Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
File:                     1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft (raw, json)
Hash identifier:          53AZmFGylautXECgQt+8qXYLhYXfwEMSBYlrCL/byaM=
Subject key identifier:   40:2E:A0:CD:F0:F1:F5:70:15:4C:33:6F:8D:C0:A3:2F:19:58:CF:56
Authority key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Certificate issuer:       /CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Certificate serial:       019D254CB641327C5C19326F581FBE1A0B81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
Manifest number:          1738
Signing time:             Wed 25 Mar 2026 14:01:17 +0000
Manifest this update:     Wed 25 Mar 2026 14:01:17 +0000
Manifest next update:     Thu 26 Mar 2026 14:01:17 +0000
Files and hashes:         1: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl (hash: RgIqa0Ac5g7F5flgGk+J277eZUqrGeHIn5kJL9SsmCA=)
                          2: uaf2gOufHpjM0-jl-DGzDOPaSjg.roa (hash: BBVjfBboBH9hWUYKXyFs/Wc3kThp/52xPtYPyIqQvr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 14:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:4c:b6:41:32:7c:5c:19:32:6f:58:1f:be:1a:0b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
        Validity
            Not Before: Mar 25 14:01:17 2026 GMT
            Not After : Mar 26 14:01:17 2026 GMT
        Subject: CN=402ea0cdf0f1f570154c336f8dc0a32f1958cf56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:9d:76:6a:9c:44:b0:d8:2b:4a:94:17:2f:
                    d0:d7:12:6b:98:73:db:72:66:2b:ad:46:89:5b:c3:
                    05:41:7a:46:69:82:14:e3:92:e3:17:e2:64:8b:94:
                    83:a6:d7:17:80:ae:dc:07:56:9a:d0:28:13:3c:27:
                    82:64:38:c3:4f:3e:6f:4c:84:48:34:2c:de:57:7a:
                    c3:db:04:2b:64:78:69:0e:76:10:73:1e:73:d7:69:
                    c9:69:7b:41:f4:62:ea:64:ec:a7:66:bd:57:ab:e0:
                    bd:0e:21:09:7a:20:e7:84:d2:bc:34:7b:f0:a0:9a:
                    6f:2b:fd:df:da:8f:a9:5e:f4:a1:44:d7:04:f4:15:
                    a1:2a:f7:53:bf:be:60:fd:d7:ba:73:e9:a1:4e:e3:
                    82:d6:b1:0b:be:44:1c:b9:6a:ad:b9:2d:bd:72:46:
                    20:76:0d:03:a9:f7:1e:6b:cb:d1:b0:4e:f3:c7:90:
                    5b:51:85:a1:b2:65:d4:97:fd:a5:88:48:4c:e5:f1:
                    c2:ad:9f:d1:a4:11:34:fb:76:d2:60:cc:c1:71:f3:
                    b5:9b:65:66:4c:85:de:6a:76:9b:c5:1f:fc:8d:c7:
                    c5:37:16:91:79:8e:5a:f8:9d:31:db:1c:9e:47:6b:
                    7c:af:21:06:e7:60:08:35:85:6f:c0:2d:bf:3e:99:
                    69:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2E:A0:CD:F0:F1:F5:70:15:4C:33:6F:8D:C0:A3:2F:19:58:CF:56
            X509v3 Authority Key Identifier:
                keyid:FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:7a:96:34:7d:8c:36:85:cf:c3:bb:15:88:b0:53:93:f9:e2:
         13:3e:da:f0:b6:05:e7:9c:d0:3e:52:40:ea:29:38:12:96:ab:
         b5:c4:90:5f:8b:03:00:70:00:1c:ab:e6:85:71:48:32:f9:86:
         f5:d2:56:a1:85:f7:85:f6:f6:27:19:ea:aa:63:42:57:57:79:
         ad:d3:5f:2a:5b:41:c8:91:15:c1:ab:3e:6d:f7:74:5a:49:4d:
         00:de:f9:16:9f:96:a0:23:d4:e3:9b:15:dd:de:78:32:1c:e9:
         8c:97:82:fe:dc:5e:cb:4b:3c:13:00:fa:1e:0a:aa:ad:45:e4:
         d7:2e:3e:05:d8:36:5c:02:26:e0:03:3c:17:39:7a:a8:37:3c:
         9c:3f:21:6e:b6:db:4e:59:5e:d9:a5:90:df:fb:86:07:a5:b2:
         96:02:88:0f:bc:6a:50:ab:9e:ea:c0:34:b2:eb:60:db:09:54:
         57:9e:96:c2:10:b1:0b:44:f7:44:54:2b:ac:1a:b9:26:49:91:
         a3:74:ce:92:4e:3e:6b:99:d1:68:42:f0:0d:9c:08:86:06:9c:
         84:da:9d:09:92:29:b3:30:7c:38:15:4c:96:6e:e1:cd:4e:ee:
         75:a4:fd:98:53:9a:fc:ca:3c:9d:1b:5b:b4:d1:6c:a2:23:be:
         8c:2a:22:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:02:00 2026 by rpki-client