Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
File:                     1-HxYZGLD8_1-YngPTTPxi2ppusE.mft (raw, json)
Hash identifier:          XvXBsYOCubN2iaYbNtGXgq6Ok2sCbBBhSiml5ZUQ18s=
Subject key identifier:   9F:26:1C:79:3E:B7:7C:D1:22:8F:71:E9:C9:37:03:B7:71:6E:A2:13
Authority key identifier: F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1
Certificate issuer:       /CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
Certificate serial:       019E30E01985A87257B29F603983D24FC427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
Manifest number:          0A4C
Signing time:             Sat 16 May 2026 13:00:53 +0000
Manifest this update:     Sat 16 May 2026 13:00:53 +0000
Manifest next update:     Sun 17 May 2026 13:00:53 +0000
Files and hashes:         1: 1-HxYZGLD8_1-YngPTTPxi2ppusE.crl (hash: dIHbirF1InJNLfLN19V/Y2GmTJk6ziGcUK0ytbASPA8=)
                          2: 93kiNNYoQc853Cz6ue8qioc2i3U.asa (hash: WLUYaARSKUVqmQ7ak9029kT0kjkhtKg9e5NIskAm7E4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:19:85:a8:72:57:b2:9f:60:39:83:d2:4f:c4:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f87c586462c3f3fd7e62780f4d33f18b6a69bac1
        Validity
            Not Before: May 16 13:00:53 2026 GMT
            Not After : May 17 13:00:53 2026 GMT
        Subject: CN=9f261c793eb77cd1228f71e9c93703b7716ea213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:77:a7:9d:86:0f:d4:80:70:0a:92:c2:6e:fe:
                    6c:f3:18:7f:ee:8a:af:ea:5c:d2:12:e0:80:90:a4:
                    1b:d6:c3:05:45:c3:c1:d4:2f:ca:d4:40:72:0e:b9:
                    d3:10:65:a9:eb:f5:65:f7:b3:f4:41:42:b9:94:fe:
                    ad:77:e5:22:62:05:3b:48:5d:2d:12:7c:f8:70:11:
                    40:ed:3d:9a:0c:42:99:5e:6e:db:a1:3d:92:78:21:
                    50:6e:3f:09:11:02:a8:a3:54:65:02:0e:da:3a:0b:
                    d1:2f:c8:04:60:b0:9e:f9:fd:12:b4:f6:17:55:b9:
                    33:c3:ad:f8:f5:ea:eb:31:a4:5b:5d:7c:94:3c:33:
                    b7:65:8d:21:79:a9:33:d0:e7:77:99:8e:bc:80:f6:
                    41:df:f9:09:fa:89:4a:25:37:06:08:a6:43:07:87:
                    ee:44:a8:e6:52:40:25:be:6e:a9:61:3b:0a:a8:1f:
                    73:c5:2e:30:ef:72:d7:61:df:3f:87:18:56:16:ad:
                    76:4b:d1:e2:6d:4c:2f:50:c7:0d:86:f5:96:dc:30:
                    20:4f:a2:90:c3:c9:9a:25:c7:75:c7:7a:4c:6c:df:
                    f3:cd:96:08:33:ca:d1:59:9b:73:a4:98:bc:18:00:
                    92:e9:2d:d9:ac:19:2f:97:05:e9:83:94:51:26:9a:
                    ef:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:26:1C:79:3E:B7:7C:D1:22:8F:71:E9:C9:37:03:B7:71:6E:A2:13
            X509v3 Authority Key Identifier:
                keyid:F8:7C:58:64:62:C3:F3:FD:7E:62:78:0F:4D:33:F1:8B:6A:69:BA:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HxYZGLD8_1-YngPTTPxi2ppusE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f99e9d-7a8e-40da-889b-e3acca5ebff0/1/1-HxYZGLD8_1-YngPTTPxi2ppusE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:88:7e:fc:f7:8e:40:e7:83:1d:61:2f:4c:6e:fe:69:0e:0d:
         ef:16:d1:6a:15:85:b6:4e:8d:7d:54:36:c2:98:35:31:50:aa:
         d1:9c:0a:d8:41:b6:1f:8b:be:c4:62:47:48:9e:74:9d:f1:a3:
         14:08:eb:bb:ce:58:07:c4:27:66:86:41:88:a2:57:99:80:59:
         bc:f4:a6:22:f6:69:ac:18:56:97:c6:93:69:e8:34:be:94:0f:
         4b:94:05:84:e0:9f:69:cf:44:81:84:d3:5b:50:01:50:18:0f:
         a7:6b:10:e9:b4:3b:55:f4:f0:0a:83:b5:03:5f:83:49:a8:9b:
         f6:7d:c5:e6:08:83:1d:df:34:d6:95:68:1b:80:41:a1:4d:ff:
         f2:9f:2e:39:a4:7c:54:f7:28:61:b0:25:c9:82:0e:f9:ed:a6:
         18:4a:2e:43:a4:71:f8:53:be:00:fc:cd:1e:75:fd:b0:41:2f:
         f8:31:8b:0d:f6:26:68:0d:8a:b9:3b:41:16:93:bd:4b:48:a5:
         cb:92:fa:08:44:a1:ee:fd:cb:45:e5:ed:37:e7:13:46:f8:ab:
         73:76:c4:07:e7:f1:49:c0:42:29:5e:d4:75:20:79:1d:50:fc:
         09:af:85:17:48:a9:2a:23:8f:04:57:c1:c5:0e:64:76:07:85:
         25:8e:25:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:23:16 2026 by rpki-client