Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File:                     1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier:          gqo4NAzD/Gi7uJa06unZiQ/9e/GwMRYqx3o/xVEowE0=
Subject key identifier:   09:18:F7:51:13:FA:A6:72:59:D1:0D:3C:9B:F8:BA:2F:B8:FE:2F:FB
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer:       /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial:       01A0017026376285679FC2461683B9E384A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number:          1A03
Signing time:             Fri 14 Aug 2026 18:02:02 +0000
Manifest this update:     Fri 14 Aug 2026 18:02:02 +0000
Manifest next update:     Sat 15 Aug 2026 18:02:02 +0000
Files and hashes:         1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: ivX2JRlNj4MrJD1ytLtlDPNE7Ib2BxPlzSUydWiL6Eo=)
                          2: E66SedHd_vPzIOdI_rSea-dozpY.roa (hash: esa1VAeAMDp/AD53evHUHJNFCVMH1Oxb2JFWktl2xMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:26:37:62:85:67:9f:c2:46:16:83:b9:e3:84:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
        Validity
            Not Before: Aug 14 18:02:02 2026 GMT
            Not After : Aug 15 18:02:02 2026 GMT
        Subject: CN=0918f75113faa67259d10d3c9bf8ba2fb8fe2ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:61:1a:90:63:67:83:f0:5a:52:28:cc:88:2f:
                    cc:3a:c9:96:83:dc:ac:d0:6b:7e:03:b1:43:cd:89:
                    fa:5e:9f:a8:44:ba:29:bf:79:1a:e6:65:29:10:eb:
                    b0:9c:fa:35:7a:62:99:c8:e4:7e:50:71:81:47:6a:
                    95:4b:95:35:b4:f1:19:a9:ab:fe:a6:8f:d0:e6:5c:
                    40:c1:e8:e0:fb:6b:76:d7:d3:7b:b1:1a:a0:2c:ad:
                    2b:b4:44:1d:b3:a3:8a:de:e8:43:d1:c1:f1:70:09:
                    04:31:3d:fc:d8:85:9a:5a:4b:44:b2:ee:5d:2a:7a:
                    f5:38:36:69:69:c3:72:d7:4c:5e:46:bc:a3:33:b3:
                    9d:21:01:d7:9d:b1:51:8a:8c:c6:7c:2b:28:88:dc:
                    e0:5a:72:5b:06:76:e0:03:21:b5:51:7f:7d:c8:b4:
                    0e:3a:2b:b4:26:3b:3a:b1:13:f3:68:ef:93:98:69:
                    83:71:92:d9:62:80:a4:3e:d9:a1:3f:d0:dc:a1:eb:
                    4b:f7:40:26:12:de:84:c3:ae:9e:45:07:47:23:90:
                    45:4d:4a:ec:dc:a1:6b:b1:71:90:fb:26:a5:6a:6d:
                    76:88:f2:e0:91:7d:d6:b0:97:ff:a5:49:e4:bf:a1:
                    ff:cb:6d:cb:5e:9f:38:0a:2b:da:7f:a3:ac:64:1f:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:18:F7:51:13:FA:A6:72:59:D1:0D:3C:9B:F8:BA:2F:B8:FE:2F:FB
            X509v3 Authority Key Identifier:
                keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:89:ef:f4:ba:f6:c7:95:1b:9e:be:ec:aa:53:32:91:9f:1f:
         e9:a0:27:a9:c4:a2:94:f9:85:83:36:7c:15:de:31:ae:7f:8a:
         3f:4b:cd:2b:b2:5a:1a:c3:15:f0:31:8f:98:60:3c:d4:a0:a7:
         ef:d4:5c:e4:0c:fb:e9:32:d9:b4:7e:62:46:4a:d5:98:80:cb:
         44:e6:d2:c8:4d:68:28:aa:8a:ff:ea:ee:d9:70:c0:d9:37:ac:
         a5:40:20:db:56:b9:46:d7:aa:f9:62:59:e3:3c:33:ac:6f:31:
         1c:8f:2a:c0:e4:9f:68:3e:35:7c:b3:a0:26:28:77:00:8f:52:
         8f:3f:d6:d0:82:0b:52:11:03:20:18:ec:f2:62:46:12:ff:52:
         d9:d4:17:45:83:37:bd:1b:fc:27:5e:27:74:9f:4d:64:d1:a4:
         4f:78:40:3f:43:60:fb:f3:c3:fc:38:a7:7d:b8:49:1b:6e:f3:
         1b:f6:2b:ab:fd:a5:c6:79:1e:ac:8f:7e:84:b8:c9:56:26:aa:
         4e:08:02:9c:2b:27:bd:88:37:1d:8e:e7:4a:3b:92:11:1d:63:
         16:48:ad:29:0d:84:3f:65:7b:67:94:92:e1:32:b9:d7:28:fe:
         74:cd:db:4c:68:4f:f1:e3:1e:9f:a5:36:1f:13:e2:8a:56:74:
         e0:f1:fe:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:31:04 2026 by rpki-client