Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File:                     1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier:          emC4JLADKiFidoNANOO9NmLwQ5z/vRlkK/I9ezXZKpI=
Subject key identifier:   09:98:C9:AD:EA:F3:3B:F8:83:76:D8:61:00:09:1C:A1:DD:84:C9:22
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer:       /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial:       019E1DC6F91D480D3F045B08400D67607C7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number:          068D
Signing time:             Tue 12 May 2026 20:00:39 +0000
Manifest this update:     Tue 12 May 2026 20:00:39 +0000
Manifest next update:     Wed 13 May 2026 20:00:39 +0000
Files and hashes:         1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: mUUB3REbM3rVIvMsc8ZAEWH/gneGBXH1lUivSB+K42g=)
                          2: tkycn5xiTigCQfGPa-xW18TGNfk.roa (hash: 4OjRszRSxwJd25PZFySHlvrHFTMBwczdyRtjAmquBAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c6:f9:1d:48:0d:3f:04:5b:08:40:0d:67:60:7c:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
        Validity
            Not Before: May 12 20:00:39 2026 GMT
            Not After : May 13 20:00:39 2026 GMT
        Subject: CN=0998c9adeaf33bf88376d86100091ca1dd84c922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:44:e0:61:02:75:c7:7b:63:09:0c:d4:2a:
                    7c:a7:f1:3c:a3:8f:16:dc:a0:25:ec:12:58:ea:c0:
                    3f:97:54:ef:c7:8b:89:67:88:dc:d4:a9:d0:fe:35:
                    bc:f2:73:25:fd:93:d6:b5:e1:8d:b9:07:85:e8:62:
                    0e:91:01:8f:44:a7:60:86:c6:08:5f:2f:23:e8:5e:
                    27:7b:b9:d5:f7:f7:69:50:bf:44:6c:62:46:5f:3a:
                    1c:9d:47:84:6d:e6:10:7c:3a:33:c8:cc:f2:7e:e1:
                    62:67:6e:5d:c2:0f:e0:52:37:28:43:40:d3:4f:b2:
                    68:38:cc:7f:be:87:39:5c:1b:be:70:98:71:ed:8a:
                    3e:4f:19:bd:7c:d2:e9:0b:b8:f4:97:78:b3:d6:66:
                    fe:7a:2a:6c:7d:8d:58:9e:40:db:0d:dd:0a:e3:c7:
                    c7:19:87:31:06:a6:1b:e4:59:18:9e:cc:da:49:04:
                    2f:cb:f9:40:e0:47:63:0e:f4:45:97:c2:1c:8d:fd:
                    c9:1f:7d:5b:78:bd:9f:e1:9f:42:89:94:e2:45:c7:
                    ac:c5:88:76:89:90:d2:1f:7f:36:d8:ee:41:90:79:
                    45:31:84:af:37:4a:42:d5:7b:f7:02:6c:dd:b4:40:
                    26:65:7d:57:6d:16:03:9e:c2:96:f6:47:f6:44:9a:
                    a0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:98:C9:AD:EA:F3:3B:F8:83:76:D8:61:00:09:1C:A1:DD:84:C9:22
            X509v3 Authority Key Identifier:
                keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:39:a3:ba:11:e6:b5:e5:f5:13:99:7d:aa:40:54:23:a6:43:
         95:86:89:45:c4:26:3c:ed:1e:24:b2:3a:4d:d2:47:60:af:bd:
         90:06:b9:3f:68:20:d1:83:65:cd:be:c0:45:9a:8f:3d:29:1c:
         67:11:ea:41:ef:16:1e:88:c3:2f:b2:1b:3e:e5:aa:69:85:67:
         55:57:57:c4:ce:86:e4:8b:cc:91:76:41:ab:5b:63:5b:71:6a:
         43:af:25:0d:06:df:d7:8f:31:0c:5c:01:14:e4:eb:68:93:b0:
         af:45:59:a3:03:01:89:72:fb:9b:38:2e:f4:08:f9:45:20:0f:
         0c:b4:ab:36:a5:dc:2e:0b:d8:58:58:d8:1d:8f:9a:36:9a:7d:
         dd:c4:9f:10:41:08:ed:7a:53:ca:84:d2:51:9c:7e:00:12:16:
         05:22:7b:d7:ae:f5:ef:4b:00:ac:fe:4f:e9:89:5b:48:c3:75:
         57:09:e4:5d:64:2a:44:b3:49:52:f3:eb:01:25:5a:7a:a1:24:
         61:5a:e3:81:f7:a7:c9:9f:54:14:99:7c:08:9a:f2:d8:e1:1f:
         b3:7b:4e:31:74:74:56:67:70:c0:b6:a4:f8:f8:16:f9:ec:f1:
         02:c6:53:6d:ca:92:b1:83:8c:c0:77:ea:9e:01:7b:61:df:b2:
         c5:cd:c4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:30:54 2026 by rpki-client