Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
File:                     1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft (raw, json)
Hash identifier:          94wnfwnbU/YY/Lgzm75q2ljWShmNmXZxe0FcBFDOYcA=
Subject key identifier:   D7:DC:BE:E1:57:CF:61:32:87:D0:58:59:AC:95:DC:5D:85:43:AE:92
Authority key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Certificate issuer:       /CN=f90588ca22897c69a102949a682f9f1a35835bab
Certificate serial:       019E6D9A4458940FB3B423588C777221EF16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
Manifest number:          C0
Signing time:             Thu 28 May 2026 08:01:26 +0000
Manifest this update:     Thu 28 May 2026 08:01:26 +0000
Manifest next update:     Fri 29 May 2026 08:01:26 +0000
Files and hashes:         1: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl (hash: LcTNCSVfqIc0pHwLIGjqB0vb0m/AHAHQSMXRM0xRIx0=)
                          2: M0gW80SQeN8-sWeK4V4IiUTNncs.roa (hash: 5lMZVBWnzilRk6pbxwjn0M4dlZP9bPyruzS+ojF0eMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 May 2026 08:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:6d:9a:44:58:94:0f:b3:b4:23:58:8c:77:72:21:ef:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90588ca22897c69a102949a682f9f1a35835bab
        Validity
            Not Before: May 28 08:01:26 2026 GMT
            Not After : May 29 08:01:26 2026 GMT
        Subject: CN=d7dcbee157cf613287d05859ac95dc5d8543ae92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b9:ee:1c:66:48:e6:0d:55:15:58:6e:ce:ea:
                    7d:64:cd:c6:a4:67:16:60:28:bb:6e:de:85:a4:dc:
                    66:fd:88:9d:a4:49:26:53:b3:68:31:82:8e:cf:54:
                    8d:5f:12:96:9e:ce:f9:7f:f9:d5:62:5e:af:03:fd:
                    bd:25:f0:c7:3b:0c:ac:c3:0d:f2:a6:17:7a:c6:57:
                    22:98:1d:e7:f4:f2:41:2c:f5:82:a0:83:8d:c3:b4:
                    c9:36:7e:75:e4:82:8d:64:58:50:4e:18:f1:7d:9d:
                    68:20:c2:6d:65:91:12:37:3b:19:45:95:6b:63:94:
                    e1:68:1d:29:d1:fb:7a:45:73:94:de:bf:75:81:37:
                    0f:0a:14:79:b8:ec:b2:15:ae:ac:fb:f0:41:c1:cc:
                    c6:c8:d4:c6:16:65:e9:80:33:b8:fe:25:22:d9:30:
                    9b:10:ad:66:af:8f:49:c4:73:2a:b8:f2:ab:50:80:
                    82:4e:c2:8e:eb:94:ff:30:7f:80:89:c3:0d:2d:3f:
                    6a:1c:48:33:22:d4:dd:5a:d1:44:81:60:c7:4e:42:
                    c7:0e:b4:de:df:12:a1:56:08:cf:e1:1a:68:5b:8f:
                    63:5b:75:d9:49:50:ea:12:61:30:ff:a8:98:5d:60:
                    f5:f1:fe:38:4b:41:70:7b:a1:34:9f:f2:ab:81:72:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DC:BE:E1:57:CF:61:32:87:D0:58:59:AC:95:DC:5D:85:43:AE:92
            X509v3 Authority Key Identifier:
                keyid:F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0d:3d:1c:dc:8b:e9:56:8c:cd:c2:8f:7f:81:65:8d:9c:ee:
         52:c0:dc:59:f0:52:c0:6b:38:cc:68:ec:a7:83:5b:76:46:6e:
         ef:db:64:59:85:a6:48:db:7e:85:87:a8:45:50:8d:8e:fb:99:
         38:08:a1:07:fc:8c:31:76:6a:2c:45:e4:ba:90:c6:b7:30:44:
         92:a4:02:31:c5:5a:25:f4:fc:ee:45:74:28:da:ed:06:af:db:
         ad:b9:b0:4e:af:73:d0:bc:40:d3:c2:27:c5:51:aa:07:98:10:
         1e:b0:ca:23:a0:63:bd:76:17:7e:4b:ff:4a:04:b4:44:88:6b:
         29:0d:cf:41:61:14:d7:7c:3a:bb:69:9d:c0:81:63:94:3f:6c:
         f7:1d:88:6e:db:6d:3e:b5:6b:ba:4b:68:61:67:fb:00:99:6f:
         88:20:1f:92:a2:af:24:c5:7b:7a:75:dd:df:0f:af:a5:4c:61:
         6a:6b:25:88:2c:eb:45:35:02:9c:12:e3:a9:52:de:1f:2a:c2:
         97:24:ad:c0:dc:7d:d4:c2:94:8a:54:db:96:2c:83:36:cd:0a:
         2e:8a:fa:2d:8b:20:b1:81:0e:32:5e:c4:2d:ed:e7:18:1a:96:
         0e:b7:47:5f:69:56:6c:bf:eb:9b:26:d8:5f:10:5d:ad:be:65:
         aa:38:ef:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 16:24:10 2026 by rpki-client