:d1:c4:c9:fe:eb:8b:71:ef:86:3d:5d:e7:
                    64:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F8:55:61:22:10:F1:FB:78:BC:5E:A2:EF:70:FD:5B:C6:42:15:45
            X509v3 Authority Key Identifier:
                keyid:FA:D9:23:23:D2:2B:44:27:5D:CE:CD:4D:E2:95:B4:47:94:62:3E:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tkjI9IrRCddzs1N4pW0R5RiPpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/49f3ad-ef9e-4fc4-95c4-4f37011ee581/1/1-tkjI9IrRCddzs1N4pW0R5RiPpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:e9:14:c1:97:f0:e1:c2:78:ed:8a:f8:14:5f:71:f8:81:1a:
         cf:15:a2:72:f8:fd:19:40:e6:c4:bc:c8:19:42:df:10:1b:11:
         ad:fd:71:e9:9d:05:50:d9:63:54:93:45:24:e3:b6:92:d2:af:
         8d:62:bf:6d:4a:72:cf:44:5f:e5:ae:0a:5f:db:b5:d3:f1:85:
         22:48:3f:ee:58:72:d8:7d:18:7c:f9:a6:1a:5f:e3:07:5f:79:
         31:68:ab:b3:81:c0:f3:79:fb:e8:9a:22:e8:8b:c8:a5:93:cc:
         57:31:9f:78:a3:17:43:64:b4:37:01:0e:69:f7:b1:f5:50:6e:
         02:b2:90:25:94:45:1d:3f:22:6e:97:22:f6:45:14:91:b2:b7:
         02:c4:1b:cc:90:b7:86:9c:29:d0:87:97:9b:39:5c:46:56:a9:
         ef:e4:b4:7b:a5:be:f3:8f:84:e2:92:00:7a:72:6d:a5:49:08:
         4b:47:5c:74:f1:a3:3a:93:04:d7:7b:83:b9:ec:c7:b9:fe:ac:
         e3:da:91:0b:eb:38:ff:cb:e9:99:e4:ad:c6:1f:bb:58:06:af:
         67:85:99:c3:29:54:f1:92:a9:ec:15:ed:64:82:ab:f5:28:c5:
         d3:11:72:31:43:a2:c7:0c:dd:d6:af:a9:8f:5d:5b:ab:6b:ee:
         9e:09:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:26:32 2026 by rpki-client