Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
File:                     1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft (raw, json)
Hash identifier:          4lIzgNJHmYAZi8Y6Blb+2CH9klU0cMMkSlWLs2GiYmk=
Subject key identifier:   49:83:2A:F5:38:39:FD:A1:3B:D4:73:00:7C:74:76:DB:4E:AF:BF:10
Authority key identifier: FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6
Certificate issuer:       /CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
Certificate serial:       01A001DD28101863D648118EEA1D6A89A8D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
Manifest number:          0A5B
Signing time:             Fri 14 Aug 2026 20:01:05 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:05 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:05 +0000
Files and hashes:         1: 1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl (hash: s35YbtJoZFdIwAagVTDKPP0IRqSWQVC7q+9s5Zay78w=)
                          2: 4uQBWkALISvD6y91tLrUckXc3Og.roa (hash: onT9wzStJ0yxe/DG9p0SCT14FtXKok1QUI7Daf8dWqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:28:10:18:63:d6:48:11:8e:ea:1d:6a:89:a8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbde12b91cb1f2933a7be8eaff2d3e35deb381a6
        Validity
            Not Before: Aug 14 20:01:05 2026 GMT
            Not After : Aug 15 20:01:05 2026 GMT
        Subject: CN=49832af53839fda13bd473007c7476db4eafbf10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:44:a2:93:c2:0c:c6:b2:b9:da:b9:cd:35:67:
                    17:cb:43:03:02:8f:ee:f6:9e:90:4e:93:6c:8f:46:
                    88:25:cc:56:e1:84:cf:04:8e:dd:2c:1c:26:ff:85:
                    94:d0:92:11:35:45:9e:e6:f5:27:da:19:13:65:91:
                    d7:44:93:3d:3c:82:f3:51:65:f9:9e:98:34:f8:9f:
                    0a:73:7f:4f:6a:99:66:9d:e2:90:45:a9:85:ec:e8:
                    e3:50:2f:35:04:70:51:86:b3:57:a9:e8:78:55:d8:
                    4e:b4:85:c4:1e:96:8b:89:53:94:e7:57:67:c9:e6:
                    5b:c7:48:e7:2f:60:aa:9f:2f:ee:f8:94:a1:a8:ea:
                    89:33:f0:c3:2a:4e:40:3a:ae:ca:b1:42:5f:b7:4b:
                    88:a6:2f:eb:ae:aa:5c:08:78:f2:fa:9b:ea:59:59:
                    1c:54:c5:7a:3c:40:f3:30:5d:12:30:fb:cb:0b:ec:
                    5f:0b:55:cd:14:d7:b2:2b:f3:9b:b8:c6:82:87:a0:
                    22:c9:19:9f:c4:4c:49:c6:c5:00:13:82:5b:ca:2d:
                    f6:9b:f5:22:2d:20:dd:4b:50:ac:10:8c:88:4b:e2:
                    49:18:dd:ff:a3:69:c2:b4:bd:5e:d5:ab:7c:b8:66:
                    6b:59:9e:ed:f4:37:cb:8d:71:e7:73:66:e3:16:d7:
                    71:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:83:2A:F5:38:39:FD:A1:3B:D4:73:00:7C:74:76:DB:4E:AF:BF:10
            X509v3 Authority Key Identifier:
                keyid:FB:DE:12:B9:1C:B1:F2:93:3A:7B:E8:EA:FF:2D:3E:35:DE:B3:81:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9f0539-fd74-4eec-9131-49319b9479f3/1/1-94SuRyx8pM6e-jq_y0-Nd6zgaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d0:a7:16:a8:df:7d:5a:c5:e8:18:f7:fd:d9:d0:7d:33:6e:
         d6:ce:c9:3b:2e:44:74:37:48:c5:9e:19:26:1b:2c:b4:1c:d3:
         ba:75:13:d3:58:17:f8:21:6e:15:d2:5a:d1:6f:54:ef:9e:b3:
         9d:ed:9f:2c:db:c6:4f:cf:58:06:e0:74:17:51:50:1e:55:14:
         6b:18:1e:d5:43:ac:d9:63:a1:7c:a4:13:ef:b5:5d:75:44:83:
         37:21:3a:f7:b0:49:98:93:9e:ce:19:52:48:d1:97:ff:15:11:
         e9:44:71:71:26:b4:49:04:68:4f:f6:23:a7:3f:b1:f8:ed:01:
         c9:74:5f:21:cd:b2:0e:6f:7b:dc:30:20:6d:ff:07:f3:0b:a1:
         41:5d:fe:60:0c:98:23:46:62:6e:f1:bf:92:7b:28:9a:c0:be:
         b9:9b:eb:60:a8:09:82:f6:84:b2:93:f9:74:db:30:fe:88:77:
         74:e0:fe:74:8f:54:71:18:b2:f4:fc:ec:12:43:df:9a:e3:42:
         5f:d4:74:22:24:6d:6f:73:62:56:dc:27:c4:e8:ca:5f:fb:02:
         84:cf:6a:a8:2e:9b:5f:01:8b:04:2f:cd:51:fc:76:ca:74:f4:
         3c:c1:06:3e:5a:6c:45:97:7e:4f:61:e5:a9:1f:4e:6c:3f:dc:
         1f:58:bb:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:57 2026 by rpki-client