Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
File:                     1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft (raw, json)
Hash identifier:          6J41yOJFcJ0BDLOHA/oGOlynxu70SDA5qeUNV7AKuDE=
Subject key identifier:   4E:5B:51:12:7A:4D:77:EF:95:EA:55:26:FC:D0:18:AD:C8:B9:C5:CB
Authority key identifier: FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
Certificate issuer:       /CN=fa160e75add6ebf6f44581321477fab92d22e44f
Certificate serial:       019E1E354D69D2170001855F49A1D5041855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
Manifest number:          0119
Signing time:             Tue 12 May 2026 22:01:10 +0000
Manifest this update:     Tue 12 May 2026 22:01:10 +0000
Manifest next update:     Wed 13 May 2026 22:01:10 +0000
Files and hashes:         1: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl (hash: NI9SvRE+ytYUUJbvAE8oENX4HIriAfKL4rGQ/RmvQlw=)
                          2: thQigH6iIZFTzygl3Rx0-Gq-vvI.asa (hash: 0qoZ/U/Zc4qr6dxGiq1WxSNmVGjBwb4uBW1cZmhhZq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:4d:69:d2:17:00:01:85:5f:49:a1:d5:04:18:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa160e75add6ebf6f44581321477fab92d22e44f
        Validity
            Not Before: May 12 22:01:10 2026 GMT
            Not After : May 13 22:01:10 2026 GMT
        Subject: CN=4e5b51127a4d77ef95ea5526fcd018adc8b9c5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:6a:c8:dc:35:75:54:e5:12:58:2d:52:e5:b2:
                    02:53:67:97:17:23:4f:0b:88:30:a1:32:54:70:3a:
                    ca:43:f9:ff:c9:2a:b6:76:4b:84:75:6a:39:d7:4e:
                    40:93:05:0d:79:a8:e1:25:cf:72:0b:33:da:e3:ce:
                    e3:ae:ce:95:6a:5b:31:bb:cc:af:94:d9:01:73:0d:
                    8e:fc:e6:d4:66:f1:3a:73:3d:2c:8a:a5:90:04:f0:
                    65:e2:66:3a:d0:8c:10:a3:c9:d9:0c:29:05:87:03:
                    df:46:7e:17:7d:50:80:bd:44:52:b8:e3:a1:34:69:
                    6d:82:62:6b:48:c1:b0:ca:0b:2c:d3:f1:91:9b:5d:
                    68:d0:88:c8:fe:e9:d2:79:d5:db:cb:b7:89:7b:2e:
                    fa:7b:db:16:91:fa:95:71:ef:ca:d1:84:6d:36:33:
                    56:db:38:3a:bb:9d:ef:78:c3:f7:53:62:02:03:69:
                    32:cc:e1:be:a0:44:7c:2a:35:6e:d9:96:4c:fb:4a:
                    76:8c:72:10:64:10:55:8f:c0:5a:2e:ac:1d:03:de:
                    69:0b:66:34:58:42:81:f5:83:dc:23:99:12:41:f0:
                    e9:bc:d6:a7:fd:46:2f:12:9b:1b:26:31:d4:a2:be:
                    1d:91:f8:97:25:99:c3:0b:bc:16:e9:2c:4d:18:a3:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5B:51:12:7A:4D:77:EF:95:EA:55:26:FC:D0:18:AD:C8:B9:C5:CB
            X509v3 Authority Key Identifier:
                keyid:FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:e8:5c:34:ff:f2:8d:9f:ba:77:27:d8:f6:89:7d:8d:81:60:
         fa:07:87:ff:06:ab:4e:37:07:9d:25:82:1d:b9:bc:4d:81:10:
         73:0f:19:15:fa:73:03:80:ad:21:94:f7:40:32:c1:65:59:60:
         5c:7e:af:14:a9:a2:05:fd:c3:90:de:7a:70:47:6b:23:a6:26:
         72:4c:0a:8b:3b:20:00:8a:9e:2a:93:5b:9d:3e:97:b7:66:88:
         42:44:34:70:d3:48:41:a3:93:53:f5:dd:08:ee:09:64:9f:1b:
         f5:22:60:fc:dc:03:e7:b0:fe:9d:7d:18:ce:82:66:69:13:93:
         2f:e8:84:b7:b9:61:cd:e7:3e:60:ff:25:41:36:21:f7:a8:32:
         f6:d2:11:d2:3f:a3:c9:0c:3e:ee:31:af:35:07:ed:10:6e:c7:
         64:44:09:34:4d:db:32:ec:da:40:c7:3d:b3:6d:47:27:bd:47:
         1b:c7:59:f2:83:31:09:ca:f3:9e:d2:97:9f:ea:a2:98:0c:5f:
         1a:87:82:19:b4:02:65:bb:f3:31:b4:0f:49:e2:08:82:cf:aa:
         73:a6:8c:f9:8b:91:68:1f:58:ed:27:b3:8a:b2:1e:6b:2c:16:
         0f:0d:b0:a7:d9:c3:d0:1c:53:23:e1:81:41:93:6d:c5:52:8c:
         9d:bf:15:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:39:36 2026 by rpki-client