Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
File:                     1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft (raw, json)
Hash identifier:          mk1soV0vm8qVQhMRVNl5HUMoRxQcLgm9PrmEUr08SUw=
Subject key identifier:   78:B8:6C:5E:D4:2D:1D:EB:14:36:E9:EE:76:16:B9:3E:1E:5F:95:C6
Authority key identifier: FA:B5:80:A3:DC:CA:CF:1A:45:DB:FB:DD:05:E5:8C:CA:D4:2A:7E:1C
Certificate issuer:       /CN=fab580a3dccacf1a45dbfbdd05e58ccad42a7e1c
Certificate serial:       019FAA50AB10BEC4394026D3C6C1E3F772EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
Manifest number:          01EB
Signing time:             Tue 28 Jul 2026 20:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:40 +0000
Files and hashes:         1: 1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl (hash: ETClQ4I0PMXpCk+eoIhXxmjfyawcM0V/qifn278DinU=)
                          2: sjcD7P1b4OH3bAoChPJ2EGVO_80.roa (hash: 3ibINEJI2J0CI3oq9fJ1To5iRpHn9oYrPYwzYRGItP8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:ab:10:be:c4:39:40:26:d3:c6:c1:e3:f7:72:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab580a3dccacf1a45dbfbdd05e58ccad42a7e1c
        Validity
            Not Before: Jul 28 20:00:40 2026 GMT
            Not After : Jul 29 20:00:40 2026 GMT
        Subject: CN=78b86c5ed42d1deb1436e9ee7616b93e1e5f95c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:06:3d:68:7f:8b:0f:6d:a3:1a:1d:ed:a9:7f:
                    fa:35:e7:2d:13:84:da:ac:ac:1b:8c:8a:99:95:d6:
                    9d:43:5d:a3:a6:dd:ba:31:2a:c7:ad:41:1b:65:43:
                    45:35:95:b8:25:34:08:61:d4:33:77:54:85:37:df:
                    df:42:d4:ee:44:45:6f:ca:5f:ba:4f:f0:d6:64:ba:
                    96:90:47:e7:19:99:c4:ee:e5:33:27:ea:0e:81:ed:
                    d1:68:2f:c7:5a:2e:77:d5:00:9b:40:99:60:77:74:
                    8e:f0:58:05:cb:bc:56:f9:31:aa:3a:15:f6:fa:48:
                    7e:e2:00:a2:d1:7c:d3:05:e9:95:4a:aa:b5:57:80:
                    5d:d7:b5:f0:34:a3:c3:b1:17:04:ee:c0:f0:08:d3:
                    20:82:40:56:f7:db:1a:38:97:05:72:77:ca:2c:17:
                    5e:5a:90:8c:59:ea:61:e0:ad:62:73:7f:48:e9:db:
                    3c:6d:3b:eb:80:8d:21:92:79:fe:92:f9:a1:db:61:
                    e0:c3:31:b6:10:95:f2:31:cd:52:9c:ef:30:c5:f4:
                    bf:4c:bb:13:44:6a:00:53:1d:50:36:8e:89:b0:84:
                    cc:55:3a:1f:4f:ab:a5:20:21:57:7c:f4:55:78:8c:
                    88:ac:c3:be:90:fe:27:f2:17:0d:ef:d8:ea:69:23:
                    a6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B8:6C:5E:D4:2D:1D:EB:14:36:E9:EE:76:16:B9:3E:1E:5F:95:C6
            X509v3 Authority Key Identifier:
                keyid:FA:B5:80:A3:DC:CA:CF:1A:45:DB:FB:DD:05:E5:8C:CA:D4:2A:7E:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rWAo9zKzxpF2_vdBeWMytQqfhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2f9d4a-0e99-4b83-b507-3ce56357eb49/1/1-rWAo9zKzxpF2_vdBeWMytQqfhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:71:b4:d9:65:2c:3a:a1:10:c3:70:7d:a9:75:91:36:c2:1a:
         91:2f:4f:2c:35:dd:39:2b:d7:12:3f:d7:f9:c7:f7:cd:19:f1:
         fa:40:77:09:9a:44:d5:af:38:bd:1e:fc:6c:e5:3f:ee:e2:f2:
         69:dd:27:63:fd:3d:20:fa:5f:56:8e:b2:d3:d0:ea:dd:09:64:
         4e:47:b5:98:10:59:62:9e:47:42:8c:1b:e9:12:66:9e:90:c1:
         df:ff:7d:08:0b:38:a5:46:fe:94:eb:f7:c2:e8:dd:6e:82:9c:
         2e:b2:d8:d3:d7:c1:dd:05:6f:77:c7:b6:3a:15:41:07:24:e2:
         be:41:7d:2b:6e:62:a2:ed:14:84:dd:61:c9:31:28:ee:bb:ee:
         ba:f3:e2:76:f6:b5:01:46:83:31:5e:39:58:07:76:05:bb:7b:
         2d:bf:59:4f:72:ec:b5:ec:80:92:c1:72:ab:d1:37:8f:44:9a:
         a2:14:dd:9c:ca:d7:c0:1d:b4:ff:ef:cd:de:e5:dc:89:9c:f8:
         86:d4:7e:31:b2:ab:a0:2a:5b:27:fe:6c:0c:3a:98:86:ea:26:
         ae:d7:ef:f2:3b:a2:89:0f:71:eb:35:8d:0d:c3:a2:be:88:1a:
         d1:3b:16:6a:ba:be:af:fc:16:94:f9:92:f9:29:09:44:b9:db:
         0d:3d:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:44:48 2026 by rpki-client