Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File:                     1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier:          gtNRdt1VkAy5d2SLC0f77pE2KtPH5+fGVG9Pdvw+Ky0=
Subject key identifier:   87:F2:FF:01:62:E4:68:10:E7:CC:67:15:F1:7B:FA:3B:8D:B8:7D:08
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer:       /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial:       019E1CB50C33DC3505A7FEC7DBA22827D12C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number:          0884
Signing time:             Tue 12 May 2026 15:01:27 +0000
Manifest this update:     Tue 12 May 2026 15:01:27 +0000
Manifest next update:     Wed 13 May 2026 15:01:27 +0000
Files and hashes:         1: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: N9QJzVnNxPpj/GByx1aj2Nfvdt+60G89DEKMFAVD3ho=)
                          2: abVrM-FislRQr4Jmc_QgEdjxoJk.roa (hash: EdLdAhibmMBnrzkLj3SZLrtAjzaNkVfN1saf4F1Axa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:0c:33:dc:35:05:a7:fe:c7:db:a2:28:27:d1:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
        Validity
            Not Before: May 12 15:01:27 2026 GMT
            Not After : May 13 15:01:27 2026 GMT
        Subject: CN=87f2ff0162e46810e7cc6715f17bfa3b8db87d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c7:4f:87:80:2e:92:33:cb:e0:fc:f3:fa:3c:
                    c0:38:e8:07:e0:13:2e:60:e1:ab:a7:a6:1a:62:90:
                    27:89:77:07:7c:0b:91:46:73:e2:c2:c5:05:99:d8:
                    4c:9d:0b:18:ca:01:3b:bc:81:2f:57:2f:3d:b3:b7:
                    70:c5:73:ba:dd:7b:99:31:54:21:39:c1:e0:94:14:
                    94:24:6b:b7:f7:b7:b5:c6:a0:ae:0f:43:75:d1:28:
                    e0:00:8b:74:d4:17:03:97:a8:91:8e:1a:b0:1b:3a:
                    09:43:c9:24:27:68:6b:12:02:46:74:53:40:03:c6:
                    98:39:15:84:ed:d3:ae:fe:44:64:d3:06:8f:d8:8b:
                    10:fc:2e:ac:bf:22:c8:90:2e:77:9f:9a:55:39:16:
                    a3:42:b0:0c:b8:97:98:2e:8d:2b:e6:1b:3e:0f:07:
                    04:b0:86:fb:78:c9:26:af:36:e8:e3:10:0c:50:b2:
                    4a:e9:8c:45:0d:91:25:84:9a:5a:b0:4f:7e:73:f3:
                    36:d0:d1:67:e3:3e:0a:7a:40:be:25:9c:0d:f9:57:
                    25:91:09:45:c7:e5:88:ae:93:5c:fc:b1:03:97:03:
                    45:57:e4:92:5d:66:9d:37:30:6c:26:2a:72:e9:38:
                    e7:7b:be:c6:cf:00:27:8f:db:c0:ce:05:99:29:72:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F2:FF:01:62:E4:68:10:E7:CC:67:15:F1:7B:FA:3B:8D:B8:7D:08
            X509v3 Authority Key Identifier:
                keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:61:8c:c1:03:48:62:3a:88:0e:db:08:e1:46:20:cd:ef:
         86:12:06:0d:79:71:ee:45:ee:46:60:f4:a0:d0:3a:2f:23:a7:
         1f:ef:c5:05:bc:98:e4:76:d1:33:0f:4d:91:fa:ca:7d:59:d0:
         1d:4a:a9:9f:28:21:eb:de:87:bd:2b:93:f7:38:93:8e:4f:16:
         d5:20:38:25:c4:4a:77:c7:20:88:d1:e7:db:ab:63:6d:05:bf:
         96:8f:e4:9a:e2:63:34:12:d0:13:f0:b0:76:a9:14:4d:72:b6:
         11:e7:80:6c:92:ce:8f:fa:cb:7c:6a:16:4a:4e:7e:3c:aa:1e:
         e2:53:ca:e0:d0:2f:5f:8c:48:e8:c4:a0:73:9a:e3:e4:08:78:
         ab:e7:ed:6f:fc:65:51:5c:20:d8:33:84:75:68:b2:e8:da:ae:
         08:6d:4a:ea:1f:38:85:bf:53:94:8b:06:01:7a:38:b3:b9:af:
         f1:e0:c6:4e:4f:1c:0f:ce:68:21:96:a7:ef:a1:69:ea:cc:15:
         cd:c9:dc:1c:60:ee:04:2f:9d:9c:0c:02:be:69:ba:fb:f8:97:
         4a:b3:fc:7d:62:52:9b:d3:20:22:06:c9:5e:f6:5b:6e:bc:8a:
         65:ab:4a:1a:8c:2f:3d:6b:94:a9:47:9e:29:34:9b:fd:5e:7d:
         7a:04:ae:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:44:17 2026 by rpki-client