Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File:                     1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier:          xs89PDDBmWwfxnujyK0ZjvaEXqmrApp4ij8xNGLOdLw=
Subject key identifier:   C5:9A:16:EB:46:74:44:71:5D:2E:41:8A:93:4C:68:D8:A3:A9:1A:18
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer:       /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial:       019FA906D6A1FB305543954F2DDB17FD902F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number:          126B
Signing time:             Tue 28 Jul 2026 14:00:25 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:25 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:25 +0000
Files and hashes:         1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: MT/dpp3Et96if4ShfXhbhpWxgFCkB4GMY/oPxIkVfh8=)
                          2: 9GKzto8F8VSvC2cabKjYXdbXzwM.roa (hash: 3PzwakewoGlY9+PpIdZTrhAHAsAZ3tnyJrCLep3Ietc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:d6:a1:fb:30:55:43:95:4f:2d:db:17:fd:90:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
        Validity
            Not Before: Jul 28 14:00:25 2026 GMT
            Not After : Jul 29 14:00:25 2026 GMT
        Subject: CN=c59a16eb467444715d2e418a934c68d8a3a91a18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:2e:f5:aa:a4:03:80:83:01:92:3c:75:e7:47:
                    e3:5e:7c:30:b1:0e:93:77:09:95:f2:bd:df:5c:44:
                    ac:e7:81:b9:4d:8d:da:d6:9e:73:18:59:ea:49:06:
                    23:ec:5e:e0:20:92:31:82:7b:27:b2:69:d6:24:82:
                    56:3f:8e:c7:c3:ea:e2:6f:41:e5:89:74:89:78:d1:
                    db:88:77:b0:43:8e:b9:ab:4a:da:a0:15:d3:71:18:
                    7f:94:56:27:bb:21:7e:dd:68:37:80:a7:dd:ec:64:
                    a3:0c:18:c4:2e:d1:b0:15:2d:18:d5:c1:30:26:56:
                    80:bb:3f:84:2a:29:42:a1:ea:50:c2:aa:84:50:0d:
                    61:45:7c:a5:2d:03:a1:8d:af:33:d9:5e:bd:87:c1:
                    ad:66:2c:23:7a:96:6c:be:4b:fb:37:19:0e:5e:46:
                    18:8d:5f:17:2f:8a:4f:44:c4:0c:e3:9f:d6:70:32:
                    21:33:a9:2e:8c:29:6b:09:43:1d:78:55:ca:29:d5:
                    b5:48:3c:10:22:38:87:0b:ad:af:9c:da:a8:1c:c7:
                    8c:dd:95:6a:9c:a9:44:69:aa:62:d3:b7:65:02:0f:
                    bc:17:8e:e4:02:07:8c:2f:12:d7:3e:36:a1:c8:d1:
                    f8:0d:35:f7:9a:93:22:b7:34:bd:b8:b2:9f:19:04:
                    a0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9A:16:EB:46:74:44:71:5D:2E:41:8A:93:4C:68:D8:A3:A9:1A:18
            X509v3 Authority Key Identifier:
                keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:4e:07:62:62:ed:0e:2c:f4:c7:88:f8:26:d1:b8:c1:46:54:
         86:3f:fe:73:a5:e9:6e:19:13:7d:33:f7:05:2f:ab:d7:5a:1e:
         29:eb:29:67:3f:66:21:56:c3:6b:b6:d6:dc:a2:ae:cd:36:e6:
         9b:0d:7b:25:6b:1d:0f:1b:2b:58:7e:ad:8f:57:66:f7:03:4c:
         4e:3f:05:8a:4a:28:b2:0b:b9:d3:57:2d:bc:97:49:70:fc:a3:
         e6:1e:60:fe:17:43:49:e5:82:ac:3f:39:02:5f:ea:bd:3c:3b:
         da:f4:0e:73:48:07:84:f4:9a:1a:85:59:30:42:79:57:74:41:
         87:7f:93:c1:4f:78:82:7c:78:a4:d7:0d:ed:e2:fd:91:3b:d5:
         45:77:57:28:c4:62:db:60:22:5d:49:76:cd:43:12:84:d7:fe:
         58:4b:7b:2f:f3:4d:3f:91:51:31:dc:44:64:2b:e5:6c:0c:7e:
         81:1f:cd:a2:41:7f:8b:f7:ea:1e:f8:c2:bf:c0:44:99:68:88:
         6d:fb:26:54:fb:00:fa:32:f9:a1:4a:a7:ae:2e:0d:41:55:7e:
         29:0c:4c:3b:e3:11:07:15:2a:23:9b:d8:42:68:1d:41:62:ac:
         41:53:0f:53:aa:bf:42:e8:79:26:04:4a:69:cd:8f:48:2b:14:
         fd:74:e7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:25:43 2026 by rpki-client