Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File:                     1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier:          5LPyJbc4ugSQyTTB91lSGj3lDsC3Fa7xz5Ayc1ie/pI=
Subject key identifier:   A8:CA:86:51:E9:31:D7:EA:F9:24:E8:EB:78:A7:2B:25:3A:1D:C7:59
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer:       /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial:       019E2926B8B48768F29E5BDF8659F372F029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number:          08B7
Signing time:             Fri 15 May 2026 01:01:03 +0000
Manifest this update:     Fri 15 May 2026 01:01:03 +0000
Manifest next update:     Sat 16 May 2026 01:01:03 +0000
Files and hashes:         1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: JWWFxQsdB0A2lCyb+k+5ToznCCqi6sMoaj2zeVbqkyk=)
                          2: rTWNDX2sh64JmJF94YkHDQivF1w.roa (hash: RWITw/Hfk3BkskMw4FRULOKsUeZ/YrSrFkhrBuQpcRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 01:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:26:b8:b4:87:68:f2:9e:5b:df:86:59:f3:72:f0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
        Validity
            Not Before: May 15 01:01:03 2026 GMT
            Not After : May 16 01:01:03 2026 GMT
        Subject: CN=a8ca8651e931d7eaf924e8eb78a72b253a1dc759
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:1b:39:34:e1:e8:9f:47:4b:45:28:84:89:
                    78:68:a3:c9:c0:ce:34:3a:e6:37:cb:c9:48:25:bb:
                    4e:42:83:f6:b4:87:10:fb:45:57:32:53:d0:13:d3:
                    3e:60:5b:59:4b:67:22:a0:a7:dd:14:70:e6:50:16:
                    36:74:f0:25:f4:cb:61:c6:0a:2f:06:11:56:b8:53:
                    fe:ca:18:b4:fb:72:74:39:cc:56:cd:c3:24:a5:49:
                    68:2f:a5:2d:52:7a:98:5b:2e:d3:a0:c1:d4:95:bc:
                    72:3a:9a:e7:93:cc:6b:24:00:08:ef:f3:b4:e2:d4:
                    61:bd:97:03:f2:dc:bd:ef:73:06:e1:be:f4:80:cb:
                    77:02:46:69:ef:2a:33:7c:21:06:33:bb:83:45:7a:
                    73:2f:86:a7:a6:31:78:ad:f9:f2:c4:96:be:a7:84:
                    b2:4e:3d:e7:2c:bb:2c:d1:fb:2d:01:cd:f4:20:c3:
                    3c:49:23:74:56:85:62:76:82:33:16:69:a0:27:a4:
                    b1:1a:04:a7:b9:aa:37:29:f7:a7:c7:91:68:56:ae:
                    7e:ec:95:7e:63:50:7a:d2:0c:50:a2:b3:f7:09:b8:
                    ca:cf:62:41:eb:8f:a7:c1:2f:a5:0d:bb:e6:2b:9c:
                    6f:84:0a:a2:95:b3:c9:de:a1:25:5f:5d:9c:eb:e9:
                    8d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CA:86:51:E9:31:D7:EA:F9:24:E8:EB:78:A7:2B:25:3A:1D:C7:59
            X509v3 Authority Key Identifier:
                keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1c:11:f3:8f:46:ac:b4:de:4f:56:85:6f:97:47:3f:df:4d:
         b0:0f:ce:cb:e7:23:5f:09:91:10:f6:8e:3d:87:c8:71:fc:97:
         f8:47:3c:80:f9:f9:be:0e:42:90:02:32:bc:4a:0f:00:62:c3:
         fa:45:7b:2b:13:3a:3c:00:85:ab:b5:70:a7:ac:eb:7f:b2:cd:
         41:fd:1d:25:6d:f5:6a:61:d1:26:44:32:1f:c8:51:64:72:3b:
         04:80:75:09:b9:f9:db:82:1d:f3:b6:3d:b5:b3:bb:15:13:0e:
         66:07:6b:a5:a9:77:4a:72:52:d3:04:47:b2:1d:87:02:72:45:
         d1:a2:a3:38:84:f8:fd:e6:0f:63:a5:e4:e6:74:0a:2d:1e:af:
         88:1d:6d:fe:29:26:9d:b9:3c:cc:7c:90:9f:60:34:a0:fd:24:
         7a:7b:4f:39:26:70:1e:04:59:e6:37:2d:9f:11:8a:63:fb:0d:
         b9:28:b4:34:d8:8d:ab:cb:86:4d:df:3d:2d:e1:c7:01:35:fc:
         ff:e9:a8:b8:a0:ff:db:23:fc:ee:75:9c:f2:3f:69:65:42:90:
         08:ff:cb:85:b3:78:7d:56:9e:ae:bf:2d:8b:69:60:b9:45:8e:
         8b:81:c6:40:da:16:81:b3:90:79:21:0b:b8:6e:13:9c:c0:0b:
         f4:ec:73:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:12 2026 by rpki-client