Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File:                     1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier:          m26rsdPpk0cG4eYj4LmkpGLjXXWif54g1fP5qTpyM3M=
Subject key identifier:   02:EE:65:DA:B5:FE:6F:28:49:0E:42:13:E4:43:3B:02:87:D3:43:EA
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer:       /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial:       019EB8B3EC8956E338063051F907B86691CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number:          1731
Signing time:             Thu 11 Jun 2026 22:00:59 +0000
Manifest this update:     Thu 11 Jun 2026 22:00:59 +0000
Manifest next update:     Fri 12 Jun 2026 22:00:59 +0000
Files and hashes:         1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: u/1sfoeVuCjOdYnAfeNl9lgIbsbkYfQQdIjC/3LjyBo=)
                          2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b3:ec:89:56:e3:38:06:30:51:f9:07:b8:66:91:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
        Validity
            Not Before: Jun 11 22:00:59 2026 GMT
            Not After : Jun 12 22:00:59 2026 GMT
        Subject: CN=02ee65dab5fe6f28490e4213e4433b0287d343ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:49:d8:aa:47:b0:30:b1:bd:e4:ab:c3:7a:c2:
                    a3:31:47:18:3f:29:8f:74:ae:00:c7:dd:f2:cb:4b:
                    fd:b8:f1:36:d6:73:d3:a0:a2:e5:52:94:8c:7d:8d:
                    09:d7:f1:4c:39:b9:19:86:63:93:ea:fa:dc:0a:17:
                    73:d4:76:f1:90:51:1b:a0:6c:e2:e9:63:b3:ae:1a:
                    d8:3d:23:c9:e3:32:6f:81:c6:07:d7:38:6c:9d:3f:
                    0c:97:47:fa:76:c8:3b:9e:0a:e9:bb:4f:82:2d:75:
                    dc:bd:7b:92:a2:33:eb:05:ea:03:03:2c:e1:af:09:
                    58:11:da:5c:3d:60:77:45:5e:48:c8:a0:2a:fe:d7:
                    8a:6c:30:2a:c9:e3:81:37:87:ea:2c:61:bc:86:18:
                    1d:3c:3d:d5:e5:bc:b2:ee:72:80:35:a4:bb:04:03:
                    bb:d0:f1:10:f7:e9:c9:76:c5:99:6d:c4:d9:f6:3c:
                    55:a0:52:4d:34:0c:a7:90:9e:6e:a1:5a:9d:31:47:
                    5e:c3:03:01:90:95:3e:68:80:f9:ab:64:08:f0:fe:
                    5c:58:e5:ae:df:a5:90:c5:ac:2d:6f:0a:bb:2e:db:
                    bf:98:f5:57:0e:21:2c:d0:02:12:72:fa:3d:bb:2d:
                    34:4b:7e:00:60:24:68:2c:3a:4f:7c:ff:f5:43:1e:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EE:65:DA:B5:FE:6F:28:49:0E:42:13:E4:43:3B:02:87:D3:43:EA
            X509v3 Authority Key Identifier:
                keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:85:40:08:10:55:e6:89:fa:32:8e:9e:d2:1c:b7:82:1a:ca:
         6b:f6:6d:76:b8:d6:44:83:3b:ac:72:1a:c8:ef:68:30:4f:62:
         eb:ef:89:ed:0b:41:71:d5:9c:71:2c:b9:bb:ea:77:73:ed:3a:
         55:c5:45:1d:dd:d0:85:01:1c:43:96:e4:0f:9f:2d:e6:e9:75:
         91:79:82:27:d6:31:5d:b2:54:cf:87:03:02:46:09:f0:c9:e3:
         64:10:86:21:51:eb:45:a3:af:94:83:b3:5f:d5:c7:92:ab:f6:
         92:9f:48:09:ac:c4:e8:e3:77:51:cc:51:aa:88:bb:06:33:64:
         a0:5b:85:fd:d0:f9:6b:98:36:30:89:ac:22:0e:b3:64:90:9e:
         6c:a7:77:e6:f2:44:ff:7e:84:b5:1d:ed:a5:2f:7f:84:d3:cc:
         43:e6:6a:56:3a:79:2e:56:c0:60:d9:c3:59:8a:99:98:ee:fb:
         e2:ba:55:02:b4:42:18:66:fd:aa:fa:b5:6d:2d:b7:6f:13:e9:
         ec:da:b2:f0:f6:a0:32:2e:02:62:a6:15:52:0a:9d:16:b6:05:
         22:f5:b4:a4:e5:3e:95:ab:02:0c:1f:14:e2:e1:a1:c7:58:27:
         ab:d1:44:86:7a:2a:13:51:5c:42:16:e4:a7:fb:27:28:ab:a7:
         c7:95:1a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:12:38 2026 by rpki-client