Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
File:                     _H1Kt3YauiTzPVtt-8J8q3OLte4.mft (raw, json)
Hash identifier:          sTtCGEqIxCYSwl9Eh3RQXmxnEfnHyQGN5uhWbAFg1T0=
Subject key identifier:   B4:8E:1A:11:CC:64:C1:0D:7D:F7:85:65:41:E7:7A:C7:CB:49:E8:64
Authority key identifier: FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE
Certificate issuer:       /CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
Certificate serial:       019E50A288DEC17722573AA24CD7D9C876CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
Manifest number:          15BF
Signing time:             Fri 22 May 2026 17:01:29 +0000
Manifest this update:     Fri 22 May 2026 17:01:29 +0000
Manifest next update:     Sat 23 May 2026 17:01:29 +0000
Files and hashes:         1: _H1Kt3YauiTzPVtt-8J8q3OLte4.crl (hash: jq7bm0H8uavZPFpJWwd4XL/etApPJAHcysQ2N+yGfFU=)
                          2: pIzu0UPpsP8clP4GJvMQ5mOsgdU.roa (hash: cY4H2iigWEWrWAaGXnc1Tjbm637H9ISvb9VWaDHjJoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:50:a2:88:de:c1:77:22:57:3a:a2:4c:d7:d9:c8:76:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc7d4ab7761aba24f33d5b6dfbc27cab738bb5ee
        Validity
            Not Before: May 22 17:01:29 2026 GMT
            Not After : May 23 17:01:29 2026 GMT
        Subject: CN=b48e1a11cc64c10d7df7856541e77ac7cb49e864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:69:e7:92:38:f1:ce:dd:b7:81:aa:a5:89:
                    1c:c2:29:1b:7f:49:4a:4e:9f:3a:57:d7:63:77:3e:
                    5e:69:a5:2f:8e:24:cf:cd:73:4d:15:db:13:aa:ce:
                    48:ec:14:bf:fd:e6:e9:48:d5:fa:95:da:d9:e6:0a:
                    1a:97:3f:47:51:54:11:a1:49:cf:a5:fd:e3:b9:48:
                    e3:60:50:01:bf:a1:b5:74:1a:3a:59:ec:03:cb:78:
                    41:4f:01:fa:74:8e:3b:49:b5:1f:81:be:ae:43:e5:
                    11:1a:25:65:7e:8f:cd:28:6f:5c:ae:ad:98:27:ad:
                    e6:f4:9e:3f:03:52:36:4d:45:65:67:3c:2c:af:2c:
                    0d:cb:7f:c9:40:fe:81:be:8a:c7:a1:2c:6d:09:f4:
                    68:2e:66:c2:fc:88:6d:46:df:3f:f5:3a:89:2c:d9:
                    ec:57:ae:08:d2:dc:d9:33:dd:d2:c3:7e:e9:63:2f:
                    dc:f4:35:9d:8f:6d:a9:8a:b3:35:25:8b:d8:e7:88:
                    cb:7b:78:cd:7e:97:b5:1c:17:e8:a0:24:cb:4e:1d:
                    bd:07:b7:92:0c:98:9c:ca:3f:eb:fe:db:d5:f4:ad:
                    9a:01:22:bc:fb:60:c1:0c:af:1f:98:43:01:6c:af:
                    9e:36:2d:8b:59:49:7c:f2:0f:e5:ab:b5:22:9d:b7:
                    b1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:8E:1A:11:CC:64:C1:0D:7D:F7:85:65:41:E7:7A:C7:CB:49:E8:64
            X509v3 Authority Key Identifier:
                keyid:FC:7D:4A:B7:76:1A:BA:24:F3:3D:5B:6D:FB:C2:7C:AB:73:8B:B5:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_H1Kt3YauiTzPVtt-8J8q3OLte4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0287cf-853b-4516-9f06-452ec3a9588b/1/_H1Kt3YauiTzPVtt-8J8q3OLte4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:8c:a0:a4:02:30:14:a2:b1:ef:4a:1e:90:6e:8e:1a:e9:9b:
         a7:08:a2:8e:66:a3:7a:f2:cd:e8:c0:0f:d2:72:b6:68:08:c7:
         6f:dc:f9:21:db:59:65:77:b4:22:43:ec:99:4e:83:b2:4d:df:
         62:b0:1e:b1:86:ca:3d:bc:bf:39:42:58:36:40:f7:bb:3d:d7:
         3e:3d:8f:dc:a1:7a:64:3b:6d:75:cc:3f:56:7e:e9:e9:5a:02:
         3c:d2:f3:5c:ea:0b:a0:72:e3:17:cb:15:73:49:c1:e2:47:04:
         e6:d6:f4:c8:ec:7c:98:83:2e:94:99:7d:24:d9:ae:28:86:c3:
         3b:d1:51:a0:c9:91:a3:0e:38:32:12:6d:04:47:8e:eb:83:c9:
         60:c6:d5:b9:31:0e:6f:f2:5d:94:e6:a0:89:c8:44:7c:52:a4:
         c0:9f:f4:21:a5:a6:b9:7b:e3:06:84:38:9f:c7:dc:ea:db:67:
         24:a2:c2:98:9a:58:a2:7d:a9:cf:f7:d8:bb:ea:c7:b9:08:17:
         69:4a:67:a0:08:f5:f1:3c:38:c3:b7:00:24:5c:35:25:b1:3b:
         06:fa:5f:3c:fa:1b:23:72:94:d2:ae:14:ba:ff:7d:23:68:6f:
         24:12:15:cb:c3:68:09:63:18:84:a3:ee:16:b6:1f:b7:b1:32:
         36:1d:fd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:13 2026 by rpki-client