Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
File:                     1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json)
Hash identifier:          BUama1iH/dG3f0xH8HN6egcJVUEUx5IGuV6/RuF4RG0=
Subject key identifier:   EE:3E:2C:C1:27:5B:88:3F:72:07:8D:2F:EA:76:6A:20:34:94:B5:0D
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Certificate issuer:       /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial:       019FA33CA85CCF491C22428857EF9C771E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
Manifest number:          03B3
Signing time:             Mon 27 Jul 2026 11:01:29 +0000
Manifest this update:     Mon 27 Jul 2026 11:01:29 +0000
Manifest next update:     Tue 28 Jul 2026 11:01:29 +0000
Files and hashes:         1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: i6OF9kr/vGGV0f9FMamd3dn67keU57msYGivHTOAOFY=)
                          2: k3OU5IbsL93-_3lodtzKMZ_irSg.roa (hash: N0y0RdnbxB4G2UQPBSuq2ffyQtcz3uGKqNQzZ4Z0Sic=)
                          3: rxT-eoR75onud9U3--RgqGGLVNo.asa (hash: fP2TlKEDg1oZrwu3TKIn5MO/RcxmBw/JPEOwqIIPtTg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 11:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:3c:a8:5c:cf:49:1c:22:42:88:57:ef:9c:77:1e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
        Validity
            Not Before: Jul 27 11:01:29 2026 GMT
            Not After : Jul 28 11:01:29 2026 GMT
        Subject: CN=ee3e2cc1275b883f72078d2fea766a203494b50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:72:74:4f:83:3e:be:e2:d2:40:b3:a8:ee:
                    60:9a:d4:c6:0e:91:e5:32:fa:e7:18:61:04:d5:d3:
                    e8:37:ef:31:cf:5f:8e:c7:87:af:e1:ce:66:02:13:
                    4d:3c:d4:9b:ba:57:23:bf:1b:75:da:63:f5:31:81:
                    81:86:63:f3:50:ba:28:59:0d:a6:b1:21:fa:78:de:
                    b0:12:4e:9c:fa:17:fc:0f:82:8a:31:33:bb:f8:3c:
                    d0:3c:f1:7f:d2:d3:e7:5b:d3:d5:67:c9:17:a9:ed:
                    7d:2d:0d:7d:f7:5f:3c:24:4d:6a:fd:5a:57:5d:51:
                    47:f1:f2:98:07:fd:7f:ab:a7:af:35:4a:c9:6c:fd:
                    c4:3b:3f:c4:7a:c1:81:d8:97:f0:b7:dd:e8:63:7c:
                    e1:b3:77:d5:a1:58:72:4e:05:94:d2:2c:59:66:21:
                    a0:9e:f8:81:f7:18:b8:21:25:14:91:cc:b0:a8:6b:
                    d9:e1:98:f9:83:9a:07:fb:f8:d9:e6:67:2f:18:03:
                    c4:69:da:bb:b9:d7:18:06:b7:96:44:fe:23:2f:a1:
                    57:19:fa:f8:e2:d8:89:6e:d9:91:74:0e:dc:ea:a3:
                    7b:e2:79:a6:33:cc:a3:6e:0c:a6:3e:3f:c7:0c:5e:
                    7c:d0:64:73:a6:49:0a:b6:29:5c:7f:2c:13:9b:2d:
                    71:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3E:2C:C1:27:5B:88:3F:72:07:8D:2F:EA:76:6A:20:34:94:B5:0D
            X509v3 Authority Key Identifier:
                keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:9c:34:d8:d1:5e:53:59:b3:94:aa:b3:65:df:10:d1:c3:c0:
         9b:dc:4e:7e:53:cd:38:66:d8:aa:46:84:5c:e0:f1:5f:fb:1e:
         d3:a2:e9:7d:d3:52:94:90:74:44:dd:c6:e9:86:b9:19:25:64:
         99:31:71:2d:8a:32:4e:59:a6:37:43:b6:8c:85:c5:00:ad:28:
         b0:74:ed:65:41:22:fb:ca:82:5e:79:b2:d5:e7:3d:28:e0:e5:
         85:56:57:97:bd:cb:09:04:2b:d9:2c:55:5e:e3:2c:4e:a4:1a:
         c3:56:08:4a:cb:8b:06:8b:f7:3d:c6:12:0f:85:5d:d2:65:c1:
         02:3b:fc:c5:62:68:b6:f3:f1:08:3c:b7:d6:c3:17:a6:4d:52:
         df:ae:34:85:37:91:83:5a:76:8f:bc:78:35:ba:10:5f:92:29:
         b7:6e:6c:dc:96:68:c7:3a:cf:8b:de:2d:a1:0b:45:1a:0e:82:
         c4:70:d2:47:b2:39:60:8b:b6:06:5c:32:fe:e1:16:62:1b:47:
         28:e7:c3:7f:8a:73:8a:0e:a4:51:48:61:06:0d:5f:e7:0f:bd:
         11:b0:58:ef:3c:c9:a0:1c:34:81:11:ec:7e:06:b3:6c:49:b1:
         ca:ba:05:42:55:66:f2:07:20:31:ec:2f:7f:43:b7:70:a7:74:
         f4:ad:dd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:44:08 2026 by rpki-client