Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
File:                     1-uJ7jB3msWHHmKt7hRU9a6N5774.mft (raw, json)
Hash identifier:          YRBYkC5Oz5htdvQzriDSafAOQ8Dr9ef1mB2365WdFsc=
Subject key identifier:   DB:53:4A:12:EF:7C:E6:26:22:16:91:AE:1C:7F:0F:A4:34:0B:EA:31
Authority key identifier: FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE
Certificate issuer:       /CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
Certificate serial:       019E30DFFB1F791F36F1779825E1B5EEEF12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
Manifest number:          0838
Signing time:             Sat 16 May 2026 13:00:45 +0000
Manifest this update:     Sat 16 May 2026 13:00:45 +0000
Manifest next update:     Sun 17 May 2026 13:00:45 +0000
Files and hashes:         1: 1-uJ7jB3msWHHmKt7hRU9a6N5774.crl (hash: kba8dh0VrEsd3KJKaVDCNEI2ie4x4vxPTlY78IkLuzw=)
                          2: lRWtCCIDuQJq2Ldkhpx2iidtBtA.roa (hash: m3V7ZxeKJCHLbCgiwkcpzW9KXHJYWP9eJffVKGhevf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:df:fb:1f:79:1f:36:f1:77:98:25:e1:b5:ee:ef:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae27b8c1de6b161c798ab7b85153d6ba379efbe
        Validity
            Not Before: May 16 13:00:45 2026 GMT
            Not After : May 17 13:00:45 2026 GMT
        Subject: CN=db534a12ef7ce626221691ae1c7f0fa4340bea31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:52:f1:7e:9a:18:5d:26:16:92:87:57:07:
                    22:0c:65:e7:6e:54:52:8b:f0:85:9a:46:b0:9a:9c:
                    e7:e3:7c:46:29:59:de:04:b0:4d:6c:e1:c3:37:4a:
                    18:ef:a0:89:70:1e:ec:9f:52:e2:fb:9e:5f:e7:4a:
                    f6:3e:89:19:a4:13:57:8e:bf:0f:50:e6:4a:18:0f:
                    0f:e4:84:e6:7f:71:fb:22:58:e7:37:ba:fd:c8:94:
                    e7:76:71:17:3a:f4:8a:86:32:10:01:76:f3:99:b6:
                    d3:1d:69:db:5a:a6:25:77:91:1b:c8:7d:cf:f6:27:
                    21:d5:a8:04:c9:7c:99:63:18:3d:6b:77:d2:38:be:
                    3c:45:8b:1c:8f:35:9c:3a:4e:b4:5d:4d:6a:7f:e7:
                    e7:34:c7:4c:33:f7:bc:a2:37:8f:d3:55:7b:6e:72:
                    32:b3:88:e1:e7:1b:3b:f8:0d:e2:99:f7:08:ed:f9:
                    6a:a9:da:b5:3e:8f:a7:97:ca:ca:2e:3b:30:bd:46:
                    9a:50:1d:e7:33:dd:ba:80:af:5f:a6:11:51:a6:91:
                    fc:90:b0:ef:b3:2d:41:2e:9b:d0:88:5e:bc:6d:16:
                    8c:a8:9f:46:7f:1e:f7:57:71:b9:14:26:f4:ac:15:
                    8a:f7:03:62:b1:1c:55:41:bd:1b:82:0d:54:4e:5b:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:53:4A:12:EF:7C:E6:26:22:16:91:AE:1C:7F:0F:A4:34:0B:EA:31
            X509v3 Authority Key Identifier:
                keyid:FA:E2:7B:8C:1D:E6:B1:61:C7:98:AB:7B:85:15:3D:6B:A3:79:EF:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uJ7jB3msWHHmKt7hRU9a6N5774.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/942efa-18a5-4649-9929-7be713679608/1/1-uJ7jB3msWHHmKt7hRU9a6N5774.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:9e:e0:d5:b0:da:ca:ee:55:5e:18:b3:78:ea:1a:6b:de:dd:
         5e:bf:f3:8c:ed:61:e0:36:d3:3c:61:a7:8d:07:7f:5c:51:56:
         48:ca:60:1c:7b:1a:97:19:3d:16:a2:54:ff:7c:d7:65:dc:ac:
         a6:2e:69:47:76:41:c2:fd:a9:8c:22:93:89:e1:3f:88:05:8f:
         8c:cc:29:61:93:3e:bf:54:22:8e:68:75:65:50:d2:b0:61:f4:
         24:8b:c2:72:3c:1c:c6:b7:9b:5e:ce:3d:cd:30:50:1c:ae:be:
         d1:97:f1:27:b5:8d:78:a8:15:b6:d0:18:8a:95:fd:e7:3e:fb:
         c6:ea:0b:75:f0:52:fa:69:c0:b4:f5:10:de:ef:d8:e9:44:2d:
         ae:f0:b2:53:4b:d5:df:ac:1c:df:de:3a:27:ef:d8:2d:b8:e6:
         8f:1b:46:9c:8f:0b:77:de:18:fb:56:64:15:c9:1a:5c:07:36:
         0f:ab:d7:f4:db:a6:69:bd:da:31:cb:95:85:ac:07:72:b8:27:
         ad:57:9c:5d:56:8f:61:d5:21:de:db:5e:fd:29:33:37:ff:36:
         88:bc:30:5b:b2:95:53:e9:d7:de:a7:ea:6d:86:d0:3e:00:75:
         39:71:61:85:31:14:7f:17:ca:66:34:76:19:4c:85:67:a1:67:
         d8:00:94:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:41:05 2026 by rpki-client