Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
File:                     1-XQtd30IJBai2EfUADozG1DiQj4.mft (raw, json)
Hash identifier:          RqVCjUh+X3+8WFHZTaGH4CN8spqnM412ZqGrwULkG0Y=
Subject key identifier:   0E:E5:50:19:78:56:AA:10:0F:F8:1C:01:C2:F7:5D:27:BD:41:9B:5C
Authority key identifier: F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E
Certificate issuer:       /CN=f9742d777d082416a2d847d4003a331b50e2423e
Certificate serial:       01A00093A8C3662A1A1FF79BAD485BBF8FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
Manifest number:          19BF
Signing time:             Fri 14 Aug 2026 14:01:11 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:11 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:11 +0000
Files and hashes:         1: 1-XQtd30IJBai2EfUADozG1DiQj4.crl (hash: L1qdArRMiBNYPrW3NsXdAQpliPISB3FZw4yDS9NRY+I=)
                          2: suFr_VLJ7JJXDVLAxuL2d6S8rcg.roa (hash: 5F65oe93bt7PTgDTFumLJnCP6tdXA4+0OqZl24dm2bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:a8:c3:66:2a:1a:1f:f7:9b:ad:48:5b:bf:8f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9742d777d082416a2d847d4003a331b50e2423e
        Validity
            Not Before: Aug 14 14:01:11 2026 GMT
            Not After : Aug 15 14:01:11 2026 GMT
        Subject: CN=0ee550197856aa100ff81c01c2f75d27bd419b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:64:1a:3e:01:d0:9a:cc:4d:eb:f6:7b:8a:
                    5c:36:a1:ef:a8:6b:39:a0:b2:d4:b6:73:b9:95:9c:
                    01:0b:50:c4:31:f9:74:3d:dd:2f:6c:15:5d:c8:3e:
                    21:00:f9:08:e7:0d:2f:e1:c7:85:63:9a:9c:5a:a0:
                    07:9c:ca:71:66:bb:40:ac:49:b5:84:4b:fc:95:f1:
                    2c:75:91:42:e0:75:d3:30:03:34:b6:b4:29:65:56:
                    3f:66:2c:6b:9b:37:fe:98:a8:5a:bc:c7:7a:8c:0a:
                    d8:fb:d7:78:7d:5a:c9:66:9b:f0:7c:80:9d:b5:c2:
                    0c:b5:01:50:22:66:0d:c9:18:8f:33:d5:cf:e1:3e:
                    aa:bf:f8:47:40:b5:b4:57:c7:d1:59:a1:dd:62:68:
                    eb:49:1e:1e:10:4b:55:2d:6f:db:8d:fd:c8:14:94:
                    9a:74:23:67:11:07:21:9f:21:37:4c:1e:67:49:67:
                    8a:b5:94:d5:66:9f:c3:9a:86:fe:fb:e7:80:df:c0:
                    34:f7:db:9f:56:ef:4d:e0:06:aa:01:2e:4f:d9:a8:
                    d0:27:54:82:8e:20:82:a2:f9:81:8c:2b:34:ce:06:
                    03:ae:43:e9:a1:43:40:e6:6a:fb:80:7c:60:67:dd:
                    50:63:69:8c:fa:35:bd:ed:66:6c:d5:6c:84:3f:7d:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:E5:50:19:78:56:AA:10:0F:F8:1C:01:C2:F7:5D:27:BD:41:9B:5C
            X509v3 Authority Key Identifier:
                keyid:F9:74:2D:77:7D:08:24:16:A2:D8:47:D4:00:3A:33:1B:50:E2:42:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XQtd30IJBai2EfUADozG1DiQj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/482708-c1d4-40fc-9321-6698b93233d6/1/1-XQtd30IJBai2EfUADozG1DiQj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e4:02:34:89:b9:fe:f6:db:d1:c3:76:7d:73:2c:5d:99:e3:
         f0:fb:e7:c7:9f:3d:88:d7:5f:29:f9:19:63:aa:3b:a0:13:3a:
         a4:15:b2:9a:e3:00:a8:1d:f7:d8:84:76:9f:b7:70:04:fb:a7:
         e5:b8:93:6a:07:1d:13:b5:8e:b2:b2:5a:c1:27:ca:2f:00:53:
         c9:4d:0d:e3:7c:b8:6b:c0:6c:ce:08:b9:5d:1e:18:d7:f5:35:
         c3:db:80:a7:43:bd:75:8b:05:4f:6a:23:8b:3b:88:c0:78:07:
         4d:c9:80:0c:f6:a6:54:7c:57:91:bc:71:35:5d:d4:72:e4:f4:
         5f:db:49:6e:58:a8:b1:b6:99:84:c6:2c:ac:d3:e4:1c:8a:00:
         85:86:12:d1:9a:59:ff:b8:ea:9a:8b:ac:f1:c7:d1:5f:e2:bd:
         51:81:5c:c1:79:34:85:56:03:83:03:8e:17:bb:18:36:01:ff:
         40:8c:c8:d7:03:cc:7d:89:5f:4f:ea:12:07:cb:53:55:b3:cd:
         d6:30:10:68:52:6f:64:50:93:41:2c:fb:a9:f6:10:61:f1:d5:
         f9:bf:ed:8c:21:a1:f7:50:98:0a:1a:5e:39:a2:ed:b2:3c:cd:
         83:7b:eb:92:30:49:18:9e:fe:94:25:6c:a6:be:f7:1b:70:9d:
         35:ce:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:34:42 2026 by rpki-client