Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
File:                     1-lolmC97dHESsP81jz0kpWLPz-w.mft (raw, json)
Hash identifier:          ikCL0k69mckSeEgNF5VYggs8euanuF0uPqkQ4lV6K4Q=
Subject key identifier:   1B:3F:1C:C2:F2:35:6A:B7:0C:4C:0D:CC:2F:66:B5:25:8A:B1:CA:AC
Authority key identifier: FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC
Certificate issuer:       /CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
Certificate serial:       019E9B854C3D0CEAA8FF4E6E6978AD0C0C59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
Manifest number:          01F1
Signing time:             Sat 06 Jun 2026 06:01:04 +0000
Manifest this update:     Sat 06 Jun 2026 06:01:04 +0000
Manifest next update:     Sun 07 Jun 2026 06:01:04 +0000
Files and hashes:         1: 1-lolmC97dHESsP81jz0kpWLPz-w.crl (hash: GbyALYh+2hXvRm2wHJTvvjH2jDBBVNpslsSxHEgRgi0=)
                          2: iYN0utCjOjCIPINNJfjhuG0vjOg.roa (hash: 7Wnyb9CGOm4TN0ey7ufrrNiIF/X3LDz9AlFMHrkszjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 02:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:85:4c:3d:0c:ea:a8:ff:4e:6e:69:78:ad:0c:0c:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
        Validity
            Not Before: Jun  6 06:01:04 2026 GMT
            Not After : Jun  7 06:01:04 2026 GMT
        Subject: CN=1b3f1cc2f2356ab70c4c0dcc2f66b5258ab1caac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5a:25:48:5d:0f:50:86:d3:56:3e:93:5c:e3:
                    ee:e1:00:a0:8c:aa:fa:5a:be:91:08:5d:54:7c:01:
                    6b:15:58:fb:42:71:e0:62:5a:74:30:27:af:ae:35:
                    bd:24:d2:6a:ae:2d:7d:1a:31:cb:5f:4e:44:30:2e:
                    eb:5d:8b:ac:21:29:9d:bc:7e:e4:47:14:39:f6:de:
                    47:0e:63:10:8c:cb:4f:82:cb:63:a4:94:96:7a:14:
                    4d:45:0c:9e:b9:18:e2:f7:b9:7b:32:43:bc:49:68:
                    20:2f:a5:f0:d3:6f:5d:93:7a:49:36:47:0a:96:6c:
                    a5:09:35:21:14:bd:7a:4f:c8:b0:94:fb:e8:40:07:
                    25:de:fc:cc:b8:f5:f4:05:e4:69:e6:97:b8:25:4d:
                    ad:71:6e:25:42:5a:60:74:90:e1:57:00:68:3d:bc:
                    0d:79:97:64:d8:5c:d6:36:80:96:e6:d7:80:e7:67:
                    6f:b9:e8:93:7c:9d:ef:20:e8:6b:ba:32:8a:1e:8d:
                    d8:c9:5a:67:d0:c2:78:bb:02:1c:f0:a1:2a:f6:71:
                    da:35:65:8f:55:ca:00:77:58:0d:6b:07:3b:47:c9:
                    b9:6e:88:a5:77:ad:b3:c8:5e:fb:ea:43:47:63:7c:
                    29:96:27:2c:6a:b4:69:b3:96:49:a0:e0:64:16:dd:
                    91:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3F:1C:C2:F2:35:6A:B7:0C:4C:0D:CC:2F:66:B5:25:8A:B1:CA:AC
            X509v3 Authority Key Identifier:
                keyid:FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d4:e7:e8:c0:1e:f6:e6:4a:96:10:91:f7:72:cb:c5:0c:e1:
         24:72:ed:54:63:e6:ad:df:14:1b:8a:80:77:5c:ba:db:d8:a4:
         24:3d:99:fe:1d:bd:08:3f:87:a5:4e:b3:e6:99:e1:5d:4d:cb:
         a4:ed:d2:94:97:6d:34:c1:22:5c:a6:9f:4e:e2:0f:de:97:ba:
         61:c1:ec:a9:67:fe:0b:27:1c:c0:28:bc:ea:76:20:38:33:84:
         5a:34:a1:7d:a6:94:39:4b:4c:a8:d4:63:c0:38:1a:91:fc:42:
         d7:7a:88:34:dd:3a:19:25:d1:02:51:5c:eb:a0:8c:8d:cd:78:
         e8:92:44:0f:9f:a8:29:81:fb:3c:71:fa:39:d1:f3:47:c5:ef:
         49:a4:44:5d:16:68:1d:cb:48:84:1b:9f:42:71:f9:9e:2e:bc:
         6f:3c:91:33:1f:55:84:13:ce:57:2b:f5:23:48:d8:7c:9a:28:
         a6:45:e7:cd:1e:a2:12:af:99:22:fe:a0:88:d6:bf:a4:e6:de:
         a8:48:c9:d3:59:b4:65:a6:e9:10:1d:c6:69:e6:28:6a:3c:17:
         a4:80:57:61:3d:e2:13:9a:5e:cc:09:b2:5d:9f:42:27:20:7a:
         37:84:8a:f1:c8:48:21:95:60:fb:1b:3b:48:52:b5:2b:0d:d1:
         a2:8e:7a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:11:49 2026 by rpki-client