Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
File:                     1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json)
Hash identifier:          podk+RLp02XGoGibRkey7P7W7yKFJqOfqBcFXznTTfs=
Subject key identifier:   C2:3A:32:A7:90:07:1F:46:6B:C0:7F:CA:C3:3F:ED:12:F3:82:55:12
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Certificate issuer:       /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial:       019F90C76660A4CF3E816D1371A289012A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
Manifest number:          161E
Signing time:             Thu 23 Jul 2026 21:00:14 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:14 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:14 +0000
Files and hashes:         1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: YLMym3Kl/qdYjBUzdVHYvDzwNeilP4gaNVZNFvUrxo4=)
                          2: ZbHKUZ4-YfRQqqQSe1r9U7B43No.roa (hash: OWTRsb1+RVyVdipSZx/PdEhXtkE4BTOxk7X0sSkLurA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:66:60:a4:cf:3e:81:6d:13:71:a2:89:01:2a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
        Validity
            Not Before: Jul 23 21:00:14 2026 GMT
            Not After : Jul 24 21:00:14 2026 GMT
        Subject: CN=c23a32a790071f466bc07fcac33fed12f3825512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:52:7b:6d:7f:f4:68:bf:16:31:4b:fe:4d:f7:
                    d5:f9:fa:19:d7:46:f7:78:2c:23:6a:1f:a2:f4:37:
                    07:61:d6:2f:7a:e0:69:0c:4c:0a:ca:1e:fc:7f:57:
                    14:10:72:ff:4c:3b:eb:aa:1c:b6:d5:10:72:66:d6:
                    87:c2:81:cc:5f:cc:ac:cc:2a:7c:67:b1:10:72:0a:
                    85:15:6f:6c:03:23:ee:2e:91:7e:f7:96:44:6b:36:
                    26:65:57:be:7a:b3:d9:c2:55:54:f7:70:f1:93:f0:
                    e3:54:e0:a2:c0:eb:cc:ab:00:4b:0e:45:e6:f1:1b:
                    1a:1b:ed:fa:70:1c:e6:05:e2:af:29:e0:c9:51:05:
                    9f:73:09:cd:53:b1:27:48:f2:ba:8e:83:1c:7e:68:
                    91:89:ab:da:1d:db:0f:3b:39:0f:72:1e:60:9c:6c:
                    d3:28:f1:70:b4:b4:6c:24:5b:45:9e:3b:d1:f2:46:
                    78:66:69:49:1f:b8:bb:ee:99:d7:75:21:0f:e9:05:
                    c9:6f:4d:c3:13:40:86:17:e8:33:55:b4:12:8e:8a:
                    57:91:e2:e3:0d:48:47:3d:ff:26:c7:79:df:32:67:
                    3c:02:9d:3a:e1:98:32:20:76:7d:75:bb:c1:62:34:
                    80:6b:7d:df:90:ae:d7:68:e1:19:43:7d:94:dd:e2:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3A:32:A7:90:07:1F:46:6B:C0:7F:CA:C3:3F:ED:12:F3:82:55:12
            X509v3 Authority Key Identifier:
                keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bd:57:79:97:46:47:7c:29:c7:b8:6e:19:00:e6:51:1f:5c:
         3c:12:7c:aa:0f:b8:0a:59:24:af:a0:5a:4b:70:e9:df:80:3a:
         38:0b:ee:d1:4b:ff:4a:2e:5e:c5:af:d6:02:65:4e:82:64:37:
         ab:7e:8e:fb:0f:13:8a:ee:31:aa:4d:ee:85:57:c2:26:1f:ad:
         6f:c2:3e:b9:e4:c0:59:1b:f4:6c:09:83:a4:41:aa:d3:9f:94:
         19:91:15:56:29:a6:0c:25:37:1e:6b:93:34:94:8d:06:87:4c:
         49:7a:af:d0:24:b5:cd:d2:74:a2:5c:c4:99:47:e3:86:8c:cc:
         7a:90:d4:a1:3a:91:bc:e7:b7:97:71:4b:7d:91:06:db:c3:e3:
         9d:85:3a:70:ab:5f:ed:37:86:2c:e5:3a:fd:09:4a:e0:fe:d9:
         44:c6:a0:64:b8:7f:28:db:78:ac:e1:af:09:db:b9:27:8d:be:
         ca:18:34:1b:b4:c7:54:ee:e3:71:47:ff:31:19:3c:78:55:e4:
         e1:e6:f6:8d:a3:a9:0f:cf:57:4f:dc:65:bf:27:59:4c:13:4a:
         a3:53:dc:eb:19:ab:4b:12:84:65:78:37:3e:01:4e:6c:66:81:
         3f:67:72:f3:94:09:1d:e8:6e:d9:cb:99:c2:25:64:a2:2c:aa:
         c3:21:19:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:01 2026 by rpki-client