Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File:                     1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier:          ikedQgVkNKUSahIHmrYVdJSxbiyoyAXfVAFV4QPSZ6k=
Subject key identifier:   ED:6C:24:41:3B:33:5E:DA:B5:95:EF:49:12:9B:01:13:9D:E2:42:BD
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer:       /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial:       01A001384A7B9DADCFE3CC1CBBF3761BDA9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number:          0D16
Signing time:             Fri 14 Aug 2026 17:01:01 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:01 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:01 +0000
Files and hashes:         1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: 5qHKEWHXHFTyyhlnMm+8qQxTOl5xYrXc7MP/WmEqOHU=)
                          2: Bnu29pluL1AD4wD2GgQvr07xtcs.roa (hash: I+PJfEbbOSJZNIrwOCyiS4eKNFmjFbXF4CqvEyNzfEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:4a:7b:9d:ad:cf:e3:cc:1c:bb:f3:76:1b:da:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
        Validity
            Not Before: Aug 14 17:01:01 2026 GMT
            Not After : Aug 15 17:01:01 2026 GMT
        Subject: CN=ed6c24413b335edab595ef49129b01139de242bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e9:e7:55:73:7b:e6:62:24:c6:88:74:a4:3d:
                    87:44:4e:c2:2d:ab:81:64:8b:d0:dd:d7:fb:54:cb:
                    37:a3:b8:d2:7a:87:40:50:fe:4e:57:14:83:33:0e:
                    68:f6:24:6c:88:4b:ca:57:93:96:b0:f3:55:e6:41:
                    f1:bc:30:14:b1:00:77:1a:a0:15:1c:a7:3e:33:14:
                    23:a2:15:9a:9a:8a:bb:4d:d7:e1:b8:b8:8a:6f:50:
                    da:d0:82:98:05:fa:01:0f:72:ed:4b:19:28:c9:34:
                    31:f4:18:92:e9:ae:9f:c6:83:52:1d:76:50:d4:22:
                    6d:38:d6:5e:7c:48:92:ec:55:02:e7:93:c5:55:a3:
                    c8:50:2c:62:d8:38:30:b5:b6:2b:ba:82:2a:29:29:
                    1d:95:45:07:ff:55:39:da:b2:5e:e9:a6:7e:d3:14:
                    8e:35:18:27:64:b9:4f:f9:95:c8:a6:4e:79:cd:40:
                    e4:db:b3:8b:00:bf:42:d6:f0:d4:83:99:9c:5b:4f:
                    0f:f7:50:dc:57:8b:cf:41:bf:e6:45:8a:c9:d8:86:
                    54:8c:93:c9:20:fb:10:c9:30:33:d0:ed:f3:0d:c6:
                    10:c8:9e:8a:c3:88:af:41:0c:75:8d:94:79:38:fe:
                    ca:be:7e:3c:72:7b:09:60:96:3b:3b:d4:54:86:67:
                    1f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6C:24:41:3B:33:5E:DA:B5:95:EF:49:12:9B:01:13:9D:E2:42:BD
            X509v3 Authority Key Identifier:
                keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:66:23:0d:87:3b:ed:0e:e6:7d:0d:30:9b:f2:67:b3:11:20:
         91:28:9d:51:48:00:a6:ca:20:55:96:78:59:42:90:c6:eb:cb:
         38:ae:f2:be:2a:f5:80:f8:70:22:22:7a:56:27:9e:3a:20:25:
         ca:2a:bb:7b:96:68:c2:e3:cd:f5:8b:a7:78:d1:53:9a:d6:41:
         f0:02:38:b3:2b:c9:f7:10:29:73:82:23:62:55:4f:4d:fe:ad:
         b6:39:c7:38:4e:57:b5:ba:51:4e:ba:96:41:3f:b5:6c:c8:59:
         2a:3c:8b:b5:b6:e6:ca:ea:f5:f6:40:02:e2:dd:e3:df:f6:4f:
         65:9e:db:f4:c8:b7:57:79:05:80:4f:8d:eb:3f:8f:92:fc:a4:
         04:98:84:e6:b2:33:bf:6e:3f:d9:df:17:49:75:fe:e4:78:54:
         3b:6c:94:89:f1:25:74:69:32:26:7b:70:44:e5:3b:e9:a6:58:
         64:a8:84:ca:c5:1a:3e:a5:cd:ae:82:de:fa:0f:10:2c:14:21:
         d7:b1:31:55:74:fa:a9:cd:6f:72:e0:ed:a3:de:f3:b3:dc:ab:
         2f:d6:46:75:54:13:dc:fb:95:9f:8f:93:a3:1e:3e:02:c8:d2:
         2a:5c:63:68:aa:82:e1:8c:80:64:5a:dd:70:7f:a5:a8:9c:55:
         5b:4b:25:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:47 2026 by rpki-client