Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.mft
File:                     1-6gqBkCYqYv21WRysmP2x0K38KQ.mft (raw, json)
Hash identifier:          bsnIogfkvhML1MSkt2iDsuwxx/3jG/fq7/Lpxvr5fmA=
Subject key identifier:   44:85:AC:6B:9B:23:ED:31:48:5E:7A:05:7F:E2:AD:E8:4C:CE:9B:B2
Authority key identifier: FB:A8:2A:06:40:98:A9:8B:F6:D5:64:72:B2:63:F6:C7:42:B7:F0:A4
Certificate issuer:       /CN=fba82a064098a98bf6d56472b263f6c742b7f0a4
Certificate serial:       019FA86262A3CE11C7A6486CA6EB00A2DAE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6gqBkCYqYv21WRysmP2x0K38KQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 11:00:47 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:47 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:47 +0000
Files and hashes:         1: 1-6gqBkCYqYv21WRysmP2x0K38KQ.crl (hash: zYM+nQLNLuxfrOIuDqaURRU7460dGvSCs67SFRJcQwc=)
                          2: bJhwh6VZmo2wFJf85peVPopF2mg.asa (hash: x3IolaMvyG6/SJsaHDsGvyni3uC/EuPLRLLaxebbaL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6gqBkCYqYv21WRysmP2x0K38KQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:62:a3:ce:11:c7:a6:48:6c:a6:eb:00:a2:da:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba82a064098a98bf6d56472b263f6c742b7f0a4
        Validity
            Not Before: Jul 28 11:00:47 2026 GMT
            Not After : Jul 29 11:00:47 2026 GMT
        Subject: CN=4485ac6b9b23ed31485e7a057fe2ade84cce9bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9c:f1:2a:9a:77:42:a1:83:ff:5b:44:7c:b9:
                    21:e6:92:15:fa:46:89:95:16:e0:45:5d:4c:12:76:
                    a3:a6:93:3c:cb:78:c1:27:fa:2d:8e:13:ee:c4:2a:
                    9d:67:54:c9:7f:78:65:87:38:ed:dd:6c:60:32:3b:
                    08:b7:dc:6e:ef:c8:ea:12:20:5c:eb:c8:70:57:64:
                    14:f6:05:14:49:3b:ef:23:66:26:95:8c:53:b2:5b:
                    57:b9:76:a8:aa:75:bb:b3:3d:5c:8c:0c:95:71:39:
                    c3:98:b7:e9:8a:9b:43:6f:38:29:18:f9:71:fa:b7:
                    e8:02:97:7b:35:c4:fb:c7:5f:6c:9d:67:86:20:ec:
                    2e:8d:d5:de:a9:c9:07:7f:b4:a6:d0:75:bf:fd:0e:
                    39:33:ea:a9:52:89:58:2f:fe:2b:ea:49:39:70:a0:
                    68:73:cb:a4:7e:70:0d:24:87:c0:b3:4b:82:63:54:
                    6a:ec:6b:39:85:bf:df:fd:00:bd:3b:6e:e8:5b:08:
                    e9:1a:99:a3:24:6e:6a:c7:b4:9a:d5:52:f0:25:79:
                    04:cd:e2:dd:71:94:4c:26:7f:ee:a5:07:51:45:7b:
                    94:ca:cd:77:06:1c:db:df:64:17:ef:15:0c:2a:5b:
                    05:27:dd:27:58:1a:86:71:f2:26:a4:f5:74:8a:82:
                    87:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:85:AC:6B:9B:23:ED:31:48:5E:7A:05:7F:E2:AD:E8:4C:CE:9B:B2
            X509v3 Authority Key Identifier:
                keyid:FB:A8:2A:06:40:98:A9:8B:F6:D5:64:72:B2:63:F6:C7:42:B7:F0:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6gqBkCYqYv21WRysmP2x0K38KQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/1-6gqBkCYqYv21WRysmP2x0K38KQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c5:75:4a:bc:e3:e2:94:c3:e5:2d:bf:17:2f:91:1a:29:39:
         c7:35:23:2b:cd:bd:c1:be:5b:68:ef:bf:39:2a:48:c7:16:28:
         59:3d:7a:92:b5:ca:e5:2d:f4:7a:43:00:29:e4:2a:94:09:77:
         91:9e:37:3d:b3:ec:c0:08:05:85:7a:66:5d:92:f9:88:0a:53:
         80:fa:f7:44:d9:ed:1e:26:1c:8f:df:e0:7f:d0:10:7b:c5:c6:
         50:1c:0f:19:41:0d:c8:25:54:09:ef:fd:55:6d:65:7e:e6:e8:
         7e:f2:4c:43:12:65:63:7a:c7:e0:de:0b:cf:9d:25:be:9a:5a:
         a0:91:e7:cf:14:b3:85:79:15:17:9c:b6:42:39:f9:15:40:d0:
         5b:f1:45:e4:19:e2:90:89:d7:4f:a8:cf:c0:2c:33:30:dc:0a:
         96:5e:e0:e0:f6:24:91:9a:f4:e5:a7:4e:a0:24:ad:fe:ba:03:
         c8:e5:63:86:3f:ac:0d:87:2e:f5:94:5a:c9:c4:fc:17:eb:6f:
         d4:1f:88:e8:92:78:6c:12:9b:c7:bc:fc:ca:bf:3e:28:5c:79:
         fd:3d:54:db:3b:9e:f8:22:91:74:33:b5:d5:31:eb:43:7b:17:
         4a:81:89:3d:4f:be:cf:38:2b:f7:05:b5:6e:65:03:95:25:4e:
         44:cf:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:39:06 2026 by rpki-client