Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File:                     1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier:          faLDrYXmlT86xAXO0unxyTA5qLAK7780sBCmPJmnaAY=
Subject key identifier:   61:0A:EF:C5:B7:BA:F8:92:82:83:D6:21:7B:D1:B9:9A:A6:C0:1F:BC
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer:       /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial:       019E1F10EA5E7F835A6B4F29419BE6421C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number:          1903
Signing time:             Wed 13 May 2026 02:01:02 +0000
Manifest this update:     Wed 13 May 2026 02:01:02 +0000
Manifest next update:     Thu 14 May 2026 02:01:02 +0000
Files and hashes:         1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: OKu2hKObqoERKGwLbmkWPyiE3Oc8q+Kp85K0wk7boo8=)
                          2: x-xatRQzbMJq2QoB7VpakVl_dyQ.roa (hash: FUFQzFRUVGUSKSoKEZzjy+oCv2v1jEvkTjPlxRoTw4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:ea:5e:7f:83:5a:6b:4f:29:41:9b:e6:42:1c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
        Validity
            Not Before: May 13 02:01:02 2026 GMT
            Not After : May 14 02:01:02 2026 GMT
        Subject: CN=610aefc5b7baf8928283d6217bd1b99aa6c01fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:47:70:40:47:f1:2e:13:13:17:e4:ae:76:
                    a1:d5:c6:1c:37:23:7d:0b:4c:39:2a:4c:5a:75:ca:
                    ac:62:c6:e0:6c:c9:25:54:35:e8:bf:65:fa:ac:50:
                    72:fd:cf:24:a8:e0:fb:b3:94:22:e7:29:08:f9:4d:
                    f7:66:23:9b:f6:fd:6e:e2:56:af:63:13:30:a7:67:
                    4c:5d:f6:b0:e3:35:20:cf:57:2c:fd:b8:0f:e7:11:
                    04:c3:f6:40:57:15:d2:cd:b9:a7:72:fc:c0:f0:a1:
                    5b:77:35:07:1b:4a:b2:30:11:af:65:f4:2d:ef:d6:
                    78:89:bb:69:cc:d6:e0:85:fb:9f:fb:33:77:38:de:
                    0e:16:e5:26:06:b1:8f:77:8c:22:1e:63:48:f3:e9:
                    1c:db:c8:cf:73:28:14:38:39:9d:88:60:d8:95:c1:
                    ff:c3:7a:11:70:3e:d8:56:7c:de:e7:28:95:e8:2d:
                    a5:d1:82:51:01:a0:dc:ab:57:d4:c6:6c:5c:3d:6d:
                    2c:ac:e4:91:2e:f0:d4:b9:5c:e5:80:94:f3:13:99:
                    96:0d:0d:5a:d2:9f:80:c1:84:4e:cd:84:39:2a:d6:
                    d1:e2:23:d1:43:05:77:9e:e7:a0:e6:cb:bc:6a:79:
                    db:ea:d1:bb:59:7c:1e:49:f5:97:69:36:d1:0e:b7:
                    d1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0A:EF:C5:B7:BA:F8:92:82:83:D6:21:7B:D1:B9:9A:A6:C0:1F:BC
            X509v3 Authority Key Identifier:
                keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b3:20:bb:15:87:c5:e1:57:ff:e9:2f:d0:9f:93:d7:9a:f2:
         c9:9c:80:00:4f:a6:22:d6:ef:15:7f:72:63:e3:4d:aa:3e:b5:
         4a:3b:c5:37:06:ab:06:3f:6b:df:a5:b4:99:ba:11:5b:a9:89:
         5a:65:bc:fb:0b:89:1f:fe:f1:ee:dd:12:75:f0:a7:22:82:fe:
         cf:d0:5f:1a:35:40:14:98:fe:5c:b2:15:50:5e:76:c2:36:09:
         25:7d:04:0f:b3:0c:93:2e:e9:8c:e4:01:b3:e6:43:01:02:af:
         4d:d6:2a:ef:52:bf:65:59:35:d0:9c:6a:ba:c4:2a:92:b6:0e:
         44:ac:cc:27:5a:ba:6a:42:19:fa:c9:da:d5:31:66:f2:b6:79:
         0c:68:ae:f3:18:7d:5d:5c:5e:fe:57:cb:e2:f2:26:1b:3b:63:
         ed:85:7b:f1:0c:82:ac:53:93:f5:36:fa:0a:f2:93:41:69:17:
         63:f2:27:b5:f7:3b:9e:3d:df:0e:00:c5:c8:ee:f7:3e:c0:0e:
         55:3d:66:55:d8:a2:93:98:c5:02:ca:1c:43:09:61:2e:e8:ad:
         18:d1:43:09:29:28:d4:69:11:a2:68:7d:6d:98:39:5a:dd:dd:
         fc:6b:6d:78:03:40:f9:6f:44:2f:04:e8:7d:bb:70:c6:eb:07:
         7d:20:17:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:09:04 2026 by rpki-client