Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File:                     1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier:          BCZthqvNuF50tz58e+AmuVupvIsnR5fTisusFgRK3z4=
Subject key identifier:   C2:FE:4F:EB:C3:08:9C:E2:39:B1:90:64:33:6C:9E:C9:4A:FF:6B:6E
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer:       /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial:       019E30E0D7E63A7EA846EBDDDA3C579EB9A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number:          06B1
Signing time:             Sat 16 May 2026 13:01:42 +0000
Manifest this update:     Sat 16 May 2026 13:01:42 +0000
Manifest next update:     Sun 17 May 2026 13:01:42 +0000
Files and hashes:         1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: BY4W0al+kJq2ZHBf+VUCSaU8hsdx9XeVSUAbzlAIzNs=)
                          2: sorUGGWe1LLztpuUErMIMbx90dE.roa (hash: e/DVtYzq//vQzs5AELDtVTrdhuXE8VIADl3/vxdL9m0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:e0:d7:e6:3a:7e:a8:46:eb:dd:da:3c:57:9e:b9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
        Validity
            Not Before: May 16 13:01:42 2026 GMT
            Not After : May 17 13:01:42 2026 GMT
        Subject: CN=c2fe4febc3089ce239b19064336c9ec94aff6b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:38:87:c4:2b:ed:23:67:a9:eb:9c:97:21:
                    07:c7:27:e3:e1:a3:63:35:6f:fe:d7:16:b5:7f:1d:
                    f1:9d:e1:9e:44:79:93:9e:f0:87:80:65:c3:f3:7b:
                    db:ad:53:94:c8:1c:35:04:ae:23:49:a8:3f:2c:a3:
                    aa:ae:9f:c5:b7:44:1e:ad:26:c0:70:a9:1d:e2:e1:
                    11:9c:ec:78:1c:cb:59:e9:90:cd:ee:ab:09:79:17:
                    6d:35:74:6b:1f:9a:9c:27:5e:24:39:96:c7:2e:d9:
                    c4:39:20:1b:4c:a5:24:c7:10:55:8a:e4:d2:5e:e5:
                    07:06:42:94:56:8b:7c:b1:8d:e4:85:20:6b:a8:24:
                    2a:3d:3e:c2:fe:16:98:c6:2f:14:0a:0a:bc:6a:21:
                    e4:90:40:8a:29:63:cb:d0:b4:16:39:b8:ab:58:0f:
                    9b:50:d1:50:54:eb:02:6b:4a:f0:0f:03:43:62:40:
                    b4:1f:c9:94:bb:d3:e0:93:78:5c:57:9c:ae:3e:7d:
                    b8:ae:50:3d:ab:d9:cc:87:c3:d8:cd:bb:2f:66:db:
                    0e:bb:49:ef:d9:3b:90:b0:7f:93:7a:d3:81:ac:2b:
                    78:93:40:ee:65:16:ae:dd:3d:98:6b:57:16:fb:75:
                    9a:82:c2:e1:4c:a2:be:df:dd:f4:1d:00:36:5f:b7:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:4F:EB:C3:08:9C:E2:39:B1:90:64:33:6C:9E:C9:4A:FF:6B:6E
            X509v3 Authority Key Identifier:
                keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:07:36:4a:d1:c5:95:bf:60:46:5b:5f:61:d5:7e:dd:8b:69:
         f0:bc:c6:11:b8:43:02:7e:81:5f:eb:93:a5:c6:24:bc:b1:64:
         ee:c8:f2:d8:23:62:44:96:73:ed:7f:46:b7:36:97:1b:2b:7c:
         6f:c2:5e:9a:d6:a3:a6:87:59:77:6d:d7:3d:47:d3:3e:3d:ce:
         97:66:85:ae:62:7f:18:23:c8:71:17:00:27:99:73:76:bc:9b:
         eb:65:cd:88:c1:97:94:30:75:40:41:7b:39:d9:c7:f1:cf:a8:
         a6:1f:cf:13:15:06:e8:a5:68:20:70:8c:07:05:03:30:c0:79:
         1d:9b:94:07:dd:6f:3b:0b:70:37:ca:8a:a6:39:18:58:10:af:
         29:74:42:5c:41:06:90:d0:36:18:8a:45:b3:29:63:2e:84:c4:
         10:ad:85:db:83:83:50:de:11:70:63:c6:f0:87:8a:ed:77:bd:
         48:d1:f4:f5:eb:49:97:2e:d1:3c:f8:63:8e:b5:1b:41:87:66:
         9a:12:91:48:fa:38:75:25:ae:5e:28:9c:c6:88:2a:19:7e:68:
         59:87:bd:72:e7:20:0c:14:72:da:2d:bf:e8:38:bb:a8:3a:cb:
         8e:7a:fb:a0:34:e9:03:ee:7e:ab:34:4f:46:a7:39:ef:76:47:
         c9:63:63:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:40:17 2026 by rpki-client