Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File:                     1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier:          We9QpboiDEIAEwje/5qzXXhF0ZfyIOMT5EniSfS+11M=
Subject key identifier:   A1:05:C4:4E:F1:A6:A4:A3:86:72:67:15:52:44:42:12:AA:58:F4:ED
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer:       /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial:       019D28842F582841C8B39CEDD72548929A8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number:          060E
Signing time:             Thu 26 Mar 2026 05:00:44 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:44 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:44 +0000
Files and hashes:         1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: zQf4J2CLN73+194kkrcVOCvhGUry97Tvq0R7UTi/H8M=)
                          2: tkycn5xiTigCQfGPa-xW18TGNfk.roa (hash: 4OjRszRSxwJd25PZFySHlvrHFTMBwczdyRtjAmquBAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 05:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:2f:58:28:41:c8:b3:9c:ed:d7:25:48:92:9a:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
        Validity
            Not Before: Mar 26 05:00:44 2026 GMT
            Not After : Mar 27 05:00:44 2026 GMT
        Subject: CN=a105c44ef1a6a4a38672671552444212aa58f4ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a7:e3:16:c1:eb:23:2e:bf:69:75:fd:e8:c4:
                    65:78:f7:e7:24:11:45:b5:5a:32:f4:de:cb:38:69:
                    16:07:85:02:23:68:d1:d0:f0:de:27:49:ad:b6:2d:
                    2e:3f:72:e0:86:82:cc:31:32:f6:49:2e:61:05:24:
                    6b:44:6e:31:a4:b4:f4:7a:39:c3:00:47:55:3e:9c:
                    e2:a0:1d:9b:ee:27:34:ac:66:0c:d3:66:96:1c:99:
                    13:0d:a9:2d:34:05:d1:1e:8f:96:76:ba:03:0f:84:
                    c0:f8:8d:95:26:71:1f:2f:2b:13:bb:dc:e4:6a:02:
                    f9:74:26:ae:26:6a:82:64:ed:fb:b4:09:fa:a9:3e:
                    94:3a:cc:04:c6:ad:db:0b:4b:66:ef:73:fe:84:37:
                    93:1a:d6:55:70:5d:a6:72:5e:d7:44:37:f8:50:47:
                    d4:11:e4:aa:c6:e8:cf:19:c0:3c:f6:e1:bb:ba:18:
                    a7:b0:8b:a2:be:2d:30:1a:93:61:10:8c:72:ff:e9:
                    3b:dd:11:2d:d2:c8:c0:67:87:94:8d:6f:df:39:be:
                    e3:ad:fb:3f:57:65:4d:39:61:64:cc:12:b2:c4:92:
                    c3:1b:c5:0f:52:c4:65:d5:3c:36:d0:4b:ef:d0:8d:
                    cc:95:b0:28:15:00:e7:40:54:8c:a8:73:67:85:68:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:05:C4:4E:F1:A6:A4:A3:86:72:67:15:52:44:42:12:AA:58:F4:ED
            X509v3 Authority Key Identifier:
                keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:ec:d4:dd:f2:cf:67:18:89:15:c6:e4:95:fd:bb:05:90:28:
         0b:97:b0:fb:84:ed:81:97:f1:66:df:1f:8d:75:f2:22:e8:f5:
         cc:f5:dd:2c:df:5e:9f:0e:7d:04:ec:b4:d1:da:fb:b2:15:d3:
         16:b6:a4:ed:55:bf:9a:1f:25:c3:7d:12:51:42:8c:5b:2a:74:
         7a:0f:88:1c:92:5c:14:d9:9b:58:59:d1:75:8f:bd:30:e5:c1:
         d2:42:64:5a:31:79:fb:70:80:81:a6:ba:d5:1e:cf:8e:bc:e1:
         86:e3:f4:df:49:86:5b:cf:7c:c6:38:7c:03:da:8b:bd:50:b9:
         98:ef:1f:5a:02:5a:a1:d6:ac:d8:49:71:81:ba:9f:45:49:69:
         e2:1f:4a:a0:d5:39:56:d9:80:63:e3:49:9c:f6:58:c0:fa:37:
         e3:a2:38:42:6f:7b:fa:07:79:a5:f4:e6:ed:8a:de:7a:2d:0e:
         52:30:86:c4:e5:e2:3a:cd:25:f8:7b:cf:9f:cd:a4:78:a1:f6:
         84:81:cb:f0:5f:bd:68:35:fd:69:05:c0:58:1c:d3:af:8e:62:
         89:31:68:4c:e1:01:45:65:26:36:97:2b:32:8b:a5:18:97:48:
         86:de:26:0c:19:b4:8d:b1:e6:4f:b7:f6:59:8c:f1:ed:b3:29:
         81:e1:01:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:55:43 2026 by rpki-client