Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
File:                     1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft (raw, json)
Hash identifier:          bhE6msPWn6e110DAQAT+hStz4C0JUajWVd5VfqQfQDQ=
Subject key identifier:   8D:DE:22:BB:32:D5:07:19:61:65:F6:D8:7B:92:5B:58:45:AE:5E:2C
Authority key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
Certificate issuer:       /CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Certificate serial:       01A001DD96CB9D0240899C0E90B68B01DD0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
Manifest number:          06E1
Signing time:             Fri 14 Aug 2026 20:01:34 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:34 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:34 +0000
Files and hashes:         1: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl (hash: bKrKjLLWl8rZ/fGxE+z+Gc6VFSG2v6MasiBWfs4PGJo=)
                          2: 2KBWkcPFqkYA0kPvVy34YeHDaAc.roa (hash: TZpzJmLu+Le01MBZkjnMNOjVGVfhPGdBwTzFj1GAQXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:96:cb:9d:02:40:89:9c:0e:90:b6:8b:01:dd:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
        Validity
            Not Before: Aug 14 20:01:34 2026 GMT
            Not After : Aug 15 20:01:34 2026 GMT
        Subject: CN=8dde22bb32d507196165f6d87b925b5845ae5e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:e0:b9:bc:c9:e1:4b:d3:3a:4f:8d:2d:0c:
                    c6:7e:be:b0:f2:cb:6f:76:99:41:36:f7:be:9e:12:
                    77:19:af:69:4b:ea:86:ea:9d:56:7e:d7:6d:f5:9b:
                    31:c7:bc:91:3f:89:0e:aa:53:11:00:26:26:7a:92:
                    2d:cb:a6:58:b3:c2:ae:88:07:d6:fa:07:bf:92:e0:
                    9c:04:3e:bf:de:64:49:e5:8e:d6:0a:63:4f:b6:dc:
                    9b:cc:c4:c7:db:6a:af:d0:de:22:fb:c9:68:6a:43:
                    60:59:7b:21:73:71:c9:0f:8c:68:c4:9d:45:df:f2:
                    5e:98:39:db:28:e7:9a:3e:4d:d1:66:cd:0e:b8:03:
                    a1:5d:e3:0e:9e:1b:6f:d2:83:aa:1c:83:8b:d9:e3:
                    ec:b9:d0:16:47:71:13:05:5b:4d:8b:55:6e:3c:75:
                    4b:d1:d5:04:e8:d5:1d:57:a8:0a:aa:44:62:69:d9:
                    9e:bc:f9:19:e1:7b:28:bc:70:2e:57:c9:b8:11:05:
                    fa:6e:74:88:04:fd:03:53:f2:bd:82:db:04:48:72:
                    e4:ef:a3:a8:8f:49:57:28:8b:c1:a7:af:d8:ee:bf:
                    66:a2:c6:28:f0:92:d1:8f:71:06:0c:ad:00:fd:f1:
                    a0:d4:3f:36:fc:f6:ec:e7:93:40:b6:f7:d4:d9:b8:
                    c4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DE:22:BB:32:D5:07:19:61:65:F6:D8:7B:92:5B:58:45:AE:5E:2C
            X509v3 Authority Key Identifier:
                keyid:FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:1a:a8:59:2c:ca:fe:4c:59:12:40:99:bd:9d:d8:d4:5e:2f:
         a4:cb:62:4e:76:7b:5d:01:99:7a:1e:42:a7:19:b2:de:21:8a:
         85:e9:f7:79:f2:6d:53:ea:93:fe:b5:b7:28:6e:77:41:e6:e1:
         43:78:74:7c:b5:81:ad:37:a3:49:12:5a:98:18:eb:ce:b8:97:
         b7:b6:91:87:94:7d:e8:98:83:77:ed:12:64:6c:51:9d:9a:29:
         e6:2e:44:2b:a4:67:80:01:e0:7a:7f:f9:94:f5:c4:07:1e:fa:
         c3:c5:be:ee:80:df:ef:2e:73:c5:47:3b:94:8d:6f:09:c0:c8:
         f1:4d:b9:90:c3:91:16:f9:c2:7c:2c:b0:7a:83:62:09:df:d3:
         4f:4d:61:8b:77:9f:50:ba:40:9c:ef:21:30:21:13:ce:5d:a6:
         d9:91:2f:40:80:c8:70:c2:3f:d0:3a:2e:dd:c7:0b:13:03:d2:
         17:df:30:4a:85:86:d7:4e:49:7f:56:eb:00:78:ef:1c:80:7d:
         f7:e9:be:a0:d3:67:cd:b1:53:e9:0d:7f:f3:7c:d3:0c:5d:4c:
         d2:2d:39:54:ad:bd:0b:df:99:1d:6f:46:79:27:12:74:6e:8f:
         00:c1:0b:d1:11:3a:39:3f:c3:94:29:07:54:f2:91:50:5d:47:
         c4:ba:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:50 2026 by rpki-client