Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File:                     Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier:          GtC3YRhNYM4C09N1a1zkCOWwdPt0kXKX3HEHQ1mTQh0=
Subject key identifier:   ED:32:B3:7B:19:E3:27:3D:A4:A4:FC:E5:25:A9:FB:38:9F:2C:7D:34
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer:       /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial:       019E2BF11EA3A1418AEEA31554B23213EC9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number:          1855
Signing time:             Fri 15 May 2026 14:01:22 +0000
Manifest this update:     Fri 15 May 2026 14:01:22 +0000
Manifest next update:     Sat 16 May 2026 14:01:22 +0000
Files and hashes:         1: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: 4HI0mxTCC/1S/I0qj4ByQWuZESkfzli5HLlnoH7UZ0M=)
                          2: HvJoh_J563JWnIBpkcZqWaGiBuw.roa (hash: 5EmXJWWwzgqHx3fgQLLAjtkhJ90g8NJqu27jUl1kKhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:f1:1e:a3:a1:41:8a:ee:a3:15:54:b2:32:13:ec:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
        Validity
            Not Before: May 15 14:01:22 2026 GMT
            Not After : May 16 14:01:22 2026 GMT
        Subject: CN=ed32b37b19e3273da4a4fce525a9fb389f2c7d34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0a:49:a9:0d:06:02:68:a1:45:4f:cf:ed:78:
                    57:ba:25:dc:23:6f:4b:cf:f0:61:c3:83:a0:84:6e:
                    ba:7e:2b:ea:8c:78:2f:97:dd:7f:fd:c9:1f:1e:18:
                    0b:a2:0b:a3:f3:10:fe:f2:a1:67:2e:29:ef:d6:39:
                    e2:b2:b7:72:5f:58:58:ad:2b:a1:72:a1:af:df:53:
                    19:7c:e5:df:ca:d2:67:79:d6:5e:a5:1e:ae:7e:e5:
                    c0:3c:81:a5:1b:1f:4b:2c:02:65:5d:4d:9b:9a:90:
                    5d:80:fa:2e:1a:3c:5f:60:f1:a1:3e:77:57:40:ac:
                    9d:ac:d2:12:e6:94:4f:b3:bb:96:85:63:06:67:f3:
                    f5:f9:8e:d2:c6:e7:2c:4c:95:49:58:c8:65:00:84:
                    90:07:07:81:2e:09:85:4b:ea:21:87:92:6d:15:d5:
                    53:fb:51:f5:a1:dd:d1:76:b6:74:45:33:a1:6e:b2:
                    7e:57:b1:aa:21:52:95:1e:d7:43:77:d6:d2:78:f0:
                    33:f0:cc:65:cf:b1:38:9e:4b:43:ed:fc:16:0d:0e:
                    6d:a1:bb:9d:e5:ad:e3:08:62:5b:f8:e0:8c:49:87:
                    84:5b:08:7d:3f:06:18:11:08:01:8f:e5:25:ec:e5:
                    10:88:99:b8:da:5b:7b:87:4a:31:91:ed:1c:f5:f8:
                    ad:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:32:B3:7B:19:E3:27:3D:A4:A4:FC:E5:25:A9:FB:38:9F:2C:7D:34
            X509v3 Authority Key Identifier:
                keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:77:62:47:57:54:2a:b9:cc:45:c9:1c:62:a9:35:db:8c:97:
         e4:25:6e:b2:fc:19:5a:41:7d:30:bd:a7:55:c7:b7:df:29:17:
         1e:6d:9e:01:88:4f:de:0c:01:d6:8b:ea:05:9f:e4:1d:4f:f6:
         d8:d9:54:ad:51:f2:e6:1c:3c:fa:8e:4d:c8:a1:95:0d:65:43:
         a3:13:aa:65:c9:71:8c:86:62:d5:6c:52:fd:84:aa:5e:cd:64:
         d3:73:4f:f2:5b:f1:ca:54:96:31:fc:8c:83:2e:24:5a:5c:3b:
         0b:e7:18:5a:ea:76:9d:72:d5:cd:ff:47:95:d2:57:2e:46:93:
         25:2b:c8:4d:f4:f6:b2:26:bd:69:f9:97:e2:b7:fc:4a:66:b1:
         3d:83:96:bd:ff:86:4a:80:94:79:3e:59:33:fb:8c:8f:02:f5:
         3c:56:8a:6e:99:22:2e:45:90:d0:48:3e:a9:68:9c:6b:a6:cc:
         81:c3:3f:e5:0a:70:68:f8:8d:f0:2d:81:c1:40:d9:7b:a3:7c:
         70:d6:ec:23:4b:2b:b5:a5:2f:ee:a5:32:02:c2:da:b1:d8:62:
         c1:34:63:e9:85:2d:0b:5f:5f:81:af:c4:9c:ae:eb:45:62:f4:
         3a:38:ac:75:6a:71:fe:36:e0:89:ca:fc:e0:ec:0d:c5:6d:e7:
         5c:58:c2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:53:16 2026 by rpki-client