Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
File:                     1oFRD_A-lUZKxySioFlNpAfwWwc.mft (raw, json)
Hash identifier:          FWJ1He+9TCYCa0YxZrNEEz7T+al86NxIRuTT3JZREfg=
Subject key identifier:   01:3F:A1:55:4A:0D:D4:FE:48:71:1D:2B:CF:8C:13:D2:2B:CB:5D:AF
Authority key identifier: D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07
Certificate issuer:       /CN=d681510ff03e95464ac724a2a0594da407f05b07
Certificate serial:       019E1C0FB94B417879B2A1A404E4F7641742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
Manifest number:          6E
Signing time:             Tue 12 May 2026 12:00:52 +0000
Manifest this update:     Tue 12 May 2026 12:00:52 +0000
Manifest next update:     Wed 13 May 2026 12:00:52 +0000
Files and hashes:         1: 1oFRD_A-lUZKxySioFlNpAfwWwc.crl (hash: bHqfPza2KaNZKWtcChnd7/fVRUwRvpS7UzBbkWL8aMk=)
                          2: DjQMqg2kffWJVFlf9YdB26kT8mU.asa (hash: Cp0XT0ge1mZD2iIW7l9FB0V1yVWibAjRZhffKMIEnu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:b9:4b:41:78:79:b2:a1:a4:04:e4:f7:64:17:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d681510ff03e95464ac724a2a0594da407f05b07
        Validity
            Not Before: May 12 12:00:52 2026 GMT
            Not After : May 13 12:00:52 2026 GMT
        Subject: CN=013fa1554a0dd4fe48711d2bcf8c13d22bcb5daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ac:9f:db:82:f9:de:37:04:97:22:d6:20:8c:
                    2c:bd:de:46:24:3e:bb:1a:6e:0c:af:39:f5:e3:2c:
                    41:26:dd:44:b2:5e:c4:9c:7a:7f:67:2b:4c:8b:94:
                    7c:c1:1e:19:c2:8f:2c:b6:b7:fc:58:c0:b4:fc:29:
                    2c:6e:55:91:1d:b3:c5:2f:5a:14:cd:50:ef:e1:c0:
                    c4:ae:e0:7b:57:92:68:70:2d:1e:04:30:e3:a7:60:
                    d2:bb:0b:42:db:d2:cd:87:1b:cf:80:5a:d8:50:d8:
                    7f:ed:1e:be:2c:cd:04:24:7a:48:46:a3:47:a6:e1:
                    1f:a9:5b:f8:47:6b:a9:8f:81:52:7a:7a:ec:ba:91:
                    64:e7:53:df:31:8f:1d:36:f1:b9:69:94:1c:29:dc:
                    c5:f1:60:91:fa:77:48:54:b9:91:ca:03:03:aa:68:
                    73:02:a3:d8:15:7c:1e:42:6c:43:38:fe:ec:01:bd:
                    7a:b2:5d:19:47:5e:1a:d9:76:e8:d8:6f:47:58:a5:
                    a9:69:3f:f5:0a:b8:f6:22:50:66:2d:dd:91:c7:57:
                    1c:ff:00:b5:88:fb:5f:bb:da:0e:1c:af:bd:65:21:
                    eb:4e:31:77:8c:77:61:1d:58:50:0d:3e:e1:e1:a3:
                    4f:0c:32:5b:87:98:8e:80:8b:7d:4b:c3:78:f5:d7:
                    79:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3F:A1:55:4A:0D:D4:FE:48:71:1D:2B:CF:8C:13:D2:2B:CB:5D:AF
            X509v3 Authority Key Identifier:
                keyid:D6:81:51:0F:F0:3E:95:46:4A:C7:24:A2:A0:59:4D:A4:07:F0:5B:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oFRD_A-lUZKxySioFlNpAfwWwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5cac2e-6eac-4b65-909b-4c20f2a98315/1/1oFRD_A-lUZKxySioFlNpAfwWwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:e5:df:4f:cd:05:d9:43:d8:a9:cc:ae:fb:b1:7c:1f:e0:fb:
         e0:5e:87:fd:46:8b:fd:d2:48:ed:86:1b:93:6d:55:4a:87:fb:
         a1:8e:d5:82:3c:dd:5c:35:c3:98:f5:c4:88:de:7f:04:f3:6a:
         fe:fc:59:29:19:4c:e5:9c:bd:9c:95:d6:b6:bc:6d:4f:02:49:
         f3:1d:17:ea:78:df:36:78:48:96:5b:fe:d0:14:03:5d:73:0e:
         79:4a:0f:24:3a:22:07:be:6a:ee:36:e2:ba:74:b0:04:2b:ce:
         6f:db:29:9a:4b:d1:79:a8:8d:50:0e:2f:74:78:fb:82:e2:86:
         84:a1:67:ee:19:61:41:fa:d7:c9:95:89:da:df:93:23:ef:22:
         87:bd:37:86:79:94:ae:f4:53:d6:1e:c3:00:a0:03:cd:87:87:
         9e:ef:15:ed:94:9b:9c:cf:a9:ae:5f:96:64:1a:20:bb:39:a0:
         a3:ef:eb:a5:bf:ad:94:e6:f3:19:ec:1c:2d:2b:28:94:b5:d5:
         f8:89:58:0e:6b:33:99:ea:88:86:1b:02:dc:e2:8f:cc:04:dd:
         3d:72:71:68:df:67:4a:4c:75:63:d5:b9:83:4d:61:a1:0c:19:
         de:4e:d6:c8:46:ea:08:e8:92:47:a3:81:22:f0:9e:86:3a:47:
         cf:dc:a8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:08:17 2026 by rpki-client