Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
File:                     1-lolmC97dHESsP81jz0kpWLPz-w.mft (raw, json)
Hash identifier:          4gu4s31alSLnCkKqCpjfkFjQFahz0peHq6jVXZyeBck=
Subject key identifier:   05:4E:40:28:E7:CD:50:61:91:8F:A5:8C:E4:1F:94:A0:B0:51:FB:A8
Authority key identifier: FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC
Certificate issuer:       /CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
Certificate serial:       019DAC0D21C66B2AEDBA18112AB1FED38283
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
Manifest number:          0175
Signing time:             Mon 20 Apr 2026 18:00:34 +0000
Manifest this update:     Mon 20 Apr 2026 18:00:34 +0000
Manifest next update:     Tue 21 Apr 2026 18:00:34 +0000
Files and hashes:         1: 1-lolmC97dHESsP81jz0kpWLPz-w.crl (hash: H7oeifxacCvXF6Y+iLMeF9Vg0JToxFcw41zvcA7MVbU=)
                          2: iYN0utCjOjCIPINNJfjhuG0vjOg.roa (hash: 7Wnyb9CGOm4TN0ey7ufrrNiIF/X3LDz9AlFMHrkszjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Apr 2026 18:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ac:0d:21:c6:6b:2a:ed:ba:18:11:2a:b1:fe:d3:82:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa5a25982f7b747112b0ff358f3d24a562cfcfec
        Validity
            Not Before: Apr 20 18:00:34 2026 GMT
            Not After : Apr 21 18:00:34 2026 GMT
        Subject: CN=054e4028e7cd5061918fa58ce41f94a0b051fba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:81:91:ae:d1:fc:63:c6:28:0a:38:fc:a5:
                    3b:cb:8b:00:76:78:a2:2d:2a:1d:d7:dc:a2:c1:cd:
                    46:4d:a3:a1:23:d8:cd:40:0b:00:dd:b6:f1:4a:4e:
                    f7:1d:f2:b9:e7:66:5b:84:5d:fa:20:1f:72:2b:e0:
                    f8:81:a6:62:e5:cf:8b:f9:54:f1:63:67:6a:28:0e:
                    51:16:73:8b:50:9b:a1:99:ea:ae:2f:ff:4a:ce:dc:
                    73:25:21:d1:c4:89:3d:91:c0:cc:f9:ea:04:18:4e:
                    d2:53:90:4a:28:1f:86:4f:02:a8:91:73:7a:ad:e3:
                    32:97:37:21:8b:ba:ad:e5:bd:b0:b9:41:bc:56:00:
                    57:8a:18:48:50:04:27:13:cc:ac:c6:48:80:f5:c7:
                    77:90:4e:ab:26:84:c4:63:49:e3:53:0b:0e:7d:95:
                    6f:6b:06:e5:02:98:a0:1d:fb:bc:e8:d9:f5:d7:09:
                    e8:fd:a1:37:dd:c7:dd:bd:c6:de:5e:20:e1:3a:1a:
                    18:5c:0a:0b:7f:7a:35:d5:3b:5e:28:c7:60:a7:67:
                    cd:b4:f6:97:58:51:5b:03:5a:b7:b8:8f:a4:b6:aa:
                    8b:5e:11:fc:ab:0a:ca:65:1d:9e:d9:65:c0:e2:eb:
                    2d:7b:aa:f6:11:6c:ee:50:20:3a:c5:1b:db:5f:47:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:4E:40:28:E7:CD:50:61:91:8F:A5:8C:E4:1F:94:A0:B0:51:FB:A8
            X509v3 Authority Key Identifier:
                keyid:FA:5A:25:98:2F:7B:74:71:12:B0:FF:35:8F:3D:24:A5:62:CF:CF:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lolmC97dHESsP81jz0kpWLPz-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/76d7ae-de67-4a05-a71b-de774b0e31df/1/1-lolmC97dHESsP81jz0kpWLPz-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:c1:0d:44:59:64:70:bb:06:cf:c6:22:61:3a:cb:63:f5:
         4e:13:18:74:79:56:1d:77:f4:c9:d6:ce:26:56:fd:cf:fa:f5:
         8d:74:02:ad:1f:e4:ff:1a:69:a4:82:41:c2:10:2a:3b:44:71:
         77:49:f8:f3:21:42:fe:22:0a:81:a4:95:54:43:5a:c1:43:e2:
         0f:23:5e:48:1c:d5:ba:45:80:eb:72:6b:30:f3:3b:80:32:31:
         87:5f:a6:b7:09:34:3f:ac:4e:a2:36:59:a5:54:12:78:e9:46:
         75:e4:67:c3:95:46:36:79:dd:67:82:a8:08:c0:6c:03:4f:a9:
         6c:8b:be:53:ab:4e:f6:ff:52:ec:be:2a:c8:04:44:0d:80:1b:
         00:81:1f:78:a9:ef:81:eb:26:67:12:13:62:f0:03:84:13:7e:
         c3:bf:9a:0e:e1:8d:eb:38:54:be:67:4e:65:15:85:a8:17:51:
         17:10:8b:00:4c:97:f1:06:59:c5:33:4c:47:57:c0:80:c9:aa:
         92:b4:a4:f2:d1:67:d9:d3:f5:6e:06:52:d1:d5:63:04:a1:65:
         aa:f0:d7:e5:d6:24:64:76:0b:84:57:e6:ff:f3:74:e5:0d:a6:
         d9:ba:84:48:9a:07:41:cf:3a:09:d6:e2:dd:99:99:4a:2e:64:
         46:7c:9d:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 01:52:16 2026 by rpki-client