Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File:                     1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier:          R8fYBEs/lQdaVIJOITM021bRciMuW6Pesvuegak7QFU=
Subject key identifier:   75:47:60:A0:5B:10:DF:04:56:F2:AE:EA:FB:F4:D5:40:F8:41:AD:FE
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer:       /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial:       019E30046717A7D3365DB316E5055D4CBC14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number:          1645
Signing time:             Sat 16 May 2026 09:00:55 +0000
Manifest this update:     Sat 16 May 2026 09:00:55 +0000
Manifest next update:     Sun 17 May 2026 09:00:55 +0000
Files and hashes:         1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: g95i7jmLnjODUwY/ZzzMru41LMoi2jcoXQ3RQYGZoes=)
                          2: xMdg9tf8PX3rEEL_NSkeA_5BMoE.roa (hash: Fuv5QDlGS8lpVHre1lLFiZmSKdkP1J409k7DUxmhGPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:04:67:17:a7:d3:36:5d:b3:16:e5:05:5d:4c:bc:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
        Validity
            Not Before: May 16 09:00:55 2026 GMT
            Not After : May 17 09:00:55 2026 GMT
        Subject: CN=754760a05b10df0456f2aeeafbf4d540f841adfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:f4:c1:e3:bb:0c:be:4d:7b:f2:ff:17:b6:
                    ea:f1:d2:47:e2:f4:cc:44:3c:38:b9:75:26:5b:10:
                    c9:be:c6:b7:7a:cf:90:ff:41:42:7c:41:b3:7c:42:
                    cb:1e:b9:d0:b3:50:6b:3c:76:95:4f:10:15:b2:20:
                    86:f2:e0:08:1a:41:54:af:20:3e:93:7c:bf:1b:bc:
                    69:08:78:d4:5d:d9:1c:af:16:83:2c:1a:e0:24:1d:
                    b1:4e:01:5c:48:e6:dc:c6:33:cf:cb:2a:92:a8:fd:
                    7e:fa:00:eb:6c:ec:24:d5:16:c7:4e:14:b5:2f:af:
                    77:10:0b:fa:c6:93:84:72:69:77:e3:e5:62:9f:91:
                    88:da:5d:d5:8f:86:3d:8d:66:fd:24:b6:27:34:f0:
                    cc:3e:2d:bd:c7:dd:86:fe:a5:f1:a8:20:8f:93:37:
                    4b:57:93:d4:49:43:20:7d:6e:44:44:23:26:ac:bc:
                    fc:80:e0:72:5f:f5:8d:d8:53:3a:6c:e4:78:1b:ea:
                    7a:84:47:94:6f:c2:d4:68:10:0c:b2:78:d8:a4:ca:
                    81:4d:2f:70:fd:4f:e3:c3:a2:10:1a:fb:95:22:47:
                    86:35:17:eb:6f:26:c1:05:23:94:b6:b3:ea:f0:50:
                    cd:f3:23:31:5b:05:49:e3:28:f9:85:de:58:1d:af:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:47:60:A0:5B:10:DF:04:56:F2:AE:EA:FB:F4:D5:40:F8:41:AD:FE
            X509v3 Authority Key Identifier:
                keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:e7:85:65:ed:a1:43:a0:1e:f1:f9:df:e6:4b:98:23:96:7f:
         a6:60:ea:6d:84:8c:2f:f8:23:f8:a7:60:ea:70:ff:d9:ff:38:
         ea:c2:b5:6a:b8:05:b8:fa:6e:76:78:25:85:21:84:78:68:2f:
         8d:db:fb:de:7e:32:80:ec:a0:4e:c8:1a:3f:98:a6:22:2a:d8:
         1f:00:98:55:d6:8d:2f:b4:28:69:c1:07:84:2d:eb:eb:c0:87:
         3a:70:be:b5:af:97:3a:69:c9:ab:5e:4e:05:1e:3e:c3:1c:c0:
         60:09:cf:43:7b:11:d5:ef:27:9d:83:ab:a4:16:e4:41:9c:74:
         00:5c:99:65:ad:95:e6:04:2b:28:4c:d5:67:ae:b1:12:8b:c7:
         d1:4c:70:cd:9c:d0:6c:95:bd:3b:e2:08:35:63:52:7e:15:22:
         f0:73:c8:2a:37:58:1e:e7:18:2c:c7:c3:68:38:c8:eb:ea:a1:
         c3:0c:6e:03:fc:4c:be:5d:7e:a0:02:7e:f0:5b:a0:97:fa:66:
         db:61:65:c9:71:1e:2d:0a:28:9a:a1:66:c4:eb:99:d9:55:af:
         66:55:b8:62:6b:fb:ca:79:3b:d3:3b:ba:41:3e:97:b3:b1:2d:
         21:c9:bd:4f:90:ac:66:0f:68:cc:07:cb:11:9a:6c:cc:e0:a4:
         be:d5:68:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:18 2026 by rpki-client