Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File:                     1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier:          ROf4DHUGvst7eSBfkWXERL7GopV8xMKp9Hw/V0o3CJM=
Subject key identifier:   1C:46:80:E5:9D:89:30:7C:45:FD:69:25:0D:87:ED:26:F5:89:D5:43
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer:       /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial:       019EBE7F8DC8A68620A1188B52A2B03F3795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number:          0F85
Signing time:             Sat 13 Jun 2026 01:01:30 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:30 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:30 +0000
Files and hashes:         1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: AzXgyNP18wUPw6kRyrCPZE82BjCRRkXIfuCSyc59nwQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:8d:c8:a6:86:20:a1:18:8b:52:a2:b0:3f:37:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
        Validity
            Not Before: Jun 13 01:01:30 2026 GMT
            Not After : Jun 14 01:01:30 2026 GMT
        Subject: CN=1c4680e59d89307c45fd69250d87ed26f589d543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:db:75:1e:32:5f:48:6a:9a:cd:73:70:dd:
                    de:fc:89:11:ba:21:f9:be:af:d2:8d:7a:c9:89:10:
                    e6:59:ec:42:46:a1:00:72:06:14:08:ec:06:5c:28:
                    71:82:79:d6:86:f0:6a:29:6b:7b:95:8c:14:00:27:
                    e1:94:9a:59:42:01:ab:02:a9:02:95:a8:c6:f0:9c:
                    8a:3f:29:74:2c:73:02:1e:34:85:04:0a:60:ae:53:
                    21:22:6a:00:2d:4c:ed:39:fd:c3:c0:31:de:f1:21:
                    b4:95:8b:c5:e4:ca:80:1b:d3:8d:b6:a0:8d:7b:d4:
                    ce:1d:3f:4e:9b:df:39:45:73:75:e7:60:ca:b2:e3:
                    b0:2b:ba:b5:3b:3a:65:e0:c0:9e:b3:ab:11:78:ce:
                    b1:72:71:59:11:c0:db:81:9a:5d:be:df:3a:1c:80:
                    32:04:25:a5:64:6a:7a:39:6d:48:78:4c:fe:20:77:
                    9c:48:b6:f8:32:b2:7c:fe:84:8b:03:b5:a1:65:75:
                    07:49:b0:fa:9e:69:e1:fe:cb:bf:62:36:fb:e8:d4:
                    aa:bb:f3:34:2c:9e:41:d5:08:da:3a:fd:36:0b:06:
                    61:14:5a:45:5b:df:ff:4f:db:c6:05:b9:fe:5f:2d:
                    5d:a0:52:cf:8a:8c:30:a2:70:a3:b5:37:24:2e:1b:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:46:80:E5:9D:89:30:7C:45:FD:69:25:0D:87:ED:26:F5:89:D5:43
            X509v3 Authority Key Identifier:
                keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:73:dd:a6:19:f0:ab:b9:6b:93:7f:b3:f1:08:eb:c9:8c:10:
         f8:13:17:e9:c7:e4:42:a0:ca:e8:90:0e:e4:ad:75:af:cf:3e:
         a9:23:e0:02:d5:a3:37:94:19:44:7b:eb:4f:7c:e2:ab:c3:74:
         53:ea:ac:e0:63:0b:8d:fb:c9:fc:bd:b1:9a:9d:a5:e4:62:6b:
         03:d8:3d:84:41:70:47:f6:a2:aa:2f:cf:20:bb:0e:c8:97:d3:
         5d:74:ae:e1:ec:2e:92:cf:de:75:94:2a:e6:28:bc:6d:1b:bb:
         11:6a:df:cb:e1:d6:2d:cd:7a:55:24:78:a3:d5:2b:6d:ea:1c:
         1b:23:4d:8b:d5:86:96:5d:69:29:a3:69:a7:12:4d:c5:07:95:
         93:23:bb:d7:f3:a3:26:0d:c9:53:da:89:9a:f7:1c:ba:cb:1f:
         d1:75:51:13:98:d2:0f:71:77:18:9a:e8:8f:8a:7b:f1:62:27:
         ef:a1:90:ad:0b:ee:a6:da:fc:29:55:dd:4e:06:a6:ee:b7:a8:
         14:e9:2b:fa:03:96:7c:9f:62:c5:a6:75:82:fd:42:96:9d:32:
         f5:fa:bd:d7:8f:cc:16:8a:a3:00:42:1a:3e:6c:09:83:55:ac:
         32:b3:7c:b0:0b:a4:d2:02:b2:04:66:1c:4f:fa:90:7b:83:c8:
         b5:9f:08:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:33:11 2026 by rpki-client