Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
File:                     A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft (raw, json)
Hash identifier:          PKlJqxWJPnEgjGRvho5EG7Ph39vdtam6mcNxQgPf6mk=
Subject key identifier:   61:10:3F:07:29:F4:08:30:E2:48:CA:C6:B1:F0:42:21:33:D7:AA:F5
Authority key identifier: 03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F
Certificate issuer:       /CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
Certificate serial:       01A000CAC583109940C63CAAEBF2664AD3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
Manifest number:          0E4F
Signing time:             Fri 14 Aug 2026 15:01:23 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:23 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:23 +0000
Files and hashes:         1: A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl (hash: OusQ3xc491rkhF5GPF9cNcH3diyLR7x8ewpJIgItLmU=)
                          2: sjA1ToSGjshXQBxrZlIojPI-aMY.roa (hash: Bq4V8AmtwX68FBbbDKEPAX/kpr0bLZ62b5BVlxhBFAw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:c5:83:10:99:40:c6:3c:aa:eb:f2:66:4a:d3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03515ffe1dbfe76a805fd0dfb2e0c8d7e49af59f
        Validity
            Not Before: Aug 14 15:01:23 2026 GMT
            Not After : Aug 15 15:01:23 2026 GMT
        Subject: CN=61103f0729f40830e248cac6b1f0422133d7aaf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8f:54:d6:e8:3f:3e:f8:53:7b:ef:a7:34:0e:
                    72:56:69:37:26:da:35:bd:e5:e7:55:44:a7:1c:9e:
                    6b:16:52:40:04:ff:cc:e8:c9:cc:55:43:85:00:12:
                    7a:6f:31:96:99:7d:0a:c3:10:9c:b0:3d:76:fc:8a:
                    b6:49:a2:69:f0:ed:26:95:81:bc:5d:54:d2:9e:be:
                    f5:86:1a:02:04:b2:83:8f:5a:81:7c:cd:62:5c:9c:
                    85:16:13:81:48:14:ce:d3:31:b3:1d:92:b2:6c:6d:
                    e3:95:d2:db:f3:50:3b:00:a7:e0:2c:66:12:52:ca:
                    23:3c:f8:a9:bf:ff:61:b0:bb:58:a9:b6:c3:d3:90:
                    7f:e7:4e:e2:14:16:c3:17:8d:a8:31:21:0f:83:e3:
                    6a:23:7b:41:c0:ff:1d:07:21:c5:95:60:6f:91:f6:
                    dc:6b:50:e6:73:17:14:00:3f:28:5d:9f:61:d3:5b:
                    a2:f6:70:a5:5c:a8:87:5c:33:2a:f4:26:ba:e6:7e:
                    1a:69:d5:20:70:e5:2d:ac:ea:bf:b0:12:b6:86:29:
                    40:30:62:25:fd:ac:8f:71:59:a3:e5:32:af:e5:92:
                    eb:bd:39:eb:0b:0d:d0:38:ae:8b:ce:a0:c9:00:a0:
                    a7:05:53:dd:94:4c:18:46:a7:f1:f8:d9:92:ca:c4:
                    eb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:10:3F:07:29:F4:08:30:E2:48:CA:C6:B1:F0:42:21:33:D7:AA:F5
            X509v3 Authority Key Identifier:
                keyid:03:51:5F:FE:1D:BF:E7:6A:80:5F:D0:DF:B2:E0:C8:D7:E4:9A:F5:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/11f605-a1f5-4523-85d0-d38495fb09a0/1/A1Ff_h2_52qAX9DfsuDI1-Sa9Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:96:77:7b:3b:d3:21:45:1c:d9:e4:7a:28:dd:a1:94:87:5b:
         1d:f3:a0:1a:b1:9a:3d:f9:ad:65:d0:8e:b3:73:91:12:a2:71:
         72:61:ba:1d:05:e8:0c:55:80:f6:26:de:b4:22:95:a2:74:7c:
         38:a5:0c:fb:c1:fa:59:27:f9:f8:25:55:7c:43:b9:86:9d:c8:
         ff:9b:dc:2e:f5:cd:61:9c:93:d6:52:f6:79:ca:0d:75:8f:40:
         ed:50:f1:67:17:a3:36:23:9b:ed:92:db:ab:2a:17:f4:28:ef:
         fc:3f:34:64:8d:d6:eb:e7:86:c8:14:bd:ee:e2:6b:f1:95:e5:
         8b:40:fa:03:e2:03:c9:9d:cc:0a:cf:fa:ff:da:20:3c:3e:eb:
         cb:b8:ef:6d:35:46:93:a0:78:9b:6d:dc:2a:42:54:39:bc:7b:
         f2:eb:ca:b6:0f:e8:ee:90:6b:97:0b:b7:95:07:df:ed:60:85:
         e5:bf:69:c1:d3:99:e2:2b:71:01:d3:a0:c8:51:25:48:56:a1:
         ef:3b:a4:5c:3b:a9:bf:de:3e:b9:85:1a:48:c2:db:db:60:56:
         76:91:9c:41:8f:ae:3d:ba:36:54:44:80:20:2b:7c:be:62:4f:
         c7:8a:55:5f:ee:55:42:57:11:ee:be:5f:2a:ae:95:85:03:57:
         24:71:03:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:33:02 2026 by rpki-client