Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
File:                     1TWbs5OO2MpV324QAT-f9hAcG_c.mft (raw, json)
Hash identifier:          /Tojwh/RB2ZkLLFsPmtLsMHUm36tgUxgfrHhTFnCvKg=
Subject key identifier:   E5:83:8F:B5:0E:FE:36:9C:48:D6:33:AE:6A:79:7F:3F:D5:4E:5B:22
Authority key identifier: D5:35:9B:B3:93:8E:D8:CA:55:DF:6E:10:01:3F:9F:F6:10:1C:1B:F7
Certificate issuer:       /CN=d5359bb3938ed8ca55df6e10013f9ff6101c1bf7
Certificate serial:       01A0412A9FCD7B561A84D6D71F9BB1F32E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1TWbs5OO2MpV324QAT-f9hAcG_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
Manifest number:          01E8
Signing time:             Thu 27 Aug 2026 03:01:47 +0000
Manifest this update:     Thu 27 Aug 2026 03:01:47 +0000
Manifest next update:     Fri 28 Aug 2026 03:01:47 +0000
Files and hashes:         1: 1TWbs5OO2MpV324QAT-f9hAcG_c.crl (hash: /jGnn7cERyI1HblYRuKMWGydo9DsYZ8o9CHEfyae1O4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1TWbs5OO2MpV324QAT-f9hAcG_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:2a:9f:cd:7b:56:1a:84:d6:d7:1f:9b:b1:f3:2e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5359bb3938ed8ca55df6e10013f9ff6101c1bf7
        Validity
            Not Before: Aug 27 03:01:47 2026 GMT
            Not After : Aug 28 03:01:47 2026 GMT
        Subject: CN=e5838fb50efe369c48d633ae6a797f3fd54e5b22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3a:87:dc:fb:1e:3c:89:06:0b:a4:96:cb:32:
                    a3:05:3d:4d:40:ce:b1:75:d3:28:26:ed:e3:3e:c0:
                    29:51:09:aa:e6:00:3e:d6:2c:52:81:e8:57:54:ea:
                    a6:c5:99:d7:2c:3b:6d:e0:14:2d:0f:6e:21:f1:e1:
                    7e:f3:af:82:34:00:0a:a1:f9:ae:04:69:3a:09:08:
                    3d:a0:e9:a4:94:f1:49:37:77:a2:f0:95:94:1e:08:
                    1d:50:50:38:79:33:97:d3:52:fd:d8:ee:7d:07:41:
                    80:69:64:a9:54:a4:37:ef:77:ac:00:85:1e:42:4c:
                    b1:1a:89:da:c5:31:29:4a:65:42:34:a8:33:28:c1:
                    d6:27:1c:8e:59:a7:9b:68:42:09:2d:26:2a:5b:80:
                    5e:72:48:9c:40:90:9b:8f:35:3b:e6:e7:7b:6d:d9:
                    9f:04:f9:ae:5f:08:fa:b8:fd:2f:64:e8:aa:f0:2a:
                    17:68:07:68:e8:5d:17:de:b1:84:15:96:f2:12:5a:
                    ed:1c:07:34:01:8f:d8:1b:65:31:d9:68:0f:78:72:
                    35:89:41:e8:a8:ab:ef:78:30:7e:49:a1:0f:63:af:
                    07:1b:7a:cd:6f:0d:1c:ca:ca:12:10:38:81:78:57:
                    8d:22:a0:f9:f9:eb:51:33:f3:cb:c3:a1:fb:b0:13:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:83:8F:B5:0E:FE:36:9C:48:D6:33:AE:6A:79:7F:3F:D5:4E:5B:22
            X509v3 Authority Key Identifier:
