Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          CXWDJCjP62a7OyZEtQXDgvD69GuqKLtqa5uAR/hwEUk=
Subject key identifier:   54:26:E1:3F:20:C6:98:C6:F5:D3:81:13:DF:E6:B3:DD:2E:6A:72:BA
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       019E9BF2D3C949443E5270C02534E8A2C693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          194A
Signing time:             Sat 06 Jun 2026 08:00:42 +0000
Manifest this update:     Sat 06 Jun 2026 08:00:42 +0000
Manifest next update:     Sun 07 Jun 2026 08:00:42 +0000
Files and hashes:         1: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: JdcUvwUGlqR0UbfNcWqScXvB+jzeYoTz0fXVV8U1vlI=)
                          2: Citg7qmp5SFz0X_DakT70Agy58A.roa (hash: suNo82Y9tPBibDI6nJIgvkFyxyp4RTbZM/6snuEOgFo=)
                          3: E6-KUD7DRI_0w_-xYTRlsYMzOAY.roa (hash: fNcbRaDAR/ECLiVIt5ZdhOFIfcxlGWzAHM9UPEfw0U0=)
                          4: X0ur3LhvwaGbR0SSZ5X6a-FSnjA.roa (hash: IToaXqDk0KkIsGrmapc6E0mxayDrae727bDiBQN47vQ=)
                          5: pgKqZWjn8bJ132yin6103Bat9Vc.roa (hash: M83Fju8fgneb3OZm/YtaPkJlVKYgDt3W/DPj1+xb3L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:f2:d3:c9:49:44:3e:52:70:c0:25:34:e8:a2:c6:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: Jun  6 08:00:42 2026 GMT
            Not After : Jun  7 08:00:42 2026 GMT
        Subject: CN=5426e13f20c698c6f5d38113dfe6b3dd2e6a72ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b4:47:12:bc:c8:b9:eb:df:d7:bf:c1:c1:37:
                    27:14:88:9e:2d:a5:4f:31:15:ef:80:33:9e:86:3a:
                    af:d1:0e:63:03:8d:ac:58:34:f5:ef:21:f8:6b:03:
                    86:47:29:dd:6f:bf:0e:84:ae:6b:fa:42:72:b5:34:
                    c8:64:26:b8:b3:c0:c1:90:63:3f:74:45:b1:42:d2:
                    59:d6:42:0e:f3:84:67:c0:26:50:a0:4d:01:5b:da:
                    25:ed:38:c6:5c:fa:3f:6c:b7:8f:8c:47:b3:d0:af:
                    34:4f:25:c8:0a:8e:70:b9:04:6a:39:dd:78:72:04:
                    d9:10:f8:f8:8b:53:cb:9f:34:4e:32:95:23:22:91:
                    c0:c4:8f:ae:a7:35:ce:a3:7e:30:23:83:7e:9e:63:
                    44:d7:f2:b5:68:81:57:b1:c2:d3:7d:48:c3:6c:93:
                    da:08:b9:f5:e2:37:0b:5a:9f:a9:9c:99:f8:13:a6:
                    ff:d6:1a:12:20:30:84:82:cc:65:9d:8f:c2:1d:fc:
                    4d:1a:f1:3f:57:d5:a4:0a:b2:9f:20:6e:72:f8:6f:
                    58:30:03:56:f4:8c:5f:8f:84:b4:fd:d6:25:7d:f3:
                    03:50:c2:55:27:5c:a0:6b:2a:a4:73:3d:12:c7:3f:
                    1f:f3:97:09:7b:7a:2c:d3:57:0b:b5:14:7a:25:36:
                    e7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:26:E1:3F:20:C6:98:C6:F5:D3:81:13:DF:E6:B3:DD:2E:6A:72:BA
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ee:6e:71:4a:8e:52:2c:a6:26:89:27:a6:1c:7f:db:b5:4d:
         c3:65:f7:7a:52:34:ec:7a:25:57:95:cc:7d:5d:ce:fb:a1:dc:
         5e:34:ae:47:da:e5:7b:28:25:05:ff:4f:4b:ff:20:c7:85:5d:
         77:95:bc:ea:f6:69:57:5a:d6:22:67:a6:2b:2f:53:e2:a3:66:
         0a:6d:68:a8:b1:6e:03:6d:e5:91:88:ad:5f:4e:ab:05:ac:fc:
         5b:ea:44:ec:8e:ec:85:2f:82:de:e5:da:f9:3c:b4:89:20:24:
         1a:76:e2:9e:3c:f8:d8:ca:99:56:3e:ea:0c:79:92:c4:54:e0:
         d1:a7:82:d5:fa:7e:15:9e:c5:c0:37:97:58:0d:ed:f7:46:e4:
         2f:03:1a:0c:ca:9b:93:b2:90:17:a3:93:ce:c8:2b:3f:1f:66:
         a5:ae:7e:cd:d9:a8:7a:6f:da:40:6a:35:40:7b:3f:53:40:ce:
         57:06:53:2e:a0:d1:32:b1:4c:63:a3:62:1f:c8:d2:0f:62:58:
         2d:d9:26:8c:db:f8:63:f0:66:c2:93:73:23:e6:a7:fa:00:e8:
         06:a8:0b:0f:d0:40:3a:56:8c:e1:d4:ea:3e:0e:6d:d1:ad:1a:
         a4:02:08:54:48:ec:22:ac:b2:da:2e:25:f8:b0:b0:1f:82:90:
         eb:11:5b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:12:02 2026 by rpki-client