Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File:                     1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier:          aB+SL4hGJd8Sg0MaO/XFsRpbBqD2Xb2CgFxOurxdtZY=
Subject key identifier:   60:F1:62:70:36:AC:1A:C3:0B:1E:DC:FE:58:30:9F:AF:A7:40:CC:E3
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer:       /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial:       019E1CEBB54208EBE2C1E355F9E790B7039D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number:          169D
Signing time:             Tue 12 May 2026 16:01:09 +0000
Manifest this update:     Tue 12 May 2026 16:01:09 +0000
Manifest next update:     Wed 13 May 2026 16:01:09 +0000
Files and hashes:         1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: /xqjGEK8UIlSfANeGOsWDCG2dfzv74u7UjUbhemJG/4=)
                          2: RSe6J6StOicXEQf8j22iaZH1Wqw.roa (hash: yq7M1favZHDaKZGtuLamDm7eKgNK2HtsjIbAmOI1HpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:b5:42:08:eb:e2:c1:e3:55:f9:e7:90:b7:03:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
        Validity
            Not Before: May 12 16:01:09 2026 GMT
            Not After : May 13 16:01:09 2026 GMT
        Subject: CN=60f1627036ac1ac30b1edcfe58309fafa740cce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:41:78:22:fc:6a:92:a0:20:ae:22:9d:b9:f4:
                    21:db:20:d4:c4:3d:56:22:2f:2b:6b:dd:f3:ec:9e:
                    90:26:ac:73:94:f2:b8:f0:32:82:ed:be:33:a6:b0:
                    50:29:1d:92:4c:20:ed:10:3d:e8:65:cb:4e:0b:fd:
                    ca:3e:fb:db:c0:c7:be:c5:da:ef:5b:77:d5:9e:ed:
                    7a:64:98:a2:d1:1b:45:7c:61:8a:3e:e1:d6:11:be:
                    8e:87:82:18:15:91:86:7e:7e:dc:35:7e:3e:23:95:
                    6f:08:36:4a:19:9e:81:89:de:c0:6a:5f:56:51:f9:
                    92:da:0e:20:d8:a5:28:0d:28:27:75:de:35:7d:59:
                    a2:2d:4b:26:df:e1:91:0f:37:b8:df:24:39:16:21:
                    b3:4d:30:a8:43:33:fa:ea:bb:e8:05:e4:d3:c5:7f:
                    d5:10:70:5c:07:11:c4:e8:e8:bb:11:e0:50:18:79:
                    15:f3:51:b6:a5:27:91:e6:27:f1:1d:0a:f4:0b:56:
                    5d:97:21:8f:0d:39:ec:78:cd:23:28:92:a6:7b:8c:
                    66:36:91:bf:95:33:cc:2b:1c:5f:b3:08:d9:79:f8:
                    ff:8b:d3:4a:8f:47:e0:35:c6:f6:9a:59:e8:fe:8e:
                    b5:b5:12:b7:63:32:9f:5a:e4:d0:7c:e3:6f:c9:04:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F1:62:70:36:AC:1A:C3:0B:1E:DC:FE:58:30:9F:AF:A7:40:CC:E3
            X509v3 Authority Key Identifier:
                keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:74:b7:38:fa:d8:a8:8c:71:97:38:14:92:10:b1:18:78:4b:
         e0:c4:67:04:e9:22:8d:27:16:57:e8:1c:fa:27:b2:bf:fd:1a:
         df:1f:16:96:81:fd:83:8e:fe:86:77:ba:4a:c5:f9:fa:d5:e7:
         3d:68:fa:6b:1e:b1:1b:e7:cb:1f:1a:71:ea:0d:57:cb:75:4e:
         f5:11:60:a8:0c:c5:1b:94:a0:8d:d7:38:3f:39:2e:df:fd:55:
         49:1a:77:93:f2:10:da:76:77:c2:c6:fc:04:4b:8f:00:81:0c:
         ec:c1:f8:55:c3:55:47:fa:db:49:49:6b:fd:13:ec:2d:06:d3:
         a5:bc:11:9e:03:fd:04:8f:55:03:8c:0a:f0:fc:3b:21:55:94:
         77:e3:e9:af:ed:02:b3:d1:f4:65:28:f0:63:73:eb:6e:28:7f:
         d7:c7:01:00:66:12:c2:ea:4d:be:02:fd:1e:69:c8:9d:4b:20:
         f7:67:96:cf:fc:21:d9:ae:7d:9a:3a:ce:e6:dd:d2:7f:53:68:
         85:fc:8c:f4:f7:5a:7f:13:1d:69:a9:9e:02:f5:10:85:e0:54:
         66:e5:28:63:7c:98:33:96:4f:f5:32:a2:d8:23:4a:21:60:80:
         75:c2:1e:28:45:8d:aa:7e:d5:51:66:26:ac:f8:a3:9f:b8:ba:
         58:19:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:32 2026 by rpki-client