Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File:                     1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier:          mrWl0qB53v/JN+yLxSmBtP2F3VzHIusR0MucaFVlfwg=
Subject key identifier:   E5:AA:09:15:DC:06:2B:15:FB:CB:F5:8B:B8:23:5C:F4:91:BF:BD:48
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer:       /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial:       01A000CA9BB0B3E325CB6C67DF3D52D039B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number:          1287
Signing time:             Fri 14 Aug 2026 15:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:13 +0000
Files and hashes:         1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: F8eAAmgEDNLBbTUSsc6M9yXMJeEj2CRNpdVIt6FTb0k=)
                          2: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (hash: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:9b:b0:b3:e3:25:cb:6c:67:df:3d:52:d0:39:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
        Validity
            Not Before: Aug 14 15:01:13 2026 GMT
            Not After : Aug 15 15:01:13 2026 GMT
        Subject: CN=e5aa0915dc062b15fbcbf58bb8235cf491bfbd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:48:80:b5:fc:e5:6f:cc:28:98:57:ec:b3:
                    cb:68:1e:14:4d:c8:73:71:50:99:be:58:6c:cf:c6:
                    49:c7:b1:0d:62:c0:43:56:1b:e3:ec:04:23:e8:47:
                    ad:ef:8c:30:d3:87:da:2c:c6:3a:3e:33:76:95:aa:
                    c6:40:f1:a3:cd:a1:9f:70:6f:4f:45:07:cc:8b:29:
                    af:8b:70:90:57:d5:fe:2e:13:21:25:aa:da:6d:87:
                    21:00:da:44:3e:1d:90:f5:60:1c:df:bb:fa:18:c2:
                    29:93:bd:df:74:df:d8:e6:13:57:cc:87:7d:78:fa:
                    d9:3e:1d:f5:63:2c:8f:2b:33:ce:70:77:a7:ff:7f:
                    08:14:dc:d9:f0:94:38:43:a4:ca:d8:4c:b4:69:e7:
                    43:33:67:91:6e:d0:1d:40:cf:38:ac:14:68:c6:f7:
                    cc:4b:09:a1:c5:06:a7:45:78:5b:e2:49:65:25:34:
                    da:36:55:2f:24:21:05:43:3f:24:8c:fa:9a:d5:0c:
                    70:60:96:88:12:a2:aa:61:6f:37:d4:bc:c4:90:60:
                    8c:ff:09:b9:a3:38:db:1d:fd:db:16:27:73:4e:07:
                    5a:1d:7f:30:fc:23:72:1a:3b:7a:32:27:c9:51:20:
                    4d:bf:ae:38:dd:59:6a:33:94:f2:95:03:3b:d2:60:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AA:09:15:DC:06:2B:15:FB:CB:F5:8B:B8:23:5C:F4:91:BF:BD:48
            X509v3 Authority Key Identifier:
                keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:dc:5e:22:d4:8e:f1:60:f6:1b:dd:2e:02:5f:32:59:5b:f3:
         93:73:f9:d0:6c:14:fb:0b:7e:53:58:73:74:3e:86:7b:6d:62:
         b0:92:fc:21:41:c7:2b:37:ca:28:ad:36:c1:19:ce:f0:85:4e:
         67:b4:36:29:ec:67:74:39:b3:0a:1b:47:94:0b:b2:76:61:cb:
         00:05:0d:7e:fc:39:cb:e7:a5:3b:6e:33:b3:0c:2c:cb:67:fa:
         71:68:dc:7d:2f:67:3f:bb:05:18:e8:76:55:77:f3:db:9e:8b:
         f8:8b:e0:b8:97:dc:8c:11:25:54:cc:7e:e3:c1:c5:b2:fd:68:
         92:0b:fc:72:e8:2d:35:4b:22:d2:2b:d0:3e:91:3e:f2:5d:33:
         8f:74:43:80:81:a5:f2:c1:5a:56:f6:8e:2a:48:93:bf:b5:83:
         e8:d5:f8:29:fd:0d:c8:86:b8:7a:7f:56:64:14:d9:04:a7:3e:
         a8:e2:5a:43:37:b5:f1:f1:e7:b5:60:da:d4:12:6a:25:3e:8f:
         da:4b:87:a9:24:8c:be:9c:e5:b7:5a:6b:ab:01:4a:50:9c:ad:
         7e:66:21:86:98:1a:c2:05:33:c2:f7:e5:ca:fe:83:eb:0b:8b:
         b4:64:f8:e7:6d:0d:ab:33:34:03:82:70:81:9e:6f:de:6e:52:
         fe:92:5e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:34 2026 by rpki-client