Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
File:                     1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft (raw, json)
Hash identifier:          jwvmxpRmWhsI5Hhgu42SckqgHfs9MfI+jPRaPEw4/6s=
Subject key identifier:   F3:0B:74:72:D8:60:BF:9D:FF:91:18:5A:A4:8B:F8:6A:89:2D:B8:D8
Authority key identifier: F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99
Certificate issuer:       /CN=f877876fd45caf48d7d150da4b400981a167fe99
Certificate serial:       01A001DD6ADFA01FC58ADFB9974FAA81089D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 20:01:23 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:23 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:23 +0000
Files and hashes:         1: 1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl (hash: tKWIz/OK6WfZg4aLsTOmHmE05LcMA61nVC9keGyjkcA=)
                          2: x-xatRQzbMJq2QoB7VpakVl_dyQ.roa (hash: FUFQzFRUVGUSKSoKEZzjy+oCv2v1jEvkTjPlxRoTw4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:6a:df:a0:1f:c5:8a:df:b9:97:4f:aa:81:08:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f877876fd45caf48d7d150da4b400981a167fe99
        Validity
            Not Before: Aug 14 20:01:23 2026 GMT
            Not After : Aug 15 20:01:23 2026 GMT
        Subject: CN=f30b7472d860bf9dff91185aa48bf86a892db8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:79:d5:68:3c:73:a2:87:a1:df:6b:e4:58:c7:
                    bb:e2:48:b8:53:d1:49:09:17:72:34:1a:45:e2:25:
                    79:cb:39:2c:4c:38:a8:9d:8a:1f:dd:8b:ba:d3:96:
                    f4:35:9d:90:38:e7:61:cc:70:b3:82:f5:f8:1a:04:
                    5f:25:76:57:23:f4:51:6e:e2:81:13:40:61:54:58:
                    55:ae:ee:7c:5b:19:29:64:55:77:90:8c:0d:ee:02:
                    6f:61:d5:ec:95:0e:27:7d:fb:a1:26:aa:86:ae:18:
                    2c:4b:cb:70:9d:3d:51:a9:95:18:c8:0d:bd:cb:35:
                    14:e0:b6:31:08:f5:58:6a:0b:92:20:92:a2:43:cf:
                    df:de:6a:13:04:44:82:f7:1f:88:a5:a4:9e:a7:09:
                    22:50:50:bf:68:cf:da:bd:09:47:c0:4c:2e:62:75:
                    86:59:22:f9:93:ad:fa:95:b9:a3:54:4d:b3:64:0c:
                    9a:32:2e:19:a4:5a:7c:bd:5c:93:f3:ea:b9:21:17:
                    e7:4d:5f:a7:1b:33:19:b9:b5:33:4f:c7:ce:dd:cd:
                    ce:53:36:1c:ad:c9:fe:ad:cd:77:7e:5c:1c:06:16:
                    b4:04:4b:f0:e6:12:0a:ee:fb:64:ad:aa:ab:b6:29:
                    e4:76:74:4d:eb:84:2a:b1:1b:8d:a3:a2:a9:b9:b0:
                    5e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0B:74:72:D8:60:BF:9D:FF:91:18:5A:A4:8B:F8:6A:89:2D:B8:D8
            X509v3 Authority Key Identifier:
                keyid:F8:77:87:6F:D4:5C:AF:48:D7:D1:50:DA:4B:40:09:81:A1:67:FE:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f1c62f-3454-4e26-8ceb-f03e386313b5/1/1-HeHb9Rcr0jX0VDaS0AJgaFn_pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:5f:17:91:3b:06:b0:8b:18:96:9b:a9:38:e1:81:7c:3e:2d:
         4f:ab:98:9f:d6:fb:a2:eb:28:14:68:12:4d:0c:5a:5b:4a:cf:
         c7:f4:20:b0:16:20:e1:dc:39:27:91:60:ca:ca:b9:1f:c9:29:
         05:ec:51:ed:33:be:19:b5:96:1f:f4:66:af:e8:98:25:e4:fd:
         f9:79:33:8f:7f:b0:67:7a:09:47:5e:ef:ad:42:7c:19:e7:ac:
         24:de:43:a2:72:7e:e5:65:6c:e3:6a:9d:68:47:22:af:89:ca:
         a7:70:58:2b:1c:59:7b:02:8d:ad:3a:b0:96:a8:24:c0:0e:64:
         51:2c:8c:4a:35:ff:3f:62:83:96:a0:5c:33:fc:00:c3:15:08:
         cf:bf:52:12:33:d7:10:68:86:29:e6:92:00:e8:b6:2f:a9:d1:
         83:8a:01:43:7b:a8:9d:5c:05:36:21:c0:45:e4:2b:2d:30:32:
         c6:3c:7f:45:ac:39:e5:f3:d6:71:3a:e7:05:3e:b1:e7:04:0a:
         90:64:80:51:75:33:bd:d2:d8:01:d4:ae:94:80:7f:b0:c6:a3:
         1d:15:56:b8:9c:46:35:b1:b2:6f:e9:2a:f9:6b:b3:cc:5f:ae:
         9d:4e:f6:08:90:2a:72:61:ce:63:bd:23:b3:4b:53:e7:32:75:
         b2:c9:6e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:33 2026 by rpki-client