Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File:                     1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier:          3J+VhohvSdBF+HcGUueiJBhHfXU5jANkqqK1xMBNx+g=
Subject key identifier:   48:F7:29:E3:22:E1:E2:AC:F6:8D:39:47:C4:70:92:10:23:63:EC:69
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer:       /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial:       019E314DF4A434598963517342FEF42DFCFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number:          0685
Signing time:             Sat 16 May 2026 15:00:52 +0000
Manifest this update:     Sat 16 May 2026 15:00:52 +0000
Manifest next update:     Sun 17 May 2026 15:00:52 +0000
Files and hashes:         1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: BTdtIApDlPA1UhLLXGv3bGuYcoGYWO7Q/pX8VR5zsvY=)
                          2: rDbD36OC2clR1VcH9ybYG4X8bCg.roa (hash: KScj6dQC600LiAKS+yk/LqkmCh6S5faudW7dbCKNdtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:4d:f4:a4:34:59:89:63:51:73:42:fe:f4:2d:fc:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
        Validity
            Not Before: May 16 15:00:52 2026 GMT
            Not After : May 17 15:00:52 2026 GMT
        Subject: CN=48f729e322e1e2acf68d3947c47092102363ec69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:a7:80:27:a2:34:0e:4a:99:f8:8d:16:50:
                    3e:56:b3:11:26:3c:ff:6a:22:0f:d5:8a:79:e4:93:
                    2f:4b:6d:98:41:58:fc:5c:3d:a7:f6:a8:33:9b:30:
                    63:d0:30:d2:9b:43:bb:f9:1c:f0:f4:d7:5b:63:57:
                    5b:e1:a2:36:86:9d:6a:61:af:e8:f6:f4:4b:09:96:
                    27:cb:07:21:ee:0a:2c:8d:7d:32:e9:c6:f8:db:d3:
                    b8:28:ca:f7:6b:ee:26:9e:d9:d3:d9:42:25:96:59:
                    73:e1:a2:dd:f3:bc:84:f6:00:b4:0f:07:72:85:2d:
                    f8:28:38:a2:93:3f:5d:da:2c:58:fb:de:6d:9c:43:
                    e1:eb:b0:cd:e1:46:6b:6e:3c:dc:b6:a0:ae:43:83:
                    5d:af:60:bf:76:1a:ae:d2:59:24:df:e5:88:36:59:
                    78:7f:cd:68:f8:7e:26:f9:ef:35:fa:c8:85:1f:9e:
                    44:e7:93:ec:e0:62:6a:48:aa:8a:98:c8:48:fc:97:
                    1d:29:47:5c:3b:d8:10:5a:cc:89:e9:c4:8b:13:12:
                    0e:27:8d:da:71:86:1b:33:38:c1:bf:07:74:9a:9e:
                    11:14:49:b9:06:bf:2d:2d:a4:f6:e2:2d:6a:f2:1c:
                    97:86:f9:ff:57:31:90:fc:ac:1e:5e:27:59:8b:68:
                    e5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F7:29:E3:22:E1:E2:AC:F6:8D:39:47:C4:70:92:10:23:63:EC:69
            X509v3 Authority Key Identifier:
                keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:0f:8d:7d:da:ac:b0:27:8f:dc:7a:6e:b9:63:57:84:e5:e8:
         6a:20:40:8c:90:0d:5d:9d:31:47:1e:8d:b4:6e:23:d1:4f:09:
         46:7d:39:71:e5:de:88:74:3d:13:d6:9e:42:11:85:2f:20:8f:
         02:10:67:27:68:c3:44:40:1c:49:ca:25:74:c6:2b:ae:59:f8:
         21:8d:08:6f:86:f5:1a:6f:e7:6e:0b:86:ef:e1:ee:a1:04:78:
         36:10:e2:1c:91:f3:18:4b:19:63:23:c1:2e:27:26:ff:8e:35:
         cc:78:96:29:f5:7e:e5:f2:b5:96:15:df:64:e2:4a:87:17:35:
         03:37:1a:61:21:5e:d1:ad:1c:3e:12:7d:58:95:4a:fd:48:3f:
         56:16:05:ad:a3:f9:54:c6:25:7c:7e:87:d5:80:80:cb:6d:fd:
         46:a5:ea:aa:c7:6e:c0:fc:25:73:d6:63:1e:b7:58:5c:f6:9c:
         b0:67:68:e1:2f:9f:c8:6d:0e:90:d9:d7:2d:d1:1a:4b:90:b9:
         0e:9e:a0:38:9a:f6:04:02:23:0b:60:64:b3:ab:e2:f3:5a:de:
         69:c3:61:84:16:b4:8d:80:b0:19:58:0a:ee:2f:bb:99:33:26:
         d1:c5:90:06:21:21:d0:50:45:7d:47:e0:db:e8:21:ad:84:69:
         3d:5c:02:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:32 2026 by rpki-client