Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e0c45e-3cf0-42d8-9834-3f3e5e62c476/1/1-e1k-xmHAXE5bgTfzeO4cv_DhEM.mft
File:                     1-e1k-xmHAXE5bgTfzeO4cv_DhEM.mft (raw, json)
Hash identifier:          UB4Y7D8UI7c+cWVB3kFgWeiPW/UE8sfpc4KDk90rW2I=
Subject key identifier:   3A:C6:07:5A:55:E3:A1:0E:34:76:86:4A:22:16:92:E1:9E:83:E6:5F
Authority key identifier: F9:ED:64:FB:19:87:01:71:39:6E:04:DF:CD:E3:B8:72:FF:C3:84:43
Certificate issuer:       /CN=f9ed64fb19870171396e04dfcde3b872ffc38443
Certificate serial:       019FA71929A36673BA9C235655A92A45BCBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-e1k-xmHAXE5bgTfzeO4cv_DhEM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/e0c45e-3cf0-42d8-9834-3f3e5e62c476/1/1-e1k-xmHAXE5bgTfzeO4cv_DhEM.mft
Manifest number:          03
Signing time:             Tue 28 Jul 2026 05:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 05:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 05:01:11 +0000
Files and hashes:         1: 1-e1k-xmHAXE5bgTfzeO4cv_DhEM.crl (hash: Csubh3oZspGnHL/tMewhmmJlnRnKYri7d4BdpNFGs7o=)
                          2: KuSNZpYW1p_ixh1VEiwYN9516kc.asa (hash: czSLyB7L55xW3wvOK1w5UQ4cwgLFU6VMoAxKq5TM4CY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/e0c45e-3cf0-42d8-9834-3f3e5e62c476/1/1-e1k-xmHAXE5bgTfzeO4cv_DhEM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/e0c45e-3cf0-42d8-9834-3f3e5e62c476/1/1-e1k-xmHAXE5bgTfzeO4cv_DhEM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-e1k-xmHAXE5bgTfzeO4cv_DhEM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 05:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:19:29:a3:66:73:ba:9c:23:56:55:a9:2a:45:bc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9ed64fb19870171396e04dfcde3b872ffc38443
        Validity
            Not Before: Jul 28 05:01:11 2026 GMT
            Not After : Jul 29 05:01:11 2026 GMT
        Subject: CN=3ac6075a55e3a10e3476864a221692e19e83e65f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:82:0e:e7:74:fc:54:1c:6c:93:4b:90:ac:4e:
                    3a:4b:01:50:7e:ce:23:45:6e:ab:18:e6:c3:38:73:
                    9c:dc:30:e9:ef:0a:80:ce:61:cb:54:3c:34:6c:f6:
                    28:07:f2:62:90:97:e0:73:83:10:9d:a2:97:f7:b4:
                    97:75:fb:89:23:83:01:f5:43:7d:17:96:66:6e:60:
                    bf:ad:a2:3d:63:ea:ee:03:29:88:60:df:fa:e7:36:
                    6b:15:d3:c2:93:bd:9e:1b:ae:0d:3f:5a:b1:7e:52:
                    de:fa:4f:c5:3d:64:62:6e:1a:f5:8a:15:c9:65:97:
                    9b:ea:e6:7f:cb:f4:8b:06:3d:a8:10:91:c0:fb:2b:
                    41:3a:5a:42:15:29:59:cf:0d:c3:dc:e8:d8:2e:d9:
                    43:80:f4:6e:cb:36:6b:2e:21:f6:ae:04:38:fa:a1:
                    88:28:e5:fd:fe:24:bb:35:10:90:9e:9a:ef:53:71:
                    c3:a3:17:5f:2c:3e:eb:3d:ed:50:5b:59:59:a9:0b:
                    74:86:bb:b4:01:c4:c4:09:b1:b0:57:6a:f5:a9:1b:
                    77:3c:a6:d2:d3:0b:0d:43:4b:66:ad:69:45:4f:87:
                    4c:e1:3c:72:03:b7:aa:8d:58:c0:30:c0:b9:f2:78:
                    e7:bc:0f:35:05:bc:14:0d:e2:04:03:a8:fa:ff:ad:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C6:07:5A:55:E3:A1:0E:34:76:86:4A:22:16:92:E1:9E:83:E6:5F
            X509v3 Authority Key Identifier:
                keyid:F9:ED:64:FB:19:87:01:71:39:6E:04:DF:CD:E3:B8:72:FF:C3:84:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-e1k-xmHAXE5bgTfzeO4cv_DhEM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e0c45e-3cf0-42d8-9834-3f3e5e62c476/1/1-e1k-xmHAXE5bgTfzeO4cv_DhEM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e0c45e-3cf0-42d8-9834-3f3e5e62c476/1/1-e1k-xmHAXE5bgTfzeO4cv_DhEM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:3a:74:85:4a:47:9e:b0:53:ba:87:3b:cc:f3:84:7a:82:ea:
         f6:67:76:ed:c2:09:ef:6a:88:0f:ff:84:df:40:d8:fd:be:38:
         3b:4a:18:71:b6:e6:8d:31:59:c6:c2:b1:82:8a:96:07:de:f4:
         ea:f3:22:1e:af:fa:49:fb:48:54:90:38:d7:54:e2:3d:f5:b8:
         08:e7:d7:cb:be:72:56:43:94:01:c1:c7:c2:5a:d4:8e:09:09:
         d9:62:94:47:9a:b7:fe:0f:06:da:e3:09:87:0b:ca:20:24:8e:
         9e:d2:a3:29:03:15:54:f2:ca:25:59:d6:89:74:37:29:f5:88:
         73:3f:07:f5:fe:a5:9f:ee:b1:d5:cf:5e:77:98:f1:4f:c1:96:
         66:5c:48:2d:e1:99:58:2d:48:02:09:a6:50:a8:75:8c:ec:73:
         46:5f:ed:77:b0:49:36:2a:6f:de:f0:02:91:56:5f:2e:dd:21:
         11:3d:87:b9:46:a0:03:99:2f:97:06:c3:04:72:3c:12:f3:e3:
         ef:2b:b4:10:11:37:49:0d:91:39:a3:8b:ad:50:3c:65:76:a5:
         93:90:26:a8:1d:61:ce:82:e3:f2:18:35:07:6e:3d:1e:49:08:
         2f:69:da:bf:77:a5:54:9b:e9:54:c9:77:ec:62:44:3e:a8:97:
         a8:2d:73:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:58 2026 by rpki-client