Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
File:                     1FRz0ejN9J49mPjXcKrBSNLyiyM.mft (raw, json)
Hash identifier:          sGQdOQTG2VyHKbrtZQ+InFtR4BydAOFmYTphZviBU04=
Subject key identifier:   D0:0B:2B:17:B1:71:28:50:32:A4:E0:AB:E3:95:DF:4E:55:82:5A:AF
Authority key identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
Certificate issuer:       /CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Certificate serial:       019E1D2297D9DB4E077727742B974D6094E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
Manifest number:          1283
Signing time:             Tue 12 May 2026 17:01:06 +0000
Manifest this update:     Tue 12 May 2026 17:01:06 +0000
Manifest next update:     Wed 13 May 2026 17:01:06 +0000
Files and hashes:         1: 1FRz0ejN9J49mPjXcKrBSNLyiyM.crl (hash: tSZjWNHEY0th9Eb6NXK9Wnbug1NDBNRHPbJPrhijLtU=)
                          2: lC5eXBCYaKRVcF62GOlnP5JdMyE.roa (hash: kgNsunmi1acOQgTaAvMGtUTAhGf1cFlQBCkuvpjTFGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:97:d9:db:4e:07:77:27:74:2b:97:4d:60:94:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
        Validity
            Not Before: May 12 17:01:06 2026 GMT
            Not After : May 13 17:01:06 2026 GMT
        Subject: CN=d00b2b17b171285032a4e0abe395df4e55825aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:13:33:23:e6:8a:c3:17:da:11:3c:33:d5:
                    a3:95:20:89:fd:05:71:6b:7d:68:e8:53:26:13:e0:
                    95:e1:01:e3:77:b8:1e:44:78:6d:11:a5:72:3c:dc:
                    58:15:f4:f1:d3:a9:67:00:fd:33:4a:58:9b:11:bc:
                    f5:fd:f8:8e:8a:fe:84:f6:37:01:3f:23:fe:c3:92:
                    00:ef:02:8b:34:20:d3:b1:a4:2c:0e:11:49:14:a3:
                    68:da:91:28:71:bf:7d:8e:42:7b:0a:9b:34:6a:3e:
                    cc:f5:63:ae:c3:5c:a5:db:e5:b2:24:10:db:c1:d9:
                    07:20:e0:e4:7e:d9:5a:3a:3b:66:a6:9a:6c:8e:5f:
                    45:7b:78:cc:79:78:7b:52:7b:82:cd:88:50:87:f0:
                    d1:bf:5e:10:44:ca:dd:de:94:cf:fc:d8:b9:fa:78:
                    70:ce:13:1e:b5:fd:fb:27:a0:4c:81:8b:36:19:f3:
                    b7:48:51:b7:dc:8b:78:81:67:a4:64:60:7f:9a:43:
                    4c:ba:b8:50:c7:d4:38:0c:fb:91:67:01:db:c0:47:
                    65:67:e3:bc:a0:33:2e:8e:7e:1d:61:02:92:6e:11:
                    81:7b:7e:25:7e:19:08:ec:f8:6a:e2:42:5f:d5:80:
                    e9:b3:de:1a:c7:68:4f:69:ac:bd:8d:9b:53:a1:d8:
                    e4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0B:2B:17:B1:71:28:50:32:A4:E0:AB:E3:95:DF:4E:55:82:5A:AF
            X509v3 Authority Key Identifier:
                keyid:D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ff:4f:67:81:b9:50:af:d0:4a:bc:80:e8:70:ce:78:e2:57:
         56:d4:eb:a2:d2:27:1d:0a:fa:e2:bf:0c:f2:7b:48:4b:97:2a:
         5d:10:e1:56:e0:ef:fb:b9:3c:c4:d2:09:78:36:30:76:4d:98:
         2c:43:67:5c:b6:5e:a8:a4:9d:c8:e4:bd:37:6f:7b:aa:d0:0d:
         56:dd:21:a3:a1:ab:57:4a:86:48:fd:0b:6e:fa:d3:e1:da:a1:
         2b:c8:b9:20:a7:23:2c:11:bd:0f:24:b3:30:4b:ae:cc:3b:7b:
         db:ff:e7:8e:41:da:02:ed:77:73:df:58:a7:9b:14:07:d7:c9:
         97:1f:29:41:e0:84:72:78:55:52:64:d8:0b:a8:ad:82:11:27:
         73:18:3b:ca:1d:5b:89:8d:d8:94:fa:b9:c5:31:32:1e:24:3f:
         10:2f:26:d4:b7:e9:7e:49:61:b5:cb:5e:3c:0e:08:66:ee:6d:
         54:ed:ff:7d:83:03:f8:f1:21:6f:33:48:26:7c:a9:a4:a5:4e:
         61:98:c4:da:3c:ee:9a:59:72:83:4d:cf:32:e2:e0:16:d0:45:
         ea:0a:f5:2d:38:c8:d5:87:87:1e:00:18:05:44:83:eb:f2:92:
         18:36:fb:4b:13:b4:9f:ef:2e:a5:af:4f:c0:b2:f2:f3:d8:52:
         bb:41:bb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:18 2026 by rpki-client