Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          Qm5PQn4N2Jqg2wPpWEdrBste1c4/T/rDzOxyFu7QkDI=
Subject key identifier:   1C:DB:71:77:1E:28:E4:40:7C:51:B0:C0:81:75:9B:0E:0C:90:3B:27
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       019CC89A09537E25880AFD86E0743DD2789D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          1858
Signing time:             Sat 07 Mar 2026 14:01:03 +0000
Manifest this update:     Sat 07 Mar 2026 14:01:03 +0000
Manifest next update:     Sun 08 Mar 2026 14:01:03 +0000
Files and hashes:         1: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: Y3+juf9ofluA9fTgb95Tj/gOAswYX2c5/Ya4mIfTjp0=)
                          2: Citg7qmp5SFz0X_DakT70Agy58A.roa (hash: suNo82Y9tPBibDI6nJIgvkFyxyp4RTbZM/6snuEOgFo=)
                          3: E6-KUD7DRI_0w_-xYTRlsYMzOAY.roa (hash: fNcbRaDAR/ECLiVIt5ZdhOFIfcxlGWzAHM9UPEfw0U0=)
                          4: X0ur3LhvwaGbR0SSZ5X6a-FSnjA.roa (hash: IToaXqDk0KkIsGrmapc6E0mxayDrae727bDiBQN47vQ=)
                          5: pgKqZWjn8bJ132yin6103Bat9Vc.roa (hash: M83Fju8fgneb3OZm/YtaPkJlVKYgDt3W/DPj1+xb3L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Mar 2026 10:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:c8:9a:09:53:7e:25:88:0a:fd:86:e0:74:3d:d2:78:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: Mar  7 14:01:03 2026 GMT
            Not After : Mar  8 14:01:03 2026 GMT
        Subject: CN=1cdb71771e28e4407c51b0c081759b0e0c903b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:bf:f2:ca:4b:2e:51:f0:80:0f:c0:6c:62:
                    25:65:04:08:d3:d6:6a:a6:3b:4d:dd:b0:e9:40:e2:
                    ea:9b:81:2b:f7:ab:ef:73:a6:0d:97:72:78:25:10:
                    3e:5e:d1:81:51:4f:d8:d5:f0:bd:bb:71:f8:64:bd:
                    73:c5:29:9e:b7:d7:8a:99:2c:b7:68:ef:0a:83:96:
                    20:93:d2:c7:af:8f:27:bc:12:25:89:c7:18:89:a3:
                    bb:4e:7b:d8:2c:ff:28:71:03:09:ab:f1:48:8c:82:
                    d6:32:c1:f5:8f:4a:c8:67:7b:28:dd:3e:05:9d:ac:
                    1b:7b:6e:de:bf:be:fc:a4:f2:d3:af:2b:78:7e:98:
                    4e:55:dc:11:15:78:c6:c9:a6:ad:07:3f:6a:0e:8e:
                    a3:bf:74:63:eb:83:fa:52:75:cd:47:62:7c:9c:a9:
                    99:98:4a:8a:85:d7:36:44:18:af:9c:98:e9:27:de:
                    87:55:c4:5c:40:c2:68:07:24:01:51:f3:28:7e:31:
                    47:e4:d9:16:c9:19:76:dc:41:18:ab:9e:75:91:8e:
                    ae:92:dc:16:b1:99:03:f0:41:64:78:e8:63:31:5c:
                    a4:aa:a7:1c:db:3f:d0:ff:45:c7:cc:95:aa:ca:56:
                    2b:8a:88:a1:10:5b:1d:53:8f:ee:99:99:ca:2b:de:
                    2c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DB:71:77:1E:28:E4:40:7C:51:B0:C0:81:75:9B:0E:0C:90:3B:27
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:a4:80:55:f2:d4:b1:28:e6:12:45:9e:10:0e:92:c6:ec:
         d3:ff:a8:4b:de:a1:59:77:d0:a3:18:83:cd:7e:eb:96:0e:6c:
         45:29:ea:c6:9a:01:97:41:62:a4:40:31:07:fb:b2:77:ca:76:
         bf:37:51:23:ff:73:dd:64:e4:de:7c:28:45:cc:58:45:90:e4:
         cd:e1:2d:38:ba:9d:9a:4e:ba:33:c3:10:8d:95:94:44:71:72:
         8c:bd:f1:f6:2d:2e:28:96:e9:84:54:a6:d3:5f:02:85:1e:3c:
         3e:5a:37:98:a4:4e:9e:01:4f:03:d4:7c:70:37:b2:d0:85:cf:
         43:ca:56:18:c8:9b:17:8c:51:1b:56:4d:35:9d:84:f8:84:e0:
         6d:f0:29:8b:c1:62:40:e7:4f:03:21:8d:86:c6:30:75:5b:21:
         8c:d3:40:31:bc:d8:99:02:fe:03:61:4d:64:50:21:1d:bd:12:
         54:81:6a:de:4d:59:69:1f:92:31:37:ee:39:d5:fc:50:c3:a8:
         4e:52:c0:d2:61:90:a0:42:67:cc:d8:cb:da:76:ec:00:75:5f:
         15:33:3d:53:b1:29:0f:cd:c7:9c:c7:f0:43:c5:3e:21:b6:2f:
         87:54:42:12:0d:4c:e7:80:ae:dd:62:48:1e:77:f5:a6:84:35:
         47:3d:b7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:16:31 2026 by rpki-client