Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File:                     1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier:          i45Fdzq1bzM1LgLblt4iIiPKAhTq5+5x0tpBGrOTw7M=
Subject key identifier:   F4:06:AE:93:0A:46:48:3B:D9:E0:FA:23:21:BD:BB:7D:A4:5C:6B:E9
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer:       /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial:       01A0017023C89F4FEA26BABC886E07A7892D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number:          19FF
Signing time:             Fri 14 Aug 2026 18:02:01 +0000
Manifest this update:     Fri 14 Aug 2026 18:02:01 +0000
Manifest next update:     Sat 15 Aug 2026 18:02:01 +0000
Files and hashes:         1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: xFBi7eFEybiD+EOl4vulH5OZp1SpmCAJwT61RC6VzD4=)
                          2: 3vC4pYqybSvnyiv9AWSFuid8GOw.roa (hash: v8QGywV5eLuGaT2Uqfo+veGfvP9FzA92hTs+zKxoZtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:23:c8:9f:4f:ea:26:ba:bc:88:6e:07:a7:89:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
        Validity
            Not Before: Aug 14 18:02:01 2026 GMT
            Not After : Aug 15 18:02:01 2026 GMT
        Subject: CN=f406ae930a46483bd9e0fa2321bdbb7da45c6be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:9f:59:9b:c5:9c:76:5c:bd:dc:f5:e9:a2:
                    a6:ea:63:08:c3:1e:9a:56:56:ef:ad:5e:a9:69:23:
                    3b:b1:6f:7f:10:a4:b4:d3:75:5c:c9:15:7b:99:8b:
                    ab:34:3c:15:2e:28:69:21:6e:8b:e5:27:2f:bc:6c:
                    a7:a8:3f:44:32:ae:17:2e:6a:8c:ed:e2:3b:a2:b5:
                    51:2a:1e:31:f8:1e:a1:86:82:04:f1:eb:c2:23:20:
                    14:71:8e:ef:b3:f3:d4:c5:5b:4b:92:1d:bc:7c:fa:
                    26:44:17:ac:09:74:c5:b7:1b:74:14:37:aa:e7:d2:
                    6b:0f:99:9d:ec:b0:bf:6d:60:21:be:a5:49:02:c6:
                    d9:70:62:a0:fd:81:35:e3:c6:46:6e:a9:a4:10:88:
                    17:87:f4:44:47:60:77:cb:53:9a:40:52:d0:52:6d:
                    ea:50:30:8a:dd:c2:e1:e2:46:17:19:79:41:50:4d:
                    97:57:d1:a1:2f:53:ae:1c:51:ce:a8:a8:cc:a6:d1:
                    08:b6:33:c1:74:82:6f:7c:52:3c:10:39:9c:83:ae:
                    95:27:67:84:9a:b3:1f:49:ee:37:ef:c5:ef:07:7b:
                    03:61:c0:c0:5b:64:29:84:b3:12:aa:f3:4e:fb:f3:
                    de:3d:95:20:f4:3b:2b:29:53:00:8b:21:2d:52:14:
                    84:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:06:AE:93:0A:46:48:3B:D9:E0:FA:23:21:BD:BB:7D:A4:5C:6B:E9
            X509v3 Authority Key Identifier:
                keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ba:85:b2:0c:39:d1:94:53:11:3d:d2:9b:16:af:8b:90:58:
         8d:dd:01:cd:f6:f0:9b:92:ef:0e:e6:84:e6:af:51:ff:06:ce:
         77:29:59:f2:bb:b6:ae:e9:98:d3:a2:ba:89:b1:15:61:b9:43:
         48:88:1a:95:75:05:6e:63:3b:3a:d7:e9:7f:cf:11:56:95:6b:
         94:e7:50:4b:7c:c6:a9:f3:ce:68:05:94:81:62:a8:41:41:8b:
         ad:df:ba:6f:8e:a4:ba:4e:9f:1b:32:1a:1b:f3:7b:63:9b:9a:
         0d:fe:7e:f7:a8:01:0d:ad:9c:38:f7:33:31:63:0d:91:5d:81:
         61:e3:07:98:18:73:0a:4f:8c:64:ba:f5:48:52:0a:01:4f:d4:
         ac:6d:a8:6a:c3:1d:ab:10:b6:ac:f6:0d:03:57:e6:d0:9f:99:
         3e:c4:20:d7:66:1e:d5:7d:87:1e:8c:fd:19:a6:37:e6:44:5e:
         b5:38:56:b9:c3:11:c7:0e:70:0d:f5:24:f7:69:ca:a3:b6:10:
         2e:82:20:50:c8:e6:72:94:61:e0:99:c9:7e:2f:82:f2:d6:2e:
         b8:c5:8d:4b:29:70:29:46:65:3b:c8:cd:5a:d6:c2:b0:8b:3a:
         4d:fe:46:ab:91:f0:e4:46:79:75:ba:b4:60:bd:6a:d6:1c:03:
         b9:65:5d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:54 2026 by rpki-client