Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File:                     1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier:          m+4+8aCJzJ783vbnF349Yq8TeM0f0Vbh9FK7RHVydEM=
Subject key identifier:   51:91:DF:60:7C:6C:3A:29:7D:E0:D5:E7:49:80:26:86:EE:1D:8B:B3
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer:       /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial:       019D996278D68A027600F7B790C3391482FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number:          0840
Signing time:             Fri 17 Apr 2026 03:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:00 +0000
Files and hashes:         1: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: tCbYRpPswivMMnr1YdPnGB4RFpUYKgbLz9mm+YaYilY=)
                          2: abVrM-FislRQr4Jmc_QgEdjxoJk.roa (hash: EdLdAhibmMBnrzkLj3SZLrtAjzaNkVfN1saf4F1Axa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:78:d6:8a:02:76:00:f7:b7:90:c3:39:14:82:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
        Validity
            Not Before: Apr 17 03:01:00 2026 GMT
            Not After : Apr 18 03:01:00 2026 GMT
        Subject: CN=5191df607c6c3a297de0d5e749802686ee1d8bb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8f:58:35:94:45:05:ec:29:7f:e7:0d:93:fa:
                    c9:ef:bb:e4:57:ac:c5:41:c7:e0:e0:87:11:c3:ab:
                    89:69:e0:5b:5a:e8:34:57:8d:7c:20:64:62:13:cc:
                    03:b8:2e:a8:25:8f:41:3f:f9:88:0f:73:f9:1e:17:
                    24:f1:97:c6:76:18:4f:e8:ef:47:e8:60:ae:5b:60:
                    ea:c5:2a:8d:c0:5a:3d:d3:ac:13:b4:da:4c:07:a9:
                    f1:2b:f5:27:e0:46:a6:72:11:3a:b0:1c:6f:c0:e4:
                    a1:df:ad:53:4a:00:f6:ba:54:da:9b:ce:24:da:a4:
                    15:e0:32:3d:c6:37:80:d6:92:e7:d9:0e:7d:ce:20:
                    80:51:8e:1b:63:0e:a7:41:67:2a:c9:bb:b0:bd:c3:
                    2c:fd:fb:50:49:20:b6:31:64:e7:ce:a0:10:0f:fb:
                    5f:83:d3:af:f5:64:c4:da:f2:81:8e:bd:05:75:60:
                    ce:e0:45:71:db:fd:13:b3:d8:37:26:d1:76:ca:4c:
                    f4:54:f6:08:51:1e:ad:06:98:e7:8d:62:07:1c:a8:
                    6d:51:14:5f:00:ad:2b:95:6f:a6:18:84:e6:43:90:
                    d8:ab:49:fb:b8:9c:b8:63:83:a8:2c:93:9d:02:86:
                    cb:75:bc:d5:8b:35:d5:23:c4:25:45:df:b4:55:24:
                    8b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:91:DF:60:7C:6C:3A:29:7D:E0:D5:E7:49:80:26:86:EE:1D:8B:B3
            X509v3 Authority Key Identifier:
                keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:fb:d9:0f:8f:3d:b0:cb:ae:59:7f:fe:d0:a2:27:54:a8:d7:
         70:f9:df:6d:09:5a:b6:f3:6d:0f:90:5a:66:80:d0:1d:f6:e6:
         62:0f:8b:ec:36:06:da:bd:50:c8:75:b8:aa:2b:98:b2:9c:2d:
         de:58:0d:69:19:25:e1:30:3d:ea:56:bb:6e:6c:ea:e7:79:92:
         e3:d7:f6:a8:c8:2b:74:6b:e3:77:eb:eb:39:de:62:62:5b:8e:
         35:ea:a1:12:5e:24:54:5b:7c:9a:4b:70:41:66:05:d4:03:c2:
         2d:c8:cc:71:f1:5f:62:7e:cc:0e:79:ce:a9:46:bb:29:22:6f:
         3b:f6:13:4d:c9:a6:5b:e1:5a:75:c4:5e:e8:a5:1f:7d:14:47:
         e6:a3:1d:f7:ce:05:dc:99:64:32:67:b9:ca:93:07:3d:8d:26:
         f3:2b:cc:20:e0:cf:18:2f:9e:12:9d:ef:13:d9:c5:45:79:bf:
         5c:a8:65:f1:dd:a7:ca:2a:d2:73:01:5f:37:48:fb:b6:d9:aa:
         a8:52:fa:99:84:a8:68:2a:e1:94:eb:eb:79:9d:1f:7b:29:2e:
         db:52:cf:8c:b1:7f:83:88:18:f0:d5:dd:11:dc:75:a9:b7:3a:
         50:c5:32:1b:9d:5a:63:52:09:d9:0b:16:37:c5:f8:61:07:87:
         1d:2b:98:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:45 2026 by rpki-client