Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
File:                     1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft (raw, json)
Hash identifier:          bIiGLqXbDZAyIdufrEVnAyAIXcBb+uEFqTExHWAXJIc=
Subject key identifier:   1A:D4:0E:AF:AB:94:36:6C:10:D0:D2:B6:53:6F:35:15:07:C1:EE:86
Authority key identifier: F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35
Certificate issuer:       /CN=f970049cba7f39aeed31d65313c7b953f3fda135
Certificate serial:       019EBAA22CFED7151FD6AC737EF8218D1CDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
Manifest number:          1786
Signing time:             Fri 12 Jun 2026 07:00:50 +0000
Manifest this update:     Fri 12 Jun 2026 07:00:50 +0000
Manifest next update:     Sat 13 Jun 2026 07:00:50 +0000
Files and hashes:         1: 1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl (hash: vIxb9qoV2bky0KGY+N8zsNWFEFxWKdV4P49JOLPUK5c=)
                          2: 9O4dKfnZgTgqWB_iiNETLsmvwXY.roa (hash: B3+44Wl16VVGNQlYDiIt0cK5DguWkC82Gzjl2M8qljQ=)
                          3: 9wP7mpH_B0PGwWv5_AlRe4xldiA.roa (hash: zYLWTc75j+s7gKIa+ebYI+LbuI7qKTL5YSAgcKHFymE=)
                          4: HUC0yUJUDgqy27kx_QVtwVTYAPk.roa (hash: CyeQ43VG6tD5RMnxhr0UsmCBVHZpmO9VtiFMAauD0/c=)
                          5: OuUlmrN0axWfSqeYSWZ3VFyR9gQ.roa (hash: QKGtXpsKu8AS09muhwUu1IIbo7MS1z9kgfO0GKSJA9I=)
                          6: UgGCU0bNSuQOEElr01rlVK8sU_Q.roa (hash: AacHgDrHZ+OvhSoYCRcjSoSerNRKqDKHnF8VQ9u1BE8=)
                          7: Wp-glj4jLDxWifTRA7ilsUKXI0w.roa (hash: vAjHOys3Ggc83LnsEZEpKy5P5ZSFbz3QKqyxgLEsEXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 05:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ba:a2:2c:fe:d7:15:1f:d6:ac:73:7e:f8:21:8d:1c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f970049cba7f39aeed31d65313c7b953f3fda135
        Validity
            Not Before: Jun 12 07:00:50 2026 GMT
            Not After : Jun 13 07:00:50 2026 GMT
        Subject: CN=1ad40eafab94366c10d0d2b6536f351507c1ee86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:fb:27:ea:e2:d9:da:dc:f2:68:ee:bc:df:
                    63:30:8a:ef:ee:45:03:e3:ce:67:b2:64:39:ae:6c:
                    f3:10:57:bb:1c:db:75:87:09:28:5c:ab:e9:ed:96:
                    d8:94:27:b6:45:68:6a:4a:44:12:30:ad:d1:06:a4:
                    9b:f4:96:8d:55:4d:fa:09:11:06:cc:6d:c0:80:94:
                    ef:75:f5:8c:1c:39:40:cd:a7:7e:37:41:4c:15:e5:
                    21:98:5b:d9:30:8c:ea:bb:cc:8f:ca:cc:03:b6:e5:
                    fc:9c:e7:6f:e6:ba:f5:9f:e4:0d:ea:9f:61:8f:12:
                    60:fc:d9:30:cb:81:d9:39:89:5b:13:49:62:b7:3a:
                    89:dc:e6:74:13:d5:aa:8b:20:3a:0a:8e:ee:24:52:
                    90:bb:08:71:ba:93:f8:19:da:bf:85:02:39:ef:6a:
                    a9:e7:dd:a6:47:f3:2a:55:cb:d6:f3:dd:bb:b3:b7:
                    bf:60:fc:6e:30:3b:d7:39:90:6b:13:75:86:5a:8f:
                    56:c4:8a:85:4b:54:5d:31:0c:0d:b0:23:ac:4a:6d:
                    6b:bc:66:24:55:1b:9a:e8:15:4c:86:1d:13:28:31:
                    79:62:a4:99:ec:ac:b9:24:42:69:3d:b1:5e:35:f4:
                    e6:6a:5b:dd:ab:d1:fe:3e:48:6a:f8:9d:72:cd:9f:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D4:0E:AF:AB:94:36:6C:10:D0:D2:B6:53:6F:35:15:07:C1:EE:86
            X509v3 Authority Key Identifier:
                keyid:F9:70:04:9C:BA:7F:39:AE:ED:31:D6:53:13:C7:B9:53:F3:FD:A1:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/13f5f1-45b6-4bc1-b5a5-521fa41dfc96/1/1-XAEnLp_Oa7tMdZTE8e5U_P9oTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9c:04:f9:72:ea:d5:ac:7f:bd:08:08:93:71:b4:e3:32:e0:
         38:05:27:6c:cb:9b:6d:84:b9:99:a9:df:12:60:27:a7:82:42:
         f2:c0:7e:01:13:1e:b8:ab:67:73:05:9e:15:91:75:2e:cf:85:
         9d:11:ad:64:33:7c:99:70:04:99:74:48:ef:11:27:f4:17:b8:
         21:1f:d7:c3:36:a9:54:db:06:99:74:10:68:07:18:ea:40:0b:
         bd:35:8f:9a:1f:fc:0f:9d:1d:28:cf:72:94:b5:2f:30:56:e3:
         02:10:d5:74:07:05:10:55:3a:1b:2c:c1:1f:bf:e6:0a:12:1a:
         33:22:72:16:27:8a:a1:b8:28:0f:d5:06:ed:54:94:21:70:9f:
         91:49:02:0f:ee:01:50:49:24:15:f3:72:7c:3f:95:6f:81:51:
         10:21:30:60:94:6b:8a:a4:40:f6:6c:d4:49:ad:0e:d4:ad:4e:
         cb:a5:18:54:fd:92:c6:9a:27:c3:bb:94:f0:3f:ba:96:d6:e4:
         c1:19:d3:4f:3c:2f:c8:8e:a5:33:77:d9:e2:42:d9:27:c3:f2:
         39:86:4f:f8:cb:61:ff:f4:b1:88:52:f0:97:96:cb:ea:9c:e6:
         57:b1:a8:42:94:29:fe:06:7d:2e:fe:3e:49:55:0f:97:aa:42:
         b9:9b:20:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:50:22 2026 by rpki-client