Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File:                     1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier:          wDymxC0JLzqp1ummi7MWggxuSYwm54FbZgwjK/a0oUI=
Subject key identifier:   8A:13:C1:54:26:B2:B2:3D:ED:69:7A:DB:82:F6:D1:D9:74:74:A9:56
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer:       /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial:       019E2FCDD07EB59C1D9EA33661BD3CCBC7F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number:          1611
Signing time:             Sat 16 May 2026 08:01:17 +0000
Manifest this update:     Sat 16 May 2026 08:01:17 +0000
Manifest next update:     Sun 17 May 2026 08:01:17 +0000
Files and hashes:         1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: yc3c6sQhCeMFHHBcDvldl1pLfE3UuwgMNmgMAeyXtMI=)
                          2: htjYZ9JBO2eJvDfIw7akHdbswEA.roa (hash: i2ODfKpZOto1cBGwXz5NxaTX+a6SvokP9Jli5HlOhng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:d0:7e:b5:9c:1d:9e:a3:36:61:bd:3c:cb:c7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
        Validity
            Not Before: May 16 08:01:17 2026 GMT
            Not After : May 17 08:01:17 2026 GMT
        Subject: CN=8a13c15426b2b23ded697adb82f6d1d97474a956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:09:9d:f1:8d:93:8c:61:dd:bf:91:2d:b9:42:
                    ed:14:e3:b5:88:21:f6:be:14:ab:1c:c8:5c:3d:2e:
                    3f:34:92:07:69:59:49:cf:37:b4:22:82:9b:e5:57:
                    42:f2:fa:90:13:05:ef:a7:75:cc:5f:4f:01:53:16:
                    28:c2:12:d6:41:21:3f:d9:0c:da:c3:c2:36:8a:b2:
                    db:2f:26:26:3e:78:9a:99:f3:f2:89:e9:b3:b1:1f:
                    6e:32:2b:7a:4a:ff:a6:44:84:20:89:79:1a:75:d0:
                    f4:80:98:7e:39:9c:09:40:28:1e:3a:2b:47:f3:f3:
                    73:c9:db:1c:d5:59:bb:71:90:05:fa:5a:ed:e6:e9:
                    58:30:43:58:85:88:16:64:45:d4:d0:74:65:d6:8c:
                    8c:e0:9d:08:77:62:79:38:f5:62:b7:01:10:e7:53:
                    3d:e0:ae:9b:59:5a:8f:38:a3:1a:ec:ea:70:01:45:
                    dc:eb:13:3b:64:57:50:4d:ec:2d:e5:b5:a8:a3:34:
                    44:20:dd:7d:a2:6c:37:a8:1d:6e:84:5c:00:a3:3d:
                    db:8b:fd:54:db:3b:f0:40:a3:fb:01:3c:b7:ba:68:
                    b0:f0:e4:95:45:48:6e:f1:8e:03:58:89:c7:18:50:
                    4c:2b:e1:b8:3d:10:ea:0e:f9:be:e5:bc:52:e6:2c:
                    14:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:13:C1:54:26:B2:B2:3D:ED:69:7A:DB:82:F6:D1:D9:74:74:A9:56
            X509v3 Authority Key Identifier:
                keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:98:ba:e8:d9:37:ed:c1:63:6a:0e:68:ac:50:92:89:54:5b:
         1e:bf:0a:24:c7:d9:55:8b:04:ac:da:d8:c4:b2:bd:16:20:ae:
         43:b9:72:61:3c:a3:d9:da:25:d7:64:76:59:6e:c5:37:8f:04:
         a2:0e:6b:21:33:8b:d6:9e:3d:fc:96:3f:71:b7:a3:3a:cc:04:
         96:5e:5a:01:d5:cf:c1:73:cf:e0:4c:dd:87:fd:c7:ad:75:0a:
         f8:14:8d:3a:da:57:59:50:b3:09:ee:eb:90:13:1d:bd:b1:ba:
         b7:02:58:a9:8c:cd:37:38:e2:5d:3c:04:be:91:82:1b:16:8b:
         80:3d:0a:54:ca:92:6e:50:cc:5f:f8:32:0e:6a:62:c2:e3:27:
         f5:74:f5:51:56:78:e7:bd:0d:15:7f:44:19:11:83:a9:e3:19:
         d9:aa:31:93:59:fd:21:6f:5a:fc:9f:5c:75:6b:ee:10:75:2d:
         d3:ae:62:65:89:40:cd:c3:d9:76:b8:7e:2a:52:8e:66:72:cf:
         08:df:8d:7c:a0:89:50:af:fc:94:25:84:1e:0f:ed:21:de:16:
         81:fa:a7:70:23:9e:2e:de:aa:54:b2:ea:12:05:e6:f5:88:74:
         1a:91:cd:9e:87:b0:d4:44:c4:70:35:9a:19:98:b5:c0:78:c8:
         53:94:a9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:01 2026 by rpki-client