Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File:                     1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier:          NXMtwsPdiN7nR63HJDdy2j4K2x65QR003H6tnt0w9TY=
Subject key identifier:   D0:6C:39:D7:15:66:5A:3D:0C:8C:84:10:49:4D:B1:7C:92:A1:1A:EA
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer:       /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial:       01A0028249B6135D7C5D41082148B97A76F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number:          0788
Signing time:             Fri 14 Aug 2026 23:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:27 +0000
Files and hashes:         1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: tnFyYeVLA7VTPV0o/euawvbAfSddMEl2OaerJaM8uz0=)
                          2: tkycn5xiTigCQfGPa-xW18TGNfk.roa (hash: 4OjRszRSxwJd25PZFySHlvrHFTMBwczdyRtjAmquBAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:49:b6:13:5d:7c:5d:41:08:21:48:b9:7a:76:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
        Validity
            Not Before: Aug 14 23:01:27 2026 GMT
            Not After : Aug 15 23:01:27 2026 GMT
        Subject: CN=d06c39d715665a3d0c8c8410494db17c92a11aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:17:17:99:c0:ba:b1:81:b8:08:5f:c1:f2:a2:
                    57:69:dc:ca:74:a4:5a:d2:22:3a:5e:63:2a:5a:20:
                    e1:30:1b:e8:e6:d5:a6:42:86:35:b1:1f:4e:71:f1:
                    f6:36:c8:79:80:9f:58:33:ac:22:95:48:55:6f:92:
                    0c:22:55:26:d8:4f:3f:ae:7a:25:fc:d0:da:11:9f:
                    45:80:3b:33:a7:2c:1c:16:ce:fd:22:22:26:38:ce:
                    c4:03:e6:23:fd:49:eb:07:4d:36:d4:95:f5:e6:87:
                    3d:7b:77:cd:7e:ad:51:00:13:a9:1b:70:6e:b8:00:
                    7e:8e:c0:e5:fe:6a:0a:41:a1:87:88:1d:18:84:9a:
                    f5:15:7a:bb:5b:b9:3d:65:be:f6:6e:c7:fe:d2:bb:
                    aa:6a:0a:53:77:5a:19:4e:fa:4d:77:e9:bf:f4:4f:
                    b6:5e:b4:14:fe:c1:df:f9:41:43:c4:05:b2:8b:97:
                    b4:0e:12:33:bf:9f:0f:8f:19:9f:ac:6e:29:6f:e8:
                    f4:52:61:22:73:5b:7c:86:3d:73:71:ee:7c:a1:ae:
                    8a:8a:69:37:f7:3c:18:2d:72:3e:33:46:4c:16:56:
                    5c:e1:5f:be:ad:6e:ae:24:9d:48:25:58:44:a4:6b:
                    92:ae:ca:0c:62:18:ed:05:8f:87:92:cd:d3:25:52:
                    1d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6C:39:D7:15:66:5A:3D:0C:8C:84:10:49:4D:B1:7C:92:A1:1A:EA
            X509v3 Authority Key Identifier:
                keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:03:57:b9:2a:cb:46:fa:c1:5e:27:a8:63:94:d0:e9:a6:9e:
         ca:1e:28:a4:a4:08:55:f7:c9:95:24:cf:f9:3c:25:2a:b7:b5:
         46:8a:0f:4f:c0:9d:44:45:1c:aa:d1:ab:28:43:96:bb:26:0e:
         4c:f2:a5:e2:4e:fe:4a:cb:d9:86:d8:39:bd:51:2d:28:51:9d:
         48:9f:28:b8:dd:5e:aa:6f:60:f5:ad:2c:be:9b:e5:00:f5:6a:
         84:1c:bc:b8:4d:db:68:ed:5b:71:43:4d:55:4d:a7:66:cd:ef:
         d3:dd:e7:6b:cb:0b:0b:63:12:44:ae:56:4b:ae:75:45:22:f1:
         63:22:6b:e4:b7:9a:2f:2f:73:5f:38:35:6c:13:d4:b5:20:e9:
         8c:24:32:c6:90:3d:6f:99:ea:37:46:f1:1d:f7:9d:5c:77:a4:
         ae:d4:49:05:e3:ef:81:18:4e:ae:7a:ba:c1:fc:68:6e:38:11:
         cc:22:63:be:a3:e5:19:52:72:b3:5e:bf:13:58:e0:f9:56:05:
         77:7a:45:77:f7:74:38:ea:87:18:54:33:00:bc:da:15:95:7c:
         11:3d:16:99:73:a7:f9:8e:f2:51:3e:82:b3:43:06:86:01:ea:
         a8:ae:98:3f:60:a3:6d:ad:52:f3:59:45:da:36:99:5d:cd:37:
         6c:11:24:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:33 2026 by rpki-client