Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File:                     1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier:          dzFe1m+voFvottK1CEk2/zlRn+KbK0a07+DO/wfWMPQ=
Subject key identifier:   FC:7E:FA:10:51:24:6A:50:A8:BD:A0:E0:B0:51:15:AE:3C:CE:F2:88
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer:       /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial:       019EBE7FC63B3521E61A63AC5AE420E2203A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number:          1734
Signing time:             Sat 13 Jun 2026 01:01:45 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:45 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:45 +0000
Files and hashes:         1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: 1sTYBnT1d4p5xj4mmhOJ6oK6R0XSe/49X8CH6hik340=)
                          2: z8zovr62ahngZe9eyLY1UmJJA_E.roa (hash: h9t0xBYGXyCoUtS+tRL/Tqf5YaJCLff6uGboBY8MeD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:c6:3b:35:21:e6:1a:63:ac:5a:e4:20:e2:20:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
        Validity
            Not Before: Jun 13 01:01:45 2026 GMT
            Not After : Jun 14 01:01:45 2026 GMT
        Subject: CN=fc7efa1051246a50a8bda0e0b05115ae3ccef288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:f0:0f:eb:b0:2d:de:7e:de:1c:b4:38:65:c7:
                    32:45:d1:aa:6f:34:24:bd:45:b6:bf:ca:4c:30:40:
                    d4:c8:ad:f4:a6:32:db:a3:a8:b8:e9:ba:88:5b:65:
                    7c:48:61:06:44:96:b1:85:85:c4:6c:d0:50:c2:e4:
                    a4:ca:33:8b:7c:53:b7:df:e6:e2:3c:ca:ac:ca:8c:
                    05:4e:d7:d6:06:61:fc:f2:f1:ab:10:1b:19:7c:b8:
                    2f:be:d4:c0:fe:d8:8c:c0:ba:14:7e:3f:05:f5:12:
                    cf:00:58:7f:42:77:64:a8:dc:81:e2:de:82:16:a6:
                    ee:dd:b4:2c:9f:64:8d:68:ac:ff:83:e9:56:85:0e:
                    dc:b5:1b:ce:e9:6e:4e:3d:5b:55:67:ea:10:dc:fe:
                    b5:b5:18:80:df:62:33:60:ef:39:8d:a5:5b:db:4a:
                    fd:15:40:5e:f6:99:70:15:86:98:c4:0c:bc:2b:b5:
                    21:0f:fe:11:2e:16:ef:c8:ac:c7:e3:8e:74:21:a0:
                    f2:c7:0e:d4:b8:25:91:b9:9f:46:2a:3e:69:f8:c3:
                    41:98:82:c0:60:ee:0a:56:2c:0e:4f:7b:1c:2c:9b:
                    c4:59:24:69:bd:e2:3c:69:18:53:da:67:d5:cb:cf:
                    7c:44:34:92:76:45:8b:56:ee:aa:65:3c:31:83:66:
                    94:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7E:FA:10:51:24:6A:50:A8:BD:A0:E0:B0:51:15:AE:3C:CE:F2:88
            X509v3 Authority Key Identifier:
                keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:87:0c:58:04:30:3c:9a:17:24:22:1f:e1:6d:bf:84:aa:75:
         a8:c6:a0:00:88:84:4a:0f:d1:99:88:45:33:0f:15:80:9d:d3:
         32:62:65:86:2a:a2:ce:bf:0f:12:30:7c:01:35:11:d3:d6:64:
         8e:72:fb:23:1f:c9:f8:b9:f8:be:2e:a5:ff:de:e6:1b:b0:7a:
         cc:25:ae:f7:de:27:c7:0e:49:6b:e9:23:2f:33:e2:f1:9d:07:
         b5:88:c5:1e:32:cd:09:80:e0:30:7c:96:36:b5:d5:91:84:79:
         7b:80:23:bc:d9:65:a3:91:63:f2:87:c9:99:58:8d:2e:30:09:
         a0:74:c2:66:b7:44:8c:6c:f4:36:dd:d5:3b:5b:72:6f:46:0e:
         35:bf:b3:a7:01:88:a7:04:7e:d6:36:d0:c8:97:72:4e:e1:e6:
         49:3e:5b:04:cd:38:7e:47:66:38:8b:7d:a9:0d:23:b7:57:ff:
         e9:0f:00:f1:04:a7:a6:c4:33:fc:d4:03:9e:34:25:16:d4:9e:
         72:37:9c:86:91:65:96:51:28:3e:20:f6:c2:5b:2d:ec:8d:40:
         58:54:8f:75:4d:c5:e3:1c:3f:a6:bf:f8:2b:42:f6:26:57:16:
         7b:e6:26:90:80:e8:52:34:d2:42:a0:05:32:4d:2d:36:a0:53:
         2f:5c:1f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:15 2026 by rpki-client