Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
File:                     1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft (raw, json)
Hash identifier:          A7VYqXUb47WkSNEBzNKIONidSt2X8M6ZeVfUOSILe/4=
Subject key identifier:   A8:A0:8B:92:6D:7A:4D:05:C9:0A:19:B0:69:46:5A:EC:CA:95:23:0E
Authority key identifier: F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC
Certificate issuer:       /CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
Certificate serial:       019D2816988381EEE04B08AD0E1D4D6B2861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
Manifest number:          01E7
Signing time:             Thu 26 Mar 2026 03:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 03:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 03:01:02 +0000
Files and hashes:         1: 1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl (hash: fnKuiIt1UYwuJgED53TFTZ/V11fg0BxTUMDjHVNaZx8=)
                          2: S91SpqjKHj-9za4dXEoQ07MOmwY.roa (hash: mrZK89V5wHR4TTBGwZBPy+vU+mPnk1QYo7P0So8JmRM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 03:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:16:98:83:81:ee:e0:4b:08:ad:0e:1d:4d:6b:28:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ba41b6ad6e63780ec3f12160e7c4ed0f7469ac
        Validity
            Not Before: Mar 26 03:01:02 2026 GMT
            Not After : Mar 27 03:01:02 2026 GMT
        Subject: CN=a8a08b926d7a4d05c90a19b069465aecca95230e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:48:c0:59:34:74:0b:b6:7d:a1:d7:d9:c7:78:
                    3a:4c:12:94:3d:53:af:cc:f7:1f:b8:9c:8b:dd:2a:
                    87:c8:4e:85:3c:5d:7d:3d:fe:35:a8:4b:bb:97:e9:
                    3d:81:cd:2b:88:80:a0:0d:6c:26:b1:a2:3c:83:b7:
                    5b:08:02:62:73:47:1b:5d:e3:2b:a5:0f:e3:b0:3e:
                    81:e6:8a:a8:5e:55:74:a0:2c:7d:b0:22:a0:f2:40:
                    11:77:d1:b8:d0:18:97:b9:d8:67:e8:41:bb:b0:81:
                    29:9c:80:f8:8c:5b:9f:d8:be:ef:59:c5:74:29:fb:
                    84:68:ad:68:a3:36:db:1d:57:81:1c:4b:8a:04:38:
                    1d:ce:a4:b1:ed:06:b7:2f:ab:b5:3c:42:d5:8b:0f:
                    6f:88:82:7d:a4:c3:8e:c5:06:38:76:0e:40:f0:0f:
                    3f:a7:7a:16:fa:b1:73:aa:4e:89:4c:fc:26:49:0d:
                    c1:d8:2c:6b:d0:ba:a3:07:92:0e:70:9c:01:b3:09:
                    1b:23:e6:61:c8:f8:f3:51:ca:bf:99:0a:0b:3e:21:
                    53:a3:ce:50:43:e5:64:a2:0c:fb:db:26:df:87:2c:
                    2a:a4:91:80:da:c8:1d:5e:fa:8d:47:c6:88:d5:aa:
                    81:13:65:6d:21:25:d8:cb:0d:43:1c:41:1a:10:da:
                    60:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:A0:8B:92:6D:7A:4D:05:C9:0A:19:B0:69:46:5A:EC:CA:95:23:0E
            X509v3 Authority Key Identifier:
                keyid:F8:BA:41:B6:AD:6E:63:78:0E:C3:F1:21:60:E7:C4:ED:0F:74:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/83ee6f-ee83-444b-bdc6-ae44979f81de/1/1-LpBtq1uY3gOw_EhYOfE7Q90aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:e4:3a:e0:54:19:d7:af:5f:4c:59:38:aa:06:9b:39:ee:4e:
         12:0a:fd:84:ca:5a:26:52:78:5f:bb:02:f0:a6:dc:94:46:07:
         ab:9c:ff:e6:18:8e:13:bf:61:89:58:97:7a:2c:b7:8a:50:36:
         ea:ba:46:a4:0b:1b:c8:8a:0c:c2:f1:64:95:84:c4:31:b3:d6:
         8c:02:8b:9b:6b:ae:35:e4:f6:9d:24:f6:ef:28:d4:1d:8f:c8:
         cd:e2:e4:1c:52:20:50:a1:4b:52:0d:63:04:fe:c3:6a:bb:00:
         e4:90:81:f9:7e:d2:6c:5b:dd:9e:30:f9:96:55:12:42:34:84:
         74:eb:fe:2e:c0:1d:24:a4:74:0f:5d:c1:de:56:61:a8:c2:14:
         c3:bd:34:89:aa:f9:f0:80:81:79:9a:f6:b2:bb:37:8b:83:8e:
         45:d4:ca:b8:eb:c6:6b:18:cb:e5:35:f7:01:8e:55:c5:8d:9c:
         1f:8c:ca:5c:88:5b:86:9c:b0:69:3b:6a:ce:9c:2c:5b:9b:d4:
         ad:3f:46:ac:5e:9f:c6:90:28:31:2a:7a:ae:18:a8:6b:e4:30:
         aa:19:32:3c:e6:94:08:28:f2:b1:2a:94:fe:e8:a9:1f:1c:6a:
         18:44:53:a1:d0:75:25:43:f1:d1:5b:e7:9f:1a:63:87:7c:e2:
         e8:31:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:59:09 2026 by rpki-client