Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File:                     1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier:          4F2Y1ye0IP8dPZbksG7QwF7zKbm1aGwuUDvkat0LCiY=
Subject key identifier:   E1:1E:71:F6:06:2E:59:D8:0C:D3:08:CE:5C:86:FA:1D:23:3B:63:13
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer:       /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial:       01A00025AC2E6C9231E83DA0FFF562CC44B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number:          0B71
Signing time:             Fri 14 Aug 2026 12:01:03 +0000
Manifest this update:     Fri 14 Aug 2026 12:01:03 +0000
Manifest next update:     Sat 15 Aug 2026 12:01:03 +0000
Files and hashes:         1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: LiyK/zjDeREwU+ZgTCZ8I3gwcYqeZrrjntUSgSnmCz4=)
                          2: kPmc5sCThKk5h79wmMSU7r2wdGk.roa (hash: cJYgegRXaUwVLkfRCxfZWWQRmJwn/LEk5WOIrzbJK84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 12:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:25:ac:2e:6c:92:31:e8:3d:a0:ff:f5:62:cc:44:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
        Validity
            Not Before: Aug 14 12:01:03 2026 GMT
            Not After : Aug 15 12:01:03 2026 GMT
        Subject: CN=e11e71f6062e59d80cd308ce5c86fa1d233b6313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:6a:ae:83:c8:c5:0a:ce:98:29:47:9d:84:
                    11:54:27:0e:b3:89:20:85:43:1b:82:8d:e3:de:df:
                    be:b2:f7:1e:e8:6f:7f:33:4b:d2:b2:56:3d:52:46:
                    85:b1:a7:4e:76:26:c1:fd:b3:75:8b:a7:90:01:a1:
                    89:85:b4:c3:7c:43:78:28:29:34:86:91:76:2f:44:
                    b4:54:a4:69:25:d6:ca:3a:48:93:9a:53:1c:8e:4c:
                    dd:d0:24:cd:65:74:60:45:47:fa:c7:39:f6:54:ef:
                    46:5f:55:10:42:b9:d8:74:97:5b:dd:c4:45:b5:14:
                    a2:78:ed:66:1f:70:a9:50:d9:97:bc:b3:63:21:89:
                    08:ef:02:7d:cc:0c:9a:57:74:48:92:da:09:21:b4:
                    d4:7f:fb:59:8b:b5:bf:94:92:4c:7a:ac:ad:50:50:
                    12:ab:de:0f:2b:a9:c3:f5:f1:29:75:56:92:8d:7c:
                    23:58:41:ad:82:7b:92:c6:ae:d8:fa:dd:5c:aa:fc:
                    dd:75:a6:72:27:c0:f4:9f:76:e0:8e:50:26:6f:92:
                    ea:c5:fe:05:5b:7d:69:c7:ce:be:cc:3d:1e:ab:a6:
                    77:65:70:c8:aa:13:a3:38:c7:28:0c:2d:33:8a:b7:
                    3f:9b:f3:73:40:a7:e9:70:ef:51:56:42:1e:79:a7:
                    2c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:1E:71:F6:06:2E:59:D8:0C:D3:08:CE:5C:86:FA:1D:23:3B:63:13
            X509v3 Authority Key Identifier:
                keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:46:4d:c9:c4:e1:c7:f1:73:e9:c1:9e:96:ea:19:f4:2d:35:
         e6:ea:e1:e5:13:0c:de:bc:00:88:98:de:9a:b7:99:d0:b5:fc:
         82:d4:77:2d:93:d0:c0:c0:ff:52:09:9d:db:98:2f:df:9b:58:
         5a:2b:f4:ca:5f:bd:06:51:21:fc:85:eb:33:6b:c4:64:e1:eb:
         9d:5d:de:f6:fb:30:b1:e0:9e:4d:dd:f6:0f:a5:96:a7:8a:1f:
         92:a6:57:75:d9:eb:3b:47:6e:11:23:a7:e6:5a:16:78:a6:11:
         0f:c4:51:10:f8:66:98:d6:f1:88:91:30:6f:c1:ac:0e:db:21:
         94:66:b9:87:3d:9b:6f:92:dd:99:50:4a:f9:24:76:db:fa:5f:
         d9:b6:eb:fb:a5:10:b1:69:93:b2:21:d2:f6:d0:7a:e3:bc:2b:
         23:1f:7a:80:28:50:a8:68:56:83:d6:02:70:0e:78:e4:9e:96:
         88:a8:66:df:db:1b:45:fd:ea:5d:67:f1:f4:1d:79:b3:2e:7c:
         81:c4:df:da:e2:c1:d4:58:ad:4c:9d:8a:f3:1e:cc:e8:4c:87:
         0f:59:3d:27:58:46:1f:2f:08:a4:7c:80:0d:91:22:64:23:94:
         3b:1f:65:87:e7:08:1e:fe:6e:1f:f5:4e:65:a4:86:d3:ba:26:
         bf:ab:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:34 2026 by rpki-client