Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File:                     1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier:          GJF5PY5K+RB9bXVNlFmI7FO2TnXWXAQ4hVoK/XtyNGs=
Subject key identifier:   CB:95:93:50:20:EA:FC:B1:79:9B:AA:96:AF:17:E0:2D:D5:EB:2A:9C
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer:       /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial:       019E3185B77E6A5A9E49FACB41E44B668976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number:          0F3C
Signing time:             Sat 16 May 2026 16:01:47 +0000
Manifest this update:     Sat 16 May 2026 16:01:47 +0000
Manifest next update:     Sun 17 May 2026 16:01:47 +0000
Files and hashes:         1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: D/KnMInM4O3KVBTCqINGQlMn5TX+4Wc6eR4Vv6PZpRA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:85:b7:7e:6a:5a:9e:49:fa:cb:41:e4:4b:66:89:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
        Validity
            Not Before: May 16 16:01:47 2026 GMT
            Not After : May 17 16:01:47 2026 GMT
        Subject: CN=cb95935020eafcb1799baa96af17e02dd5eb2a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:cd:47:14:99:f3:50:ac:d0:98:6c:61:a5:
                    81:a0:37:47:94:45:5b:ab:e4:f0:55:af:e5:e7:d4:
                    d8:1f:4f:29:e8:63:ae:98:61:b2:38:7c:3c:c4:81:
                    d3:a0:a6:86:cf:a3:95:d1:c5:c4:6f:e7:64:e4:ed:
                    dc:7e:7f:9b:b7:b5:35:e2:1a:b5:23:5e:b1:5e:a2:
                    b9:58:ce:54:4b:b2:e3:0a:72:3a:ab:12:57:be:8e:
                    71:f9:8e:a4:a0:0c:eb:a6:cc:c1:cf:66:e3:04:4b:
                    42:06:4f:1e:f2:68:03:fb:fd:88:ba:32:9f:89:13:
                    74:ef:b7:62:52:9f:61:ed:79:ca:c0:40:2e:c9:bf:
                    3e:03:e6:c1:91:b1:f1:a4:28:00:5b:f5:57:93:cf:
                    07:95:32:8c:ee:a8:78:ed:f4:58:36:ca:be:37:f0:
                    e7:86:dd:7d:6b:8a:c7:ee:00:5c:5e:14:7a:cc:01:
                    ad:fb:26:85:07:62:8f:9c:3e:7f:f2:01:d5:34:95:
                    08:5c:91:17:a9:9b:6e:69:60:a2:a2:50:3f:c1:e7:
                    a3:dd:d7:42:df:b2:fc:ca:26:b4:96:d5:d9:f2:b7:
                    23:4d:79:00:ed:6b:c5:65:50:76:97:3b:df:8c:e3:
                    3c:0b:c7:7b:e7:20:0b:ca:c1:98:e1:8f:9f:03:02:
                    cc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:95:93:50:20:EA:FC:B1:79:9B:AA:96:AF:17:E0:2D:D5:EB:2A:9C
            X509v3 Authority Key Identifier:
                keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:4a:b7:16:2f:e7:52:15:4f:94:c1:ad:b1:d7:39:e4:2a:8f:
         22:3a:5b:b3:19:82:12:fc:8b:ca:6e:3a:93:7b:82:ec:5a:66:
         22:bb:2e:67:ec:c6:45:56:9f:0a:e2:ad:a9:a2:e7:aa:77:dd:
         d8:b4:45:7e:55:ef:9a:dd:c8:91:3a:a2:54:21:ee:f6:c1:02:
         a0:88:c9:a4:69:21:9e:ce:6f:7e:3e:f2:72:86:06:9f:53:58:
         8f:3e:8a:c3:f1:f3:86:f7:5d:52:a0:2d:bc:79:b0:57:b5:78:
         46:54:ef:35:65:a9:1a:4e:79:02:fe:75:a9:8a:74:ec:a0:6c:
         28:38:0d:04:e3:36:03:1b:e5:1f:11:84:af:a0:a5:7b:cb:0a:
         ed:7a:b3:cf:33:53:1e:aa:3d:a3:1b:10:3d:58:41:88:57:c4:
         96:f3:ff:0d:66:76:d3:ed:14:fa:04:44:6c:f6:b8:22:f9:be:
         f7:6c:9e:7c:a4:cf:cf:23:67:40:18:0c:2c:0d:81:eb:d7:bc:
         09:d3:70:58:d1:a7:d7:44:4c:74:1c:9d:8e:bd:83:83:63:e1:
         72:f7:5d:47:e7:67:90:8c:c1:d4:af:26:53:b5:20:fd:79:56:
         b6:67:ed:34:72:22:ba:91:6e:e1:1f:42:7b:e3:64:08:27:8c:
         7e:64:09:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 21:14:09 2026 by rpki-client