Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File:                     1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier:          dPIoC98pnK2xnmSYnOaSXno7h2CmdMxmoU3e/YIa3Hc=
Subject key identifier:   F2:3B:4D:68:0C:D9:FD:30:C3:F2:8B:45:3C:FE:48:15:FA:63:18:CC
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer:       /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial:       019D38D30103AE80892BB9C95A3AD85A4CB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number:          080E
Signing time:             Sun 29 Mar 2026 09:00:45 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:45 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:45 +0000
Files and hashes:         1: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: EC7w1IgLte3H4y3WVlf7pVNJoiQM37JjDKIc+5vwRdo=)
                          2: abVrM-FislRQr4Jmc_QgEdjxoJk.roa (hash: EdLdAhibmMBnrzkLj3SZLrtAjzaNkVfN1saf4F1Axa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:01:03:ae:80:89:2b:b9:c9:5a:3a:d8:5a:4c:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
        Validity
            Not Before: Mar 29 09:00:45 2026 GMT
            Not After : Mar 30 09:00:45 2026 GMT
        Subject: CN=f23b4d680cd9fd30c3f28b453cfe4815fa6318cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fa:21:72:57:59:ed:08:27:e9:f4:0e:3c:3c:
                    7b:f1:4a:da:1f:48:38:c9:1a:4c:c9:61:a4:ec:22:
                    7d:62:94:4a:b5:ff:a7:fb:af:b1:06:29:b9:79:3c:
                    77:c3:79:11:36:3a:9a:b7:8a:9e:5f:7c:78:29:f6:
                    d0:62:f2:72:d4:4a:2d:e7:69:ab:2d:72:4c:35:e1:
                    4c:30:4c:1c:f5:ae:1e:f4:c9:73:fb:24:7b:3a:a1:
                    39:da:13:42:eb:61:e4:bc:71:b1:4c:27:20:48:22:
                    80:b8:07:4f:c6:65:ff:c5:be:c3:a7:03:1c:00:6d:
                    3d:5e:8b:ef:4c:cb:7c:93:05:32:f4:22:72:ad:cb:
                    3d:00:d4:83:5d:c2:76:e5:e5:e6:38:0e:36:b5:d4:
                    66:fa:fc:a5:eb:0a:a3:5e:bb:b7:af:a1:53:47:dd:
                    a6:77:4f:38:0a:ee:80:10:35:fb:c4:78:4c:dc:de:
                    0e:03:97:99:9f:58:91:8a:91:d7:e6:97:bd:52:69:
                    a8:95:a7:c7:e3:2f:c3:67:03:3f:4c:78:92:e0:ad:
                    ff:cf:37:ce:2d:bb:b7:b5:2b:8d:ad:fb:e7:94:44:
                    3d:68:4c:46:76:97:5d:37:70:a2:1c:30:6d:9b:8a:
                    e9:92:a3:79:ba:b5:3a:a7:64:8e:a8:e0:19:33:ec:
                    f1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3B:4D:68:0C:D9:FD:30:C3:F2:8B:45:3C:FE:48:15:FA:63:18:CC
            X509v3 Authority Key Identifier:
                keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:d2:7b:27:4e:5c:5e:df:ad:80:8a:9d:87:2c:7a:b9:fe:
         d8:0b:e8:77:98:f2:bd:79:d1:24:7c:e0:22:e2:96:34:e7:96:
         7b:70:37:61:5b:01:cb:c2:4d:65:d7:4f:b3:fc:81:73:a1:74:
         68:e7:ab:3d:ff:52:e8:e8:12:7e:55:7f:3d:1a:fe:f3:0d:89:
         18:64:f9:35:4a:31:3a:88:fa:47:b5:85:96:07:43:f6:c9:da:
         ee:a7:20:b2:13:4b:7a:93:3d:62:0b:b9:ee:c5:05:6a:54:b4:
         c1:a7:2f:97:cc:10:99:32:95:1e:29:9c:7c:67:ef:78:7d:4a:
         69:84:ec:52:a3:44:08:a2:df:fc:26:33:02:72:42:ae:51:a0:
         a2:71:af:ce:aa:7b:f1:46:99:1f:31:49:4c:19:59:12:a5:a7:
         df:47:4f:c6:8e:54:3f:fd:ab:f7:76:50:77:c6:ed:bf:c0:9e:
         d5:f4:4d:f0:ce:ff:84:f8:88:8b:01:69:44:31:b6:e8:49:b1:
         26:49:2e:ec:60:56:90:0c:97:b2:f2:e7:f9:45:59:1a:aa:51:
         34:7c:1c:e5:54:fa:a8:55:a1:08:05:cd:86:78:85:ad:e9:ed:
         a0:29:b9:a8:46:e7:b0:c7:01:33:29:da:f8:8c:52:5d:ff:07:
         a4:c7:46:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:11 2026 by rpki-client