Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
File:                     1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json)
Hash identifier:          f5FJDGAO5LzJptvtbPLeWuvmfNxtNyv2XnPynArRxuY=
Subject key identifier:   C7:B1:8E:76:79:17:57:AB:8F:30:40:98:EC:96:F3:D8:76:91:1B:46
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Certificate issuer:       /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial:       01A000CA8A81A25E4AC83845B6AC7C5C4B85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
Manifest number:          1658
Signing time:             Fri 14 Aug 2026 15:01:08 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:08 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:08 +0000
Files and hashes:         1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: UXWFh6Hvv5jr86S7eoLURk7/MAvkiRQjzHxssN49m58=)
                          2: ZbHKUZ4-YfRQqqQSe1r9U7B43No.roa (hash: OWTRsb1+RVyVdipSZx/PdEhXtkE4BTOxk7X0sSkLurA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:8a:81:a2:5e:4a:c8:38:45:b6:ac:7c:5c:4b:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
        Validity
            Not Before: Aug 14 15:01:08 2026 GMT
            Not After : Aug 15 15:01:08 2026 GMT
        Subject: CN=c7b18e76791757ab8f304098ec96f3d876911b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f2:9f:1b:87:f9:14:0f:2d:a0:61:9b:0b:a0:
                    63:13:82:a2:37:84:39:a2:59:0e:8a:f9:c1:c2:29:
                    cc:13:d8:ce:95:84:bc:67:63:57:c1:38:e4:f3:17:
                    d5:7a:8c:67:4a:6a:1d:f3:3d:cb:fa:67:33:2a:b4:
                    78:76:4b:07:e2:8e:50:18:b5:f8:66:c4:eb:86:c8:
                    e5:e4:8d:78:73:44:da:1f:a0:72:e0:5e:0d:0e:81:
                    04:6a:21:5d:14:c7:6f:38:d0:2c:7c:bb:37:6b:47:
                    10:15:31:2b:1c:9b:14:cf:7f:3d:a0:97:b2:8e:ba:
                    2e:f9:be:59:3f:ed:a0:d9:60:05:41:88:83:25:1d:
                    e6:4d:8f:fa:a0:e0:c5:6c:b2:bb:16:1f:c3:95:3e:
                    e4:df:ef:cc:eb:37:b5:aa:a2:3e:b0:8b:cc:d6:a2:
                    85:66:67:06:dc:05:ff:77:25:1f:dc:8e:82:fd:36:
                    39:91:14:7a:1f:3d:2c:f8:1d:31:7b:ab:e8:b1:d3:
                    a5:f7:66:e7:6f:c7:d0:f1:32:3f:d9:92:99:f2:37:
                    89:16:7c:46:64:6b:4f:d3:34:da:ec:e3:7d:4f:a2:
                    03:b3:f9:29:d0:d5:cc:b4:ee:83:4d:92:9f:91:15:
                    18:36:88:64:f2:cb:24:8f:9f:a5:ff:69:93:22:b4:
                    a8:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B1:8E:76:79:17:57:AB:8F:30:40:98:EC:96:F3:D8:76:91:1B:46
            X509v3 Authority Key Identifier:
                keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:49:6e:82:dc:d6:53:45:91:21:1f:a6:9a:50:9e:71:28:97:
         58:eb:ac:64:65:64:6c:ff:a7:42:57:b9:df:6b:9d:a4:ea:1e:
         8c:c3:5f:16:e5:db:b7:6b:8d:6f:1f:9b:46:37:98:fd:70:dd:
         a9:3f:70:57:75:27:89:cb:4c:4c:dc:76:bb:8f:08:eb:08:f4:
         b1:56:73:62:a8:63:8f:38:33:b7:7f:d4:c0:fd:10:ba:b8:25:
         bf:df:34:55:ec:8b:7e:08:a4:17:5e:ff:76:ca:78:44:67:60:
         bf:fd:b4:ad:c7:d5:b3:df:8e:cb:f7:fb:a8:4e:66:c3:dc:87:
         85:48:68:8a:99:f4:3d:f3:d6:59:e4:aa:44:55:8a:6e:ea:8b:
         9e:67:3a:e8:25:77:1f:59:c0:2c:ee:ed:70:ee:1f:b1:7a:97:
         50:b9:cb:eb:2b:e4:86:04:d0:cb:c8:49:19:5f:9b:e3:8a:fd:
         ed:62:e4:71:27:b8:7b:17:ac:02:ad:d7:93:28:d7:10:94:bf:
         09:11:56:6b:01:81:24:4d:a0:ac:33:91:0c:dc:2d:91:af:22:
         b8:89:05:86:c8:c7:8c:85:ac:a6:e8:64:15:d4:ae:26:47:1f:
         85:54:4c:8d:05:39:9c:71:d4:33:19:36:a8:e6:32:e6:8a:15:
         dd:c7:b6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:39 2026 by rpki-client