                keyid:D5:35:9B:B3:93:8E:D8:CA:55:DF:6E:10:01:3F:9F:F6:10:1C:1B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TWbs5OO2MpV324QAT-f9hAcG_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/403b8d-6b30-4cfa-9ee0-d646d27ca175/1/1TWbs5OO2MpV324QAT-f9hAcG_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:73:8c:82:b9:e0:63:78:0d:d7:06:e8:f1:77:a3:e7:07:73:
         f5:33:80:a3:da:cf:93:44:05:61:3f:38:80:a6:d3:c8:6e:ad:
         ae:75:96:89:d1:c8:27:07:d9:6d:27:7d:a3:51:97:32:aa:33:
         88:80:3f:62:23:a7:df:b9:3f:da:75:79:74:1c:17:bc:cf:0f:
         c1:51:55:68:2e:3e:aa:94:ba:40:d3:f8:b8:1b:a0:a5:ea:7e:
         06:7a:38:65:87:f8:a2:f3:97:6c:df:de:1b:e3:6e:8b:fe:84:
         b2:03:47:2a:98:f9:77:b3:7d:10:99:e0:14:3b:de:f1:7d:9b:
         bd:f5:85:6d:41:ba:93:01:2c:83:f0:ad:9c:2c:5c:20:61:d8:
         44:b2:f9:1c:b1:02:5e:37:76:de:d7:d0:a1:2a:68:65:96:28:
         0c:c0:95:39:1a:91:94:51:dc:ba:53:ab:da:ba:0a:67:00:ba:
         64:f5:10:ec:30:a3:a0:cb:98:07:08:19:12:8f:50:02:ad:c0:
         d9:b7:41:d9:b4:f8:28:7a:b3:f7:86:1c:51:36:34:35:dc:76:
         4e:91:0e:a6:30:26:6b:4a:3e:41:c4:79:c4:b4:70:60:4c:29:
         2a:ab:79:c3:3e:c0:c9:b2:7e:50:21:5e:50:8b:58:53:2d:eb:
         0f:80:d5:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKp/Ne1YahNbXH5ux8y6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MzU5YmIzOTM4ZWQ4Y2E1NWRmNmUxMDAxM2Y5ZmY2MTAx
YzFiZjcwHhcNMjYwODI3MDMwMTQ3WhcNMjYwODI4MDMwMTQ3WjAzMTEwLwYDVQQD
EyhlNTgzOGZiNTBlZmUzNjljNDhkNjMzYWU2YTc5N2YzZmQ1NGU1YjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTqH3PsePIkGC6SWyzKjBT1NQM6x
ddMoJu3jPsApUQmq5gA+1ixSgehXVOqmxZnXLDtt4BQtD24h8eF+86+CNAAKofmu
BGk6CQg9oOmklPFJN3ei8JWUHggdUFA4eTOX01L92O59B0GAaWSpVKQ373esAIUe
QkyxGonaxTEpSmVCNKgzKMHWJxyOWaebaEIJLSYqW4BeckicQJCbjzU75ud7bdmf
BPmuXwj6uP0vZOiq8CoXaAdo6F0X3rGEFZbyElrtHAc0AY/YG2Ux2WgPeHI1iUHo
qKvveDB+SaEPY68HG3rNbw0cysoSEDiBeFeNIqD5+etRM/PLw6H7sBP06QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWDj7UO/jacSNYzrmp5fz/VTlsiMB8GA1UdIwQY
MBaAFNU1m7OTjtjKVd9uEAE/n/YQHBv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVRXYnM1T08yTXBWMzI0UUFULWY5aEFjR19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy80MDNiOGQtNmIzMC00Y2ZhLTllZTAt
ZDY0NmQyN2NhMTc1LzEvMVRXYnM1T08yTXBWMzI0UUFULWY5aEFjR19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy80MDNiOGQtNmIzMC00Y2ZhLTllZTAtZDY0NmQyN2NhMTc1
LzEvMVRXYnM1T08yTXBWMzI0UUFULWY5aEFjR19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnXOMgrng
Y3gN1wbo8Xej5wdz9TOAo9rPk0QFYT84gKbTyG6trnWWidHIJwfZbSd9o1GXMqoz
iIA/YiOn37k/2nV5dBwXvM8PwVFVaC4+qpS6QNP4uBugpep+Bno4ZYf4ovOXbN/e
G+Nui/6EsgNHKpj5d7N9EJngFDve8X2bvfWFbUG6kwEsg/CtnCxcIGHYRLL5HLEC
Xjd23tfQoSpoZZYoDMCVORqRlFHculOr2roKZwC6ZPUQ7DCjoMuYBwgZEo9QAq3A
2bdB2bT4KHqz94YcUTY0Ndx2TpEOpjAma0o+QcR5xLRwYEwpKqt5wz7AybJ+UCFe
UItYUy3rD4DVbw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 06:20:55 2026 by rpki-client