Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
File:                     1-LGChfQu1nwR2Pg99IixD8h_F78.mft (raw, json)
Hash identifier:          +BFfg1vDUb7fWIorPWWQGwXITnFyngFAp/yT9dZdzvU=
Subject key identifier:   45:AC:D3:C8:5F:42:A9:D0:75:80:97:07:77:39:DE:E8:45:7D:0A:11
Authority key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Certificate issuer:       /CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Certificate serial:       019F18D63B67E623C25DF46D9757F01925D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
Manifest number:          1071
Signing time:             Tue 30 Jun 2026 14:02:00 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:00 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:00 +0000
Files and hashes:         1: 1-LGChfQu1nwR2Pg99IixD8h_F78.crl (hash: kO+xClEDTehLF/CSLJ0kMvfVhQD70qn28Mr4w5emNhg=)
                          2: znlH05wUUI_cREyEO6A7B87acRI.roa (hash: MtJpDkpsvsN3UGCwGXX+CpXcpcwlJRAixBEzCR1dqmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:3b:67:e6:23:c2:5d:f4:6d:97:57:f0:19:25:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
        Validity
            Not Before: Jun 30 14:02:00 2026 GMT
            Not After : Jul  1 14:02:00 2026 GMT
        Subject: CN=45acd3c85f42a9d0758097077739dee8457d0a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a5:b4:94:2f:a5:55:23:ad:d0:bf:49:c9:8c:
                    20:4d:d9:2b:86:0f:d0:18:b1:9f:2f:1f:f4:b3:06:
                    e0:36:99:9e:57:57:78:e4:e3:72:b5:9a:42:75:26:
                    7d:4f:bf:ef:83:e8:41:71:8e:90:bc:99:68:40:8a:
                    55:ee:a4:c2:31:10:8c:44:a6:82:b1:91:59:8d:9c:
                    b9:28:67:d9:26:73:bc:14:92:d3:e3:4f:b0:1b:c9:
                    e2:14:05:3e:49:20:8b:a4:56:be:11:29:dc:3e:3b:
                    44:b3:ad:72:ec:a1:8a:ce:13:26:ab:01:e0:bd:30:
                    c2:d2:f6:75:68:e1:89:d8:ca:e1:13:5a:9a:8b:2b:
                    dd:98:f2:8d:e0:de:37:3c:9c:61:22:9a:50:5f:ff:
                    41:6a:58:8a:ae:ec:d6:25:ee:3d:66:94:ec:fc:d3:
                    ed:41:d1:bd:bb:88:18:f5:0e:f2:89:fe:5d:ba:18:
                    78:2d:f0:5d:90:f6:d0:30:34:f1:80:af:d1:9f:56:
                    3c:e6:6c:49:ab:48:37:20:fd:c0:63:8a:87:91:0a:
                    a9:02:df:87:ca:aa:c4:4c:56:6e:84:0d:cd:f9:a1:
                    66:21:23:93:2d:10:dc:78:14:34:38:08:af:b1:fc:
                    16:00:61:a1:2a:4b:8b:dd:26:15:03:6e:fa:c9:ca:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AC:D3:C8:5F:42:A9:D0:75:80:97:07:77:39:DE:E8:45:7D:0A:11
            X509v3 Authority Key Identifier:
                keyid:F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:c0:8d:7d:d7:63:ee:1a:64:03:5a:88:3f:02:04:72:d7:19:
         b1:59:86:06:7f:2e:8e:07:bf:49:13:cf:b2:69:84:89:eb:9f:
         2f:47:59:d7:50:e9:52:92:eb:7b:ef:09:be:b1:fc:69:05:13:
         25:76:2b:13:47:76:9e:44:38:14:82:eb:51:c4:fc:30:28:7d:
         d4:68:9b:99:0d:b4:2e:00:c3:53:55:ec:3f:15:5d:74:87:1f:
         0d:26:16:15:78:fa:db:d8:d0:a6:bd:1a:f7:d4:7a:9b:d9:33:
         3e:69:5e:e5:59:e0:94:aa:80:56:41:d4:1e:36:8b:26:71:e2:
         d0:8e:09:03:ee:e4:38:67:df:a7:f8:1c:d1:f1:da:d2:b7:c4:
         02:d2:4c:c9:85:cf:fd:98:c4:43:98:17:d1:11:26:e2:d6:ce:
         24:b2:ba:8a:2c:4c:fc:20:b6:f5:9b:34:8d:a0:9e:e8:2c:8a:
         b7:7b:20:e2:05:00:e3:dc:f3:ab:eb:bb:ff:4c:37:d5:c1:1b:
         12:71:0c:8d:b2:34:ba:7e:8c:ba:cc:9c:3f:10:24:00:ca:bb:
         b9:da:bf:90:be:43:fb:fa:ae:aa:53:5f:c3:8c:4b:b9:6e:9c:
         9f:2d:21:ee:36:17:ed:59:ae:4a:e9:ff:bc:57:73:73:66:94:
         10:6e:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:56 2026 by rpki-client