Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
File:                     1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft (raw, json)
Hash identifier:          0PDUmLJLRBOW6aGbVak1uk2qEtnhKu5m23KOM3c5K5E=
Subject key identifier:   61:8F:69:FC:01:18:D7:D8:F9:0E:29:5E:55:3B:07:2C:BF:B5:29:29
Authority key identifier: F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0
Certificate issuer:       /CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
Certificate serial:       01A000CAC079A1074F83D298350428F53E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
Manifest number:          1299
Signing time:             Fri 14 Aug 2026 15:01:22 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:22 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:22 +0000
Files and hashes:         1: 1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl (hash: V0uTt9M6Ba5+j2MbXaH8xq1bf2HQVPKVP8wyP2S1748=)
                          2: IWO_1E0uKvsMuhbSRTwHXKuLogs.roa (hash: iyL1lN4s18GljEvMLQlWT0eQboV/8PsrG46R15eum9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:c0:79:a1:07:4f:83:d2:98:35:04:28:f5:3e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9124ce7b99124defb55b8247358dfdda35f6ce0
        Validity
            Not Before: Aug 14 15:01:22 2026 GMT
            Not After : Aug 15 15:01:22 2026 GMT
        Subject: CN=618f69fc0118d7d8f90e295e553b072cbfb52929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:52:a8:26:07:69:9f:95:80:75:36:ad:e0:d7:
                    68:46:bf:3d:18:91:29:8c:06:03:e3:f4:8b:1b:00:
                    dd:10:19:95:73:28:e2:50:1c:dd:76:e9:c8:89:37:
                    a3:42:9b:f8:c5:b5:3a:e8:3a:a1:9e:6e:b2:ec:ce:
                    c4:dc:53:34:fb:cd:4b:16:b0:f7:bb:c2:15:f4:c2:
                    2b:de:d4:ab:e6:c8:c7:29:3b:81:19:56:5d:97:77:
                    9e:a4:9e:48:c7:37:34:b3:37:01:09:1a:3d:57:cc:
                    57:35:50:0e:31:ed:21:35:7c:bf:be:6e:5f:0b:9c:
                    db:55:47:24:de:9a:12:8e:43:67:ce:a6:66:6c:4e:
                    df:e7:06:81:e2:66:50:d3:21:4f:48:17:ab:d0:07:
                    ab:85:5c:a4:12:dc:f9:1e:12:2c:07:14:e5:54:9f:
                    8a:03:7c:d1:90:c7:b8:72:dc:3f:ac:25:0a:70:3a:
                    a9:08:b7:31:d8:29:9c:16:7a:7f:3e:91:3e:8c:a4:
                    99:71:55:5f:81:88:98:fb:9a:7b:43:17:37:af:11:
                    b2:7f:4e:23:b8:d3:d2:c9:bb:3e:c9:df:c4:cd:59:
                    79:96:df:c5:53:29:63:93:c4:13:a3:3b:14:15:7e:
                    ee:9f:3c:b9:6f:8e:48:93:2f:a7:68:fb:4c:4f:8d:
                    d5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:8F:69:FC:01:18:D7:D8:F9:0E:29:5E:55:3B:07:2C:BF:B5:29:29
            X509v3 Authority Key Identifier:
                keyid:F9:12:4C:E7:B9:91:24:DE:FB:55:B8:24:73:58:DF:DD:A3:5F:6C:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RJM57mRJN77Vbgkc1jf3aNfbOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bc6edc-fb17-4de0-9aa7-dd222e2fb5c7/1/1-RJM57mRJN77Vbgkc1jf3aNfbOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:c7:7d:61:e8:57:00:aa:97:49:2d:e6:45:98:17:c1:27:73:
         5b:3e:58:99:a1:b2:55:03:d1:9e:af:9f:39:9f:cf:fb:fe:68:
         01:0e:7d:06:5d:26:c2:c7:35:d0:dd:a4:72:4c:87:1a:c4:e4:
         38:c6:2e:c1:68:55:de:13:62:04:66:37:dc:2c:39:ed:17:12:
         63:0f:ed:42:49:48:b7:d9:60:73:90:89:06:65:b8:e1:aa:93:
         8a:a5:8c:28:db:4b:03:e0:98:bc:bc:e8:61:ae:92:1e:42:4b:
         04:29:c2:d6:81:41:00:d8:ce:17:dc:06:ed:68:f0:4a:fb:09:
         b9:e7:b5:29:b0:ac:4c:92:c9:95:56:2e:f8:f2:f2:cf:1b:06:
         f7:b5:41:0b:39:ea:12:c6:b2:4d:a4:1d:16:14:19:5e:78:55:
         19:10:d1:86:e8:55:f9:27:f6:49:e1:dd:e0:73:e6:b6:3f:93:
         08:95:f4:bb:fd:26:6f:e6:b7:e3:ff:c3:a9:5c:4c:ae:7e:89:
         78:34:3c:40:3e:7d:62:a4:dd:6b:70:07:a1:b5:30:c2:e6:4e:
         3d:42:e6:23:93:97:01:8e:fc:d7:a8:02:68:fc:44:1a:06:f3:
         40:da:07:08:3c:7e:2b:78:e2:7d:9d:b3:93:10:d6:3b:54:90:
         bf:ab:a9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:09:36 2026 by rpki-client