Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File:                     1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier:          NtwRRqMwya96AOZnChRdrJedPMn14LPKPC5g+os38S0=
Subject key identifier:   F3:DF:DD:D4:26:02:A3:B4:1C:E8:C7:7C:62:8B:69:B3:84:D7:E2:51
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer:       /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial:       019EBEEC538CBAC606FB0843B0E8BE3077EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number:          08D8
Signing time:             Sat 13 Jun 2026 03:00:19 +0000
Manifest this update:     Sat 13 Jun 2026 03:00:19 +0000
Manifest next update:     Sun 14 Jun 2026 03:00:19 +0000
Files and hashes:         1: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: Y/i8Lgl0PcojE9gvLTwOfurstRAHa0WEOU1GPQIyaIw=)
                          2: abVrM-FislRQr4Jmc_QgEdjxoJk.roa (hash: EdLdAhibmMBnrzkLj3SZLrtAjzaNkVfN1saf4F1Axa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:ec:53:8c:ba:c6:06:fb:08:43:b0:e8:be:30:77:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
        Validity
            Not Before: Jun 13 03:00:19 2026 GMT
            Not After : Jun 14 03:00:19 2026 GMT
        Subject: CN=f3dfddd42602a3b41ce8c77c628b69b384d7e251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f7:51:a5:d3:8e:92:6a:2f:6d:b9:bc:c9:b6:
                    87:dd:87:b3:93:21:d0:68:e5:56:19:fe:40:25:40:
                    00:18:31:82:cd:76:19:8e:fd:30:b7:f5:fd:d9:9a:
                    8d:19:b1:70:3a:01:bb:4c:43:01:fc:2a:1e:fb:ea:
                    dc:5d:21:5a:c3:3e:b1:a5:ce:07:03:86:84:5e:0d:
                    72:dc:13:b4:b2:dc:91:35:ec:fe:e3:06:cb:79:7b:
                    c4:6b:88:c7:ab:f4:12:e1:bb:43:62:f2:32:45:fd:
                    28:a8:5a:31:7c:b4:de:2f:4b:b1:b6:83:4a:0f:d6:
                    c0:9f:00:31:c7:52:56:2f:aa:0d:86:8c:e5:f6:87:
                    22:94:19:95:15:9c:e6:11:ee:de:16:16:06:c3:96:
                    41:cd:58:d1:02:79:87:57:38:13:16:3f:d9:6f:e0:
                    af:76:17:50:4c:2f:03:35:5f:24:ee:76:46:44:a3:
                    a0:39:e6:d9:e2:af:57:c9:a0:4a:69:6a:74:04:cc:
                    8e:05:1b:67:d3:15:49:cc:a4:f6:4c:b8:23:76:76:
                    ee:ec:23:18:b1:b7:42:3d:b1:e4:d3:ea:63:dc:cf:
                    82:00:ff:3a:62:b4:52:05:8c:97:df:db:db:b0:7a:
                    7f:5f:3f:b4:94:1f:2e:5c:9d:6d:ef:a8:46:91:59:
                    c8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DF:DD:D4:26:02:A3:B4:1C:E8:C7:7C:62:8B:69:B3:84:D7:E2:51
            X509v3 Authority Key Identifier:
                keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bb:93:e6:50:6d:30:48:99:1e:55:af:10:81:3e:f0:a7:d9:
         f4:7a:4a:b7:c6:56:d0:46:59:12:f4:82:77:3a:87:3e:f1:05:
         8b:cd:0c:4a:d7:2f:f0:0c:1b:70:45:02:0b:df:ff:a2:f0:f5:
         84:14:41:dd:a9:e1:f7:49:04:00:82:17:c0:4e:cd:23:10:9e:
         7d:3c:77:21:7d:e0:cb:27:da:da:85:ed:3e:e5:3e:76:17:4e:
         9a:94:19:1d:81:d2:82:70:de:03:63:d4:09:42:dd:1c:00:9b:
         9a:cf:9e:63:45:05:33:a5:47:70:e4:33:1d:0c:ea:f9:6e:6f:
         fa:a7:00:0e:c3:c4:01:95:de:fb:d5:84:c0:b3:57:9e:2b:26:
         e1:46:5a:af:49:6b:56:99:a8:f5:d9:15:e0:30:48:97:13:97:
         e6:cf:3a:1e:d0:8e:ad:04:2e:76:cf:02:d2:fc:de:9f:63:46:
         55:58:38:41:4c:d6:8c:6f:99:b4:a0:9c:24:9c:66:f8:a8:4b:
         f2:8f:77:c9:5d:aa:d2:55:9a:47:67:67:15:23:20:8b:f6:f0:
         f3:c1:18:40:0a:42:d8:76:37:49:b3:48:fd:35:68:63:cf:52:
         e5:88:cd:5d:a2:6e:9b:95:30:14:03:2e:ea:54:1f:e1:f1:2a:
         1c:74:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:25:55 2026 by rpki-client