Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
File:                     1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft (raw, json)
Hash identifier:          tljbmOQy5ig1dsYYFMm9ycxBmli2FFKfHojgORXLmAg=
Subject key identifier:   17:A3:4D:52:27:37:BB:E9:90:88:FF:5C:4A:20:70:DE:B0:6B:58:BE
Authority key identifier: D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74
Certificate issuer:       /CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
Certificate serial:       019F189E94A707C9DDF1024FC74F305E1665
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
Manifest number:          1986
Signing time:             Tue 30 Jun 2026 13:01:13 +0000
Manifest this update:     Tue 30 Jun 2026 13:01:13 +0000
Manifest next update:     Wed 01 Jul 2026 13:01:13 +0000
Files and hashes:         1: 1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl (hash: eKALoid8yScKTGMshCGh4NaAkFfFqT+syxLQ1OwEBsY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 13:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:9e:94:a7:07:c9:dd:f1:02:4f:c7:4f:30:5e:16:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d56fe2c0cfd7691044ee37845cfcf54e1a849974
        Validity
            Not Before: Jun 30 13:01:13 2026 GMT
            Not After : Jul  1 13:01:13 2026 GMT
        Subject: CN=17a34d522737bbe99088ff5c4a2070deb06b58be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:50:22:c3:16:67:42:db:f7:f9:a9:a7:53:
                    7d:26:27:ce:10:76:ea:00:1b:03:fd:57:61:ac:86:
                    1b:01:db:de:91:f9:34:ba:b9:7d:d3:ec:ec:33:27:
                    42:6e:c5:b4:18:b4:98:bb:6f:9a:79:2f:e3:db:c1:
                    7e:90:64:51:07:d4:96:fc:cd:b8:91:67:22:26:74:
                    23:74:a2:02:ec:b8:0e:70:d1:36:2b:02:22:5c:ff:
                    c8:ea:c5:d6:0e:31:a2:ff:40:83:98:3d:a3:65:7e:
                    a9:1d:95:3b:f2:da:b8:26:86:b0:fb:24:f0:03:e1:
                    fe:05:9e:cb:00:e0:23:3f:1d:64:20:5c:54:5b:6e:
                    88:2b:52:c3:d1:a8:d9:9f:1e:1a:33:85:d9:65:d0:
                    51:47:d1:f9:ce:9f:46:ff:c1:03:1e:7d:2f:e8:99:
                    26:ec:10:4c:00:51:19:74:4d:42:8f:48:1d:34:18:
                    ab:6d:0f:fe:2a:01:16:7c:3e:19:42:b3:9e:de:09:
                    72:d6:04:14:83:1f:c6:1d:8f:5b:db:66:38:89:10:
                    d2:b1:18:18:5f:88:66:e8:31:e5:e7:ee:4c:65:f0:
                    99:10:2f:1b:bd:f2:e1:af:04:9d:96:f2:1f:49:04:
                    c6:d6:0f:f2:08:51:ec:b5:51:b6:f0:ee:9e:ed:83:
                    0c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A3:4D:52:27:37:BB:E9:90:88:FF:5C:4A:20:70:DE:B0:6B:58:BE
            X509v3 Authority Key Identifier:
                keyid:D5:6F:E2:C0:CF:D7:69:10:44:EE:37:84:5C:FC:F5:4E:1A:84:99:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/031138-86e1-4182-a7a6-0107ec33e5b7/1/1W_iwM_XaRBE7jeEXPz1ThqEmXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5c:db:04:5c:ae:79:e9:f5:bf:0f:14:ee:d1:bb:57:d9:fe:
         62:80:30:9c:84:c4:ec:e2:29:1c:99:68:4a:7e:ed:a9:7d:23:
         b3:b5:8c:9a:ed:e2:a1:f9:30:6f:75:10:9a:df:9e:4b:8d:f9:
         57:43:d7:61:b5:00:89:c2:55:71:bf:e4:0a:cd:22:5c:8e:b8:
         b2:34:52:c1:9c:9c:a7:dc:4f:cb:dd:56:6d:0d:75:65:b3:dc:
         c8:45:9c:39:f3:88:39:4e:fb:75:57:36:95:8d:c3:13:ea:3e:
         75:7e:75:da:89:39:66:8a:00:15:dc:4e:2d:76:be:85:74:78:
         92:e9:c8:11:6c:db:53:1c:55:51:b5:01:ea:26:43:a3:19:09:
         53:c4:d6:96:b4:56:ba:43:f5:3c:4e:69:c2:b3:5c:f8:b4:a3:
         06:29:d7:fe:ee:c1:00:1b:7d:3d:47:21:54:7a:a8:91:9c:23:
         ac:2b:2c:02:93:7e:0b:74:10:3c:56:1e:72:f7:fa:88:31:69:
         82:c2:a9:5c:c8:5d:6e:bd:af:e3:9b:8c:8f:9e:e3:67:68:47:
         22:cf:fa:a4:b3:f6:4a:e3:c0:c7:2b:bb:51:64:3b:7c:19:d3:
         b0:89:68:6d:14:45:a0:76:74:97:35:64:d7:e5:92:30:39:6f:
         a9:1d:53:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:14 2026 by rpki-client