Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
File:                     1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft (raw, json)
Hash identifier:          ZlHCgIL7L7KOzae12Hsz6C4uf0fs6T5bZOwVNebVdrs=
Subject key identifier:   EB:7A:F7:6B:CC:3C:03:4A:6A:99:0D:16:AF:17:FD:AB:A6:CE:4D:09
Authority key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
Certificate issuer:       /CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Certificate serial:       019E307239A27810487E26267AFBE420166F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
Manifest number:          1910
Signing time:             Sat 16 May 2026 11:00:52 +0000
Manifest this update:     Sat 16 May 2026 11:00:52 +0000
Manifest next update:     Sun 17 May 2026 11:00:52 +0000
Files and hashes:         1: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl (hash: MXl+1218UQCVPFkloc12y9s3jyBV09Mp51BcwRkrO+I=)
                          2: mxyRjdGL85xD1WB71F85PjRJOb0.roa (hash: +xewzxEDyTrzGnNo3af2vJnALePnt+9O9HzcMXJ3+M0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:39:a2:78:10:48:7e:26:26:7a:fb:e4:20:16:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
        Validity
            Not Before: May 16 11:00:52 2026 GMT
            Not After : May 17 11:00:52 2026 GMT
        Subject: CN=eb7af76bcc3c034a6a990d16af17fdaba6ce4d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:49:22:b4:c1:35:77:34:01:e2:36:ec:32:
                    bc:1e:89:78:30:45:59:22:73:be:48:ba:a1:fb:c0:
                    8b:39:7c:42:37:28:c3:10:d1:e4:28:b2:57:c1:a3:
                    4a:93:d6:d9:06:7d:32:1c:93:a0:9e:ce:39:ce:35:
                    0a:9a:21:8c:00:fb:a3:6f:02:b4:34:5a:f4:4b:3b:
                    91:b2:5b:0b:77:9e:16:d6:ac:18:86:f3:40:a1:2f:
                    fa:bc:90:3d:89:e0:32:57:b2:27:dd:77:d1:3f:85:
                    a9:dc:00:87:29:ff:09:8c:01:1a:d5:b3:6b:3e:f4:
                    2a:b4:5b:9e:31:b4:f3:9c:70:7f:cb:c0:4a:2e:67:
                    b9:f3:5b:97:55:00:d6:d7:d1:0b:d8:10:54:a3:3d:
                    b1:8e:f5:63:0f:5e:25:e0:5e:1e:85:00:77:5c:86:
                    e2:e1:d0:bf:a0:cb:a4:eb:d2:17:8b:99:f6:5a:05:
                    3a:a0:ba:c9:60:84:19:a8:b4:b7:f5:e9:c5:15:40:
                    31:79:dd:49:a7:af:47:c3:ea:0b:9b:2a:d1:ca:19:
                    e5:ff:be:ea:9b:73:10:7c:e9:82:42:37:a2:37:04:
                    fc:8b:69:3e:ba:c7:72:a5:f7:2f:d7:dc:59:14:ca:
                    7a:bb:3e:91:4a:c3:30:68:62:91:44:55:91:71:7b:
                    b1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7A:F7:6B:CC:3C:03:4A:6A:99:0D:16:AF:17:FD:AB:A6:CE:4D:09
            X509v3 Authority Key Identifier:
                keyid:FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:96:3e:c7:bb:1c:a3:c9:eb:70:e1:30:f9:93:dd:31:3c:1d:
         1e:e7:83:85:8f:dd:19:c7:0c:55:8b:14:4a:d1:ed:a1:82:f8:
         2b:a0:93:40:f0:4d:51:43:9f:6f:93:76:a1:da:87:8f:c7:86:
         24:ab:0a:57:19:9c:a8:90:ec:1a:3d:84:da:a5:ea:b3:c2:2e:
         8a:ec:30:e2:35:cb:0c:58:ba:73:ef:c7:ee:eb:8a:2a:ce:90:
         0c:3c:fc:7c:e0:26:77:2f:bc:65:d5:19:ef:12:f6:26:e0:b9:
         68:e1:ba:3e:6e:a6:e8:4f:45:cc:cf:9d:18:f9:a1:ce:0d:73:
         aa:90:df:e6:ee:b5:28:9a:a6:d2:fe:e3:d1:97:d0:09:ff:8b:
         6d:75:9f:5b:2e:1b:2e:58:83:3c:26:d0:dd:b7:52:5f:ae:de:
         39:dc:dd:bb:f4:28:73:fd:81:ed:f1:26:11:df:ba:51:10:c5:
         c4:aa:17:0c:3d:7c:26:0f:58:b9:8c:70:b1:47:19:82:46:a9:
         6a:fc:87:d4:7a:3f:8f:6f:d7:bd:2d:51:f0:7b:80:cf:ac:6d:
         83:45:34:8b:b5:8b:4c:6d:26:fc:40:b5:4d:6a:26:91:04:32:
         ee:2a:ec:49:f4:25:2c:9c:eb:7d:2d:8a:99:aa:f0:28:ff:26:
         c9:85:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:39:24 2026 by rpki-client