Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File:                     1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier:          CdR7He1b+6gpNEdYLa8yS8kbCPaOvBYbtNcfapj/fjQ=
Subject key identifier:   75:FD:3E:4A:52:BF:56:8D:F2:AC:31:1D:AF:94:91:9F:1F:2C:AB:2B
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer:       /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial:       019F17C341D64047EB2F684B8586328DC2EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number:          14B5
Signing time:             Tue 30 Jun 2026 09:01:40 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:40 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:40 +0000
Files and hashes:         1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: fzNBmGWmX1V6IbhbM0s76H4H8nSM3+au8uvYFOjAWRk=)
                          2: FMKR3CaUlRK9liJAv-tSvgFdbCg.roa (hash: khLsIGfKCgMHIIEDU5+wjoIrC4R3I6oBgk6LSwjYqtg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:41:d6:40:47:eb:2f:68:4b:85:86:32:8d:c2:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
        Validity
            Not Before: Jun 30 09:01:40 2026 GMT
            Not After : Jul  1 09:01:40 2026 GMT
        Subject: CN=75fd3e4a52bf568df2ac311daf94919f1f2cab2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:94:99:a7:10:8d:ac:38:1f:d1:c4:06:20:a8:
                    84:84:1a:30:b3:ef:31:4f:16:5e:7b:f3:b0:7c:24:
                    92:10:3b:d8:51:54:ef:b8:d9:85:2e:95:03:ee:9c:
                    e8:74:91:87:75:65:ba:9b:1b:af:cb:36:1b:1f:77:
                    26:d5:e2:98:89:47:02:55:69:84:64:b7:c1:bb:e6:
                    db:f7:c5:a4:8c:ad:34:0d:07:d0:de:d1:fe:03:29:
                    e1:e2:63:ed:8b:77:7e:74:04:3e:3a:8b:01:86:90:
                    ab:07:c5:1a:99:cb:90:44:6f:f1:5b:ac:a3:9a:bd:
                    be:b7:f0:e3:48:ed:6a:00:40:df:c8:55:33:88:7b:
                    a2:8f:c6:b6:a5:52:35:b8:4c:57:23:7e:47:b5:75:
                    f4:8d:54:cc:bc:f8:87:df:64:fc:87:9c:e6:a9:c4:
                    ec:33:1a:6b:dd:39:25:ea:5b:02:b9:d2:c4:8d:35:
                    e1:b1:52:3a:9e:54:ec:95:5f:00:27:32:16:dd:3e:
                    7c:e1:f9:af:ca:73:8b:74:5b:4e:22:20:48:2e:d4:
                    43:1f:27:37:40:2c:3c:16:1d:e2:dc:0d:11:cd:9d:
                    3e:04:6e:23:f0:41:6f:21:39:bb:af:67:ee:01:b8:
                    7c:f9:cb:f5:f9:91:c9:68:2c:c4:75:03:b8:dc:db:
                    57:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FD:3E:4A:52:BF:56:8D:F2:AC:31:1D:AF:94:91:9F:1F:2C:AB:2B
            X509v3 Authority Key Identifier:
                keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:b9:49:17:0b:95:60:62:24:64:31:11:fc:74:2a:16:c7:0a:
         38:c7:75:cf:31:90:d9:a7:c7:c2:7d:64:6b:24:2f:e2:2a:76:
         b2:1d:9b:0d:6b:18:80:3a:51:26:52:a2:83:9c:b1:b0:a3:1a:
         4d:b4:4f:c8:8c:45:b5:75:f5:3b:5f:db:fb:c5:c9:8a:e9:99:
         34:a7:a9:37:6d:75:78:72:67:ae:c4:43:00:66:17:00:40:ba:
         24:f1:43:cf:28:a0:ff:f7:75:8b:f2:f5:e9:9e:f8:b9:f0:ea:
         42:44:cd:10:f9:63:1c:36:af:4c:96:4e:a1:6f:72:18:ad:71:
         49:08:96:d5:b1:e3:6c:00:1b:86:6c:e6:af:e7:a2:c5:50:fa:
         1d:9b:28:af:b7:86:50:a5:a3:9f:7a:2f:3d:7f:88:bc:94:87:
         d7:e6:62:ac:a4:8a:03:a9:19:34:b5:c8:2d:0c:89:b3:74:a2:
         f3:b5:9a:91:91:56:9d:05:4a:94:29:b3:41:69:27:53:f4:5b:
         1c:20:23:b0:c6:4c:a8:67:5f:8a:10:71:ba:7e:bb:07:6f:16:
         ee:d9:d5:5b:08:0e:9e:24:7b:06:96:fc:2e:d6:56:18:00:7a:
         ae:cb:f8:07:1f:de:ed:7e:d8:82:11:09:d0:89:be:53:b7:1b:
         83:f9:3a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:02 2026 by rpki-client