Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
File:                     Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json)
Hash identifier:          fjwnzRfQoefe2UGVoFcVZXvAFYqlfXXZGeB9qT2XKWs=
Subject key identifier:   C6:7B:D3:5F:47:27:42:11:25:83:F7:D4:8B:96:A1:5D:F4:33:C9:11
Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8
Certificate issuer:       /CN=15af072f9e156abc20c468498e2323152c736ae8
Certificate serial:       019F28ED4E0E33CCAD82E0AF6DFD8AD7530B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
Manifest number:          18D8
Signing time:             Fri 03 Jul 2026 17:01:08 +0000
Manifest this update:     Fri 03 Jul 2026 17:01:08 +0000
Manifest next update:     Sat 04 Jul 2026 17:01:08 +0000
Files and hashes:         1: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: 3PYrKE4JliKXljM64eIloHqiRH4n2YxbunW1MSSUsKY=)
                          2: HvJoh_J563JWnIBpkcZqWaGiBuw.roa (hash: 5EmXJWWwzgqHx3fgQLLAjtkhJ90g8NJqu27jUl1kKhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:28:ed:4e:0e:33:cc:ad:82:e0:af:6d:fd:8a:d7:53:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8
        Validity
            Not Before: Jul  3 17:01:08 2026 GMT
            Not After : Jul  4 17:01:08 2026 GMT
        Subject: CN=c67bd35f472742112583f7d48b96a15df433c911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:74:e1:4a:b2:25:98:d2:e8:b8:a5:f4:df:
                    24:97:08:1c:4c:98:b0:a8:1f:4b:36:ef:16:ce:f2:
                    9e:37:3a:b8:da:e7:91:77:fb:b0:8b:04:f9:03:4a:
                    72:60:91:c7:02:af:65:5a:7d:78:4c:d4:2f:1e:a9:
                    ea:e2:8b:6b:df:d7:6a:bf:e3:e7:54:ca:98:10:56:
                    57:8a:85:1d:48:2e:e1:50:03:77:2f:18:cd:77:9f:
                    b2:91:46:ee:a6:66:41:02:0d:a1:3e:e2:62:31:0f:
                    93:18:83:0b:ad:b0:06:82:e0:fb:a1:89:11:0c:e8:
                    2f:9d:d3:67:98:5d:c4:68:6d:e6:87:8b:5e:7a:a8:
                    b3:9a:9d:61:49:04:b7:1b:cc:95:75:20:ac:4b:63:
                    40:33:8a:af:5b:42:ab:5c:06:50:23:76:ae:c0:9e:
                    09:f0:4e:0c:1f:d2:a4:45:1d:5d:85:ed:27:de:a4:
                    9f:bb:9b:c8:cc:37:9b:89:c2:7e:1c:01:a0:f9:40:
                    c4:5a:de:ba:2f:05:3e:c5:7d:f2:25:29:db:ca:a5:
                    5f:db:de:66:5c:94:a5:ee:57:4f:ad:41:c3:02:17:
                    8f:e5:30:26:72:d0:c1:8a:8b:95:14:bb:27:eb:0d:
                    a5:55:0f:3d:de:e8:c5:c2:ba:05:c1:e5:6a:5e:ce:
                    5b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7B:D3:5F:47:27:42:11:25:83:F7:D4:8B:96:A1:5D:F4:33:C9:11
            X509v3 Authority Key Identifier:
                keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:7f:2d:67:06:a8:7f:8e:90:bf:1e:f4:7a:f3:9b:29:ab:3a:
         ab:b2:19:13:b7:94:76:29:03:7d:08:7d:5e:a7:49:7b:5e:f9:
         31:e1:ae:37:f1:f3:a1:dd:8b:89:2f:f8:1f:a9:63:5d:5c:5c:
         99:f1:c0:ee:25:5e:7c:9a:e4:6b:69:0c:7c:a3:a4:0a:d1:1a:
         3a:5d:76:4d:32:2d:ca:1c:a4:94:2c:76:98:eb:67:2b:27:fb:
         90:e8:6b:e8:56:a3:bb:73:67:52:d9:e5:80:4d:cb:f8:d2:04:
         96:fe:b0:66:93:51:38:07:07:93:59:47:5d:04:c2:72:e8:c5:
         e2:8e:88:4b:40:84:8e:6d:1e:a9:dc:9f:69:95:a8:22:cb:2d:
         e4:30:a8:a1:88:73:34:c6:65:de:d7:89:9c:3c:c1:40:51:23:
         39:51:26:53:0c:c2:52:4a:18:15:0e:7c:1b:8e:ed:08:05:0a:
         21:ba:7a:fa:23:c4:9f:c9:1b:ad:a9:0b:bf:7f:6e:2e:37:94:
         d1:ec:ed:df:73:fb:78:16:1e:b7:e3:d4:19:97:5d:55:a1:50:
         ec:93:f2:2f:0f:e9:d8:9b:f8:f0:5c:72:8e:b8:5b:29:95:51:
         3b:a8:44:63:36:be:a3:e0:f1:9f:c7:a5:e6:04:ac:ab:3a:81:
         cb:fc:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:45:25 2026 by rpki-client