Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File:                     1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier:          dVRbRJhofnWBwSsjq9L+XpSMtCZI/F5xEwCIqNXQ3eI=
Subject key identifier:   AC:37:D6:AF:E4:08:B0:12:2E:30:5E:4C:6C:13:A6:B9:23:4F:59:6B
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer:       /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial:       019E300556BB0E2F506AC1F0FBC6F26ACF44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number:          088E
Signing time:             Sat 16 May 2026 09:01:56 +0000
Manifest this update:     Sat 16 May 2026 09:01:56 +0000
Manifest next update:     Sun 17 May 2026 09:01:56 +0000
Files and hashes:         1: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: jd6g2ezH9npQvwe1AWRm02mhmrd54nUMiMA4c19Z7Qs=)
                          2: abVrM-FislRQr4Jmc_QgEdjxoJk.roa (hash: EdLdAhibmMBnrzkLj3SZLrtAjzaNkVfN1saf4F1Axa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:56:bb:0e:2f:50:6a:c1:f0:fb:c6:f2:6a:cf:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
        Validity
            Not Before: May 16 09:01:56 2026 GMT
            Not After : May 17 09:01:56 2026 GMT
        Subject: CN=ac37d6afe408b0122e305e4c6c13a6b9234f596b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3e:e5:d8:f2:91:33:72:d3:0e:dd:7e:91:c4:
                    18:bf:ca:50:cd:fd:ec:48:67:59:81:03:43:2e:a4:
                    cc:52:70:8b:59:cb:ca:b3:7c:af:b9:12:f6:20:72:
                    f1:e1:99:76:0b:01:41:2d:9d:3a:76:85:c2:51:19:
                    a7:cf:10:0c:48:48:8c:a1:36:0f:63:57:99:3c:4e:
                    ab:32:d2:44:dc:29:80:ff:cf:f3:d9:04:c1:e0:d3:
                    8a:4d:2e:f9:bc:89:ff:f9:65:67:84:4d:8c:35:7e:
                    d9:5f:fa:56:2d:25:b6:12:a9:76:0c:09:7c:68:ea:
                    a4:7d:0d:99:cb:71:52:11:1d:a7:4e:a2:e9:98:cc:
                    c5:0c:8a:a0:63:a0:9a:57:b3:98:f5:48:47:44:06:
                    ef:00:5b:c8:77:a1:0d:63:cc:b8:b9:79:88:37:c6:
                    64:bf:26:ed:ff:0e:ea:d3:ae:81:17:69:d0:2e:a2:
                    5a:5f:0c:5c:0e:8e:b1:b3:41:bf:ec:63:b5:46:e9:
                    99:12:94:5e:ca:eb:1b:62:15:17:0b:bf:58:cd:f2:
                    36:3b:b4:b1:4f:d6:f9:95:8b:01:cd:f2:f5:2f:46:
                    26:d2:c1:2c:29:9a:a0:d3:43:7c:96:ac:9a:42:2b:
                    75:43:21:e8:cb:a0:70:6b:62:77:82:5b:f4:1e:3b:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:37:D6:AF:E4:08:B0:12:2E:30:5E:4C:6C:13:A6:B9:23:4F:59:6B
            X509v3 Authority Key Identifier:
                keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d2:ee:62:6f:77:fe:3f:36:c0:d2:43:1d:72:bd:29:af:e4:
         d3:70:75:6a:8a:46:57:43:09:5f:39:0c:ce:f5:d3:9e:8a:aa:
         df:35:84:4c:8e:3a:06:b7:b7:4d:b8:4d:2f:25:bb:76:27:6a:
         1d:a7:5f:1c:d1:0d:f6:e4:96:25:a8:a5:57:20:31:a3:e7:c6:
         2d:6e:b3:45:61:66:f7:f1:6f:4c:49:43:a8:67:ea:a5:61:d6:
         a0:d3:67:6f:e9:44:6a:e9:0a:8d:69:8d:23:d9:e1:b5:41:83:
         78:49:43:39:39:59:09:39:fd:fe:30:9b:2b:00:76:1d:46:4c:
         33:f6:76:3d:36:dd:0a:68:f2:1d:3f:23:01:9e:62:34:17:cb:
         90:a4:b6:5a:52:f1:f5:ec:a4:3a:11:61:b8:25:ee:9f:b8:7c:
         7f:72:46:e9:bd:ef:09:ea:e4:a6:57:44:5c:2e:81:8d:f4:12:
         49:e4:b3:c3:9f:8a:e8:8d:f7:4a:e7:ae:a9:80:80:c7:a6:a9:
         fd:78:13:83:de:1b:d3:72:88:b6:6a:9d:e9:a2:76:93:87:8a:
         2f:9e:de:72:c5:ed:0b:6d:fc:99:d0:1d:52:24:4f:fd:ef:38:
         ab:21:c1:1e:20:42:89:51:f1:76:8f:f2:a7:e8:72:53:ac:09:
         08:62:50:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:54:52 2026 by rpki-client