Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft
File:                     1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft (raw, json)
Hash identifier:          33JhvBptWne7G2XxPpJpRpW7SHxOL6utbLtMv3K8ugU=
Subject key identifier:   2F:4E:BF:AD:CD:AB:58:69:60:59:D2:27:E0:8D:E4:3F:8D:24:0B:6F
Authority key identifier: FA:21:20:AB:62:83:49:11:A9:7B:0E:02:42:73:6B:AB:91:4B:91:52
Certificate issuer:       /CN=fa2120ab62834911a97b0e0242736bab914b9152
Certificate serial:       019FF8A36611D23EDE4B6FCCA75623449D78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-iEgq2KDSRGpew4CQnNrq5FLkVI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft
Manifest number:          1E
Signing time:             Thu 13 Aug 2026 01:01:25 +0000
Manifest this update:     Thu 13 Aug 2026 01:01:25 +0000
Manifest next update:     Fri 14 Aug 2026 01:01:25 +0000
Files and hashes:         1: 1-iEgq2KDSRGpew4CQnNrq5FLkVI.crl (hash: LjtwFcxyWqG5vZNL3uGhQoZBjLGLpxZt/0YNDDrAOSA=)
                          2: 3IW9P13hbDpIroQ4Eb7wRdX2rSE.asa (hash: sNco4rgF7zm4/2zjNkDBDPMdSZcAUXK74yHPNlbFpLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-iEgq2KDSRGpew4CQnNrq5FLkVI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:a3:66:11:d2:3e:de:4b:6f:cc:a7:56:23:44:9d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa2120ab62834911a97b0e0242736bab914b9152
        Validity
            Not Before: Aug 13 01:01:25 2026 GMT
            Not After : Aug 14 01:01:25 2026 GMT
        Subject: CN=2f4ebfadcdab58696059d227e08de43f8d240b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5c:75:e4:fa:3d:8c:ba:8b:7e:07:10:59:b8:
                    ad:fd:8b:da:78:d8:46:df:39:02:58:d0:51:38:e7:
                    1f:77:1f:be:04:c5:da:60:f4:ff:14:5d:06:ec:92:
                    66:ee:3b:3a:f6:63:ad:10:d7:e8:d1:b0:73:43:50:
                    41:8a:4d:c9:17:4f:78:4c:55:0f:d1:21:cd:70:5d:
                    f0:81:a3:43:ea:f9:ac:0d:35:c4:14:3a:55:88:58:
                    83:65:32:8c:e0:bf:95:9b:35:7e:58:fb:c9:d4:2d:
                    45:4f:4e:cf:2b:cc:1f:0a:df:cb:63:33:66:bc:f2:
                    50:c8:fb:96:b0:4b:84:0a:a2:48:22:a5:45:d2:0f:
                    23:60:a2:11:16:21:49:d6:ad:18:90:19:95:a4:1f:
                    91:0a:4c:33:87:c1:03:8c:bd:c2:c6:5f:ab:8a:07:
                    34:ab:00:78:9b:d8:a8:c5:b4:d6:83:17:ce:ee:4c:
                    96:68:3b:62:13:9f:85:2e:35:33:1a:f3:69:de:6a:
                    f8:f0:57:36:e6:b6:c1:c2:82:04:44:7e:af:39:bf:
                    63:ac:06:81:77:c8:1a:d8:3b:1f:6e:46:71:c9:fa:
                    17:e8:d7:a0:0f:ad:fa:c1:f4:be:53:80:c9:65:ec:
                    e8:4c:5d:f5:a1:8c:ad:0f:ec:9b:ae:d8:49:33:bf:
                    5e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:4E:BF:AD:CD:AB:58:69:60:59:D2:27:E0:8D:E4:3F:8D:24:0B:6F
            X509v3 Authority Key Identifier:
                keyid:FA:21:20:AB:62:83:49:11:A9:7B:0E:02:42:73:6B:AB:91:4B:91:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iEgq2KDSRGpew4CQnNrq5FLkVI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/709d1a-64c5-428e-b4b9-abcf62991e3c/1/1-iEgq2KDSRGpew4CQnNrq5FLkVI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:74:c0:67:84:c3:2e:47:27:e8:18:4d:4d:15:2e:29:33:ce:
         f0:7b:e9:c1:e2:d9:56:61:2e:91:88:50:d7:fe:bc:8e:fd:0c:
         0b:a6:cb:0c:0c:f6:b0:75:32:28:2e:46:42:bb:d1:f3:43:99:
         a4:df:fb:c7:d1:03:be:8f:06:d2:21:ed:f6:18:96:11:38:e3:
         70:d9:05:54:a7:26:9c:1f:a7:b7:ec:e1:92:c8:38:be:12:44:
         f0:a9:dd:8f:a4:d7:b9:b3:1e:7a:16:97:47:fd:f1:6c:7b:c8:
         21:a7:12:14:12:f7:db:25:04:2f:aa:9d:72:1a:7d:79:91:ef:
         c2:20:3d:8f:26:b1:07:d5:50:c2:06:42:9a:4d:74:b7:f6:fd:
         00:d5:49:d2:b6:ba:20:f3:9d:c6:5a:43:01:6d:33:28:27:8e:
         23:f3:68:7d:7e:bc:03:cd:7c:f0:68:72:92:18:f0:45:29:f5:
         d0:c3:13:be:e7:c7:16:95:3a:42:b5:e0:23:9a:51:00:27:3d:
         38:d0:da:59:5e:a2:c4:24:cc:ee:a1:2f:73:6e:cb:d2:50:eb:
         60:2d:d8:40:7b:29:d3:a0:b5:49:e3:bc:0a:ef:95:92:98:87:
         b4:a7:9d:08:91:ce:ec:e8:bc:12:89:00:a4:37:82:c0:40:7a:
         d5:aa:51:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:51:47 2026 by rpki-client