Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File:                     1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier:          AFLL/UAuZD8o9NR6OyF0+KwoJB0Q0mDw4JTZ+ZtjyFs=
Subject key identifier:   60:1E:E1:8C:50:B4:01:15:F0:D0:6E:0F:98:2D:77:30:51:EB:1A:13
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer:       /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial:       01A000CA19AE31336936818F5241EB870D9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 15:00:39 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:39 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:39 +0000
Files and hashes:         1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: bZ1crje89DEv13m8A3GLFOXHxHczhbhAAzaeF/DnsMs=)
                          2: RBLs6_JEMpJ2-E4f-zbgq3OA94g.roa (hash: YtzTgnRD0gPLAxf3Gvly0Fh3NIAfS3kf5OMJ5xYDEXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:19:ae:31:33:69:36:81:8f:52:41:eb:87:0d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
        Validity
            Not Before: Aug 14 15:00:39 2026 GMT
            Not After : Aug 15 15:00:39 2026 GMT
        Subject: CN=601ee18c50b40115f0d06e0f982d773051eb1a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4f:8b:4e:d8:36:5a:9a:6a:3f:42:8c:43:9b:
                    bf:ac:7c:a1:cf:a5:6a:f1:e6:54:fd:c8:f1:c2:8e:
                    c2:b5:7a:bb:f7:e7:3b:62:77:cc:49:fe:d8:83:34:
                    f1:67:7a:5c:08:d8:af:79:59:e7:ec:68:c0:86:68:
                    4c:3d:2a:0c:8a:b6:bb:65:a8:22:e7:3b:80:68:e4:
                    b3:33:6c:ef:09:51:bf:76:c3:85:b9:31:1d:d6:da:
                    05:91:b2:94:69:71:be:a6:b7:a4:0a:f8:c2:16:2d:
                    04:16:b6:68:06:c2:27:11:22:5c:20:96:ab:8e:01:
                    77:c3:9e:c3:bd:90:16:34:57:27:7d:3e:8b:77:12:
                    8e:02:ea:af:1d:47:64:50:31:33:f7:72:94:b9:ca:
                    09:c7:33:39:73:d6:22:50:f2:07:26:12:8f:94:cb:
                    db:f9:e8:0c:d5:0f:d3:52:c5:30:c1:09:2c:14:e8:
                    f2:72:be:ea:8a:21:12:07:d3:56:d1:8a:ad:e3:5a:
                    4d:f9:78:b6:59:0b:ee:e0:a2:5f:43:2e:11:36:06:
                    f6:37:f5:e1:a5:2b:f6:4e:64:02:21:92:27:9c:a1:
                    b2:59:13:62:b8:4b:8c:94:c2:01:f4:82:78:49:2a:
                    43:e7:98:0e:2e:ac:ee:11:7f:aa:44:0c:48:2e:b4:
                    b0:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:1E:E1:8C:50:B4:01:15:F0:D0:6E:0F:98:2D:77:30:51:EB:1A:13
            X509v3 Authority Key Identifier:
                keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:56:ec:f6:8e:55:3a:9e:08:a3:d5:7c:c2:ff:ae:39:33:92:
         71:26:82:42:9c:d6:fd:14:0a:7a:7d:e3:56:3c:1f:81:d1:6c:
         ec:4b:24:82:20:20:4e:44:14:b3:4a:93:b1:38:1b:5d:bf:48:
         1f:2c:9c:27:fe:3d:61:ba:f1:64:39:70:55:d0:42:73:d8:e8:
         c5:7f:97:b4:a1:c1:e2:e0:f8:fd:bf:9a:40:fd:18:37:48:4b:
         77:88:5a:1f:8e:39:cd:b8:62:79:a9:6d:c0:d4:c4:44:8e:26:
         bd:98:8e:b4:58:78:66:90:9d:18:2f:ae:24:e1:d4:96:5f:7c:
         44:1b:33:df:de:22:c2:54:9b:0f:bf:75:a5:f1:97:d2:56:60:
         3d:0a:d8:f4:e7:ad:f0:2a:47:b0:97:4b:a4:b8:ab:d5:1b:bc:
         c2:a6:58:d6:19:44:33:63:ae:0c:cd:c6:fc:b8:db:7c:9f:69:
         24:49:93:dd:82:c9:6d:49:4b:b9:68:75:d9:d5:20:97:c6:c9:
         46:26:74:d0:3c:51:45:f0:af:99:8a:89:17:e9:bb:8c:59:6f:
         1b:67:c8:ec:f9:f7:fe:57:24:40:80:2c:ee:99:fa:17:24:17:
         5a:51:a8:a8:a4:0a:4a:fb:05:78:3f:b7:bf:1c:b3:52:f1:4e:
         29:a4:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:10 2026 by rpki-client