Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File:                     1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier:          UFgUBvgl+BEgkGtPUSjHkeVjj0tz5sJb2uZU90qKACI=
Subject key identifier:   7C:9A:F3:74:12:F8:49:03:96:F0:13:A6:48:D2:37:B3:49:95:E0:CC
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer:       /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial:       019D99D080D88F204FF8ABB1A25B8F712BA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number:          115A
Signing time:             Fri 17 Apr 2026 05:01:11 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:11 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:11 +0000
Files and hashes:         1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: wuRQSWCfdndX7gOOyhW5lB09iMQXI158j9i+a6nYmY4=)
                          2: 9GKzto8F8VSvC2cabKjYXdbXzwM.roa (hash: 3PzwakewoGlY9+PpIdZTrhAHAsAZ3tnyJrCLep3Ietc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:80:d8:8f:20:4f:f8:ab:b1:a2:5b:8f:71:2b:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
        Validity
            Not Before: Apr 17 05:01:11 2026 GMT
            Not After : Apr 18 05:01:11 2026 GMT
        Subject: CN=7c9af37412f8490396f013a648d237b34995e0cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:22:8f:cf:a3:bd:14:97:ae:05:22:9a:cc:
                    dd:69:da:f0:d0:26:11:95:80:e9:7e:9d:31:fd:09:
                    95:b4:34:e9:c0:4c:3e:a4:b1:cf:2d:b6:28:05:e2:
                    1d:1f:08:ec:26:54:f0:6a:c9:9f:da:f2:71:87:e7:
                    ca:12:c7:61:12:60:16:bf:c3:56:54:3b:5a:a4:f2:
                    ae:e1:36:86:8b:92:0d:f7:6e:8c:71:7e:90:af:ff:
                    7f:82:89:f1:18:6c:e4:ca:bc:4a:bb:52:f2:a2:3e:
                    36:80:45:86:ba:f8:f9:36:6d:f1:a3:35:71:39:2c:
                    ca:25:c3:40:e7:96:f4:09:5b:17:7e:bb:69:b9:08:
                    44:9f:9a:3f:36:c6:93:69:ef:1f:22:48:db:b5:e2:
                    00:5f:4e:8f:72:a5:26:fe:bc:32:1e:fd:00:94:d3:
                    79:5f:a9:1e:0a:19:41:29:24:ce:03:09:eb:4c:dd:
                    87:9b:88:cf:c1:c8:47:26:ff:ae:c3:a4:f2:45:28:
                    d5:df:36:27:08:d8:87:55:7e:5d:b4:bb:62:07:91:
                    e7:25:9b:e3:e6:8a:da:42:5c:33:80:a8:3f:c5:b8:
                    97:f3:45:32:46:d4:6d:65:ea:7d:2d:73:eb:f8:ad:
                    28:63:0a:37:cc:34:c1:2d:57:09:09:8f:8e:bb:2c:
                    97:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9A:F3:74:12:F8:49:03:96:F0:13:A6:48:D2:37:B3:49:95:E0:CC
            X509v3 Authority Key Identifier:
                keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:61:b4:44:c5:32:ab:c1:05:6d:ea:f1:53:3f:87:1c:41:ff:
         4f:3b:72:9b:ef:87:fd:a4:28:bd:9c:af:ff:f7:c7:5f:81:01:
         d9:d9:2b:68:41:bc:54:7d:e1:37:79:e9:53:41:7c:0d:3b:63:
         74:5d:c5:77:75:23:15:2e:56:7b:06:56:c4:d1:6d:5f:2d:30:
         b4:ee:ca:22:db:04:85:35:67:45:9f:f7:5a:d0:bf:fb:11:1f:
         6f:33:fb:43:6b:64:c6:50:66:74:54:f0:f6:04:92:2e:00:25:
         31:50:23:4f:96:fe:58:45:5d:27:7c:fa:c8:54:e2:b4:9a:c6:
         2e:91:52:24:dd:11:c2:68:1b:42:54:a4:f1:7b:fd:51:c8:b8:
         ec:97:03:19:5b:74:ca:93:3d:54:b9:63:9c:4c:ed:4a:ab:31:
         b8:0e:6c:dc:d9:7d:78:2f:25:ab:4c:27:33:dc:a1:21:42:e3:
         7b:66:1e:66:de:ff:d7:cd:9e:cb:1c:f9:c0:40:03:43:bc:7f:
         1b:3d:c6:ae:82:93:eb:d1:40:61:de:1d:c4:9e:e3:f3:5d:02:
         99:1a:f1:9b:79:da:54:8b:db:75:15:86:11:97:6f:f3:e1:25:
         83:2f:65:0b:1e:5f:1b:5e:20:29:ff:f3:d8:6d:b9:96:ed:73:
         cf:9f:cf:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:17 2026 by rpki-client