Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File:                     1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier:          bt0mzf53lWp6aIZe7RdsHcuKZMSK0/l8eW6J5Pea+N8=
Subject key identifier:   23:68:B0:C5:CC:24:57:37:37:2C:C1:33:76:E0:BD:24:96:00:04:5B
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer:       /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial:       019E30E008C8F4AD67168AF68DD381B036A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number:          18A1
Signing time:             Sat 16 May 2026 13:00:48 +0000
Manifest this update:     Sat 16 May 2026 13:00:48 +0000
Manifest next update:     Sun 17 May 2026 13:00:48 +0000
Files and hashes:         1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: /mMIs4SeVZFi+3xj2hDS/mRkKvd+XxyccUlfP2kIeeM=)
                          2: pXi_lWorquYMeFo_GByXEjAC2iQ.roa (hash: C5ppARZwdDpqOjifyYQPpcbZiTRFDLNkGmS29XOlq5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:08:c8:f4:ad:67:16:8a:f6:8d:d3:81:b0:36:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
        Validity
            Not Before: May 16 13:00:48 2026 GMT
            Not After : May 17 13:00:48 2026 GMT
        Subject: CN=2368b0c5cc245737372cc13376e0bd249600045b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f6:67:a0:e9:e2:74:2c:2b:b7:f4:b8:71:56:
                    57:e4:d6:3b:47:e1:e2:7f:a2:a8:0e:ee:a9:e5:d9:
                    9c:39:d3:6b:38:23:36:78:2b:3b:37:05:8c:19:ee:
                    fe:64:91:81:6a:e3:66:e8:c9:c4:bf:9e:9d:fe:70:
                    84:de:1f:dd:4f:b7:27:3e:ba:23:4d:02:e5:35:1c:
                    ba:59:f9:a7:c5:bd:a3:0e:0e:2b:f4:b3:c7:46:1e:
                    60:f3:e5:1f:74:b5:6a:4b:b5:00:67:b5:24:cc:6e:
                    6c:76:7b:92:49:a7:a0:7b:0e:ed:63:5c:5b:5d:3d:
                    9d:a8:e2:69:f8:80:28:33:0d:ca:31:7b:3d:ee:88:
                    0e:0d:59:e9:6c:25:d5:b2:00:d7:3c:8a:f7:f5:d4:
                    39:a7:ef:9c:98:b7:d6:bb:20:4d:12:ae:d1:76:83:
                    af:b6:0a:18:59:2e:61:f2:52:fa:67:1f:f5:76:ac:
                    2e:0f:1d:67:68:67:b7:cc:8c:80:d2:d6:ab:2d:a4:
                    32:e7:21:9e:4a:af:0f:d7:31:5d:ec:05:59:ab:69:
                    13:14:c6:3a:ac:00:f4:cd:ca:30:32:6d:e0:8d:d9:
                    8c:18:30:02:5e:0c:c4:77:68:b1:02:d3:d3:7d:6d:
                    1c:e2:94:3e:9f:7a:62:b2:ce:62:1a:af:b8:18:3e:
                    0d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:68:B0:C5:CC:24:57:37:37:2C:C1:33:76:E0:BD:24:96:00:04:5B
            X509v3 Authority Key Identifier:
                keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:13:c4:73:10:7c:fa:01:0f:73:50:c9:7b:c1:61:eb:b7:
         d9:15:b4:1b:20:5f:e8:98:00:6a:09:5f:94:22:ba:a1:46:45:
         84:d0:1c:a6:de:0a:fa:51:28:c1:a2:2f:7d:78:58:4e:2b:7a:
         2a:47:58:3c:cc:92:d5:d2:af:2c:1f:14:19:2d:76:12:27:c0:
         fb:fb:4a:db:2a:d8:38:97:2e:44:91:3c:69:d8:dc:32:1d:b8:
         59:7d:80:2f:a5:8b:c6:83:69:8b:3a:6d:b7:1e:88:cf:15:b8:
         f8:94:26:47:26:33:49:c8:9c:08:f9:9e:9e:8f:29:7b:4e:42:
         ab:b2:09:84:e3:ec:d4:34:ad:25:0f:82:8d:35:f2:33:82:89:
         2c:be:ef:dc:52:35:5b:97:34:e6:19:56:29:56:d4:f9:48:03:
         eb:33:ec:6d:ca:fd:9e:4e:e8:6f:ad:81:a3:d7:cf:43:23:cc:
         60:d6:8f:8b:30:66:bb:39:10:d8:21:1d:a8:2d:97:97:85:43:
         b9:f3:59:cb:b8:b7:65:83:3e:76:51:d0:a6:f5:d9:b7:43:9e:
         e1:ca:9f:3f:cb:f3:bc:a2:46:c2:ae:f6:54:63:7b:da:a0:5f:
         ec:d0:5e:81:98:77:c2:a9:b3:75:06:47:6b:71:ac:07:09:ed:
         b4:87:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:13:56 2026 by rpki-client