Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File:                     1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier:          i4oQHVbYHqpzz4p5Pl6HCKAJRdH+t56+JbyeQVt8wcg=
Subject key identifier:   7B:CE:24:E6:7D:88:0E:38:AA:A4:B5:2C:51:EA:43:5F:F7:0B:03:D6
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer:       /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial:       01A00137F626FFD0FA1EB62BE2B169F931A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number:          1189
Signing time:             Fri 14 Aug 2026 17:00:39 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:39 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:39 +0000
Files and hashes:         1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: Hvyn+7wNMuSqZvwdVdB1RdriROnzERftK3lmex4s4O0=)
                          2: KFS9AT9Dh5IYqtvylPcHNAxeD1Q.roa (hash: aPsZ9SwAfwr9bP1Lvnapo0qJgXtXh+rAUimtLCb9z5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:f6:26:ff:d0:fa:1e:b6:2b:e2:b1:69:f9:31:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
        Validity
            Not Before: Aug 14 17:00:39 2026 GMT
            Not After : Aug 15 17:00:39 2026 GMT
        Subject: CN=7bce24e67d880e38aaa4b52c51ea435ff70b03d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ce:d3:cc:63:69:40:6d:08:4e:c3:dc:3a:c2:
                    e0:53:78:0e:6e:0f:57:ec:6d:93:92:1d:86:9d:b9:
                    7f:03:c9:20:d9:65:7a:71:02:07:e9:85:58:0a:fe:
                    84:bf:de:dd:e7:d7:7a:32:34:f0:89:29:97:54:1f:
                    ca:48:b4:46:21:bd:e4:1f:68:12:c2:58:99:a7:53:
                    75:eb:af:fc:50:a2:af:be:58:a5:0f:28:56:07:02:
                    31:7b:30:28:62:bf:cb:5d:4c:61:32:2d:de:67:37:
                    cc:6b:8c:c7:d3:3a:a1:4e:0b:e0:bb:13:95:5d:24:
                    a4:4c:ab:1a:9f:5b:f4:da:6f:b3:a5:86:5f:24:e4:
                    d4:c1:3c:b4:ef:eb:02:bd:a0:7c:ed:5b:d6:05:c3:
                    a3:6c:80:a9:65:30:c3:f9:56:69:c7:ba:24:e9:33:
                    7d:8a:17:c6:20:c1:09:cf:4e:33:0f:54:05:1d:cc:
                    12:e8:47:f7:29:8c:eb:41:d4:de:86:bd:28:31:0c:
                    4c:71:65:1f:2d:4e:3a:47:cd:e3:40:18:95:5c:09:
                    52:51:4e:b4:27:ff:ee:dc:fa:d7:c6:e5:21:cd:f3:
                    a3:46:76:ea:28:2c:7f:5f:05:0b:4b:60:bc:52:73:
                    1a:f0:23:9c:ff:8f:3e:a3:9c:df:69:c5:b5:f8:b2:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CE:24:E6:7D:88:0E:38:AA:A4:B5:2C:51:EA:43:5F:F7:0B:03:D6
            X509v3 Authority Key Identifier:
                keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:38:93:3e:bd:00:24:64:b3:51:5d:e4:e8:06:90:ee:40:32:
         e3:eb:9c:9f:01:0e:f8:02:60:b8:cc:35:46:51:0b:b9:14:e2:
         dc:8a:49:4f:54:e8:9e:85:bb:46:f4:a6:c9:6a:78:54:6d:95:
         ff:a7:41:f9:ee:c4:ac:7d:87:fd:21:b1:45:77:b4:a5:da:19:
         d0:75:d0:61:83:74:43:59:5c:66:4e:1a:b0:2a:6d:dd:b4:97:
         9d:c4:e1:5d:90:14:f3:fe:94:ac:d4:1c:7c:04:f3:1f:07:57:
         fd:5a:57:3f:c4:1e:ae:68:20:c5:a8:0c:58:15:36:18:e2:a9:
         f7:09:d4:ab:52:60:de:42:80:c2:46:ab:92:71:0c:a0:12:98:
         57:57:8c:25:67:9c:cb:fb:39:9c:8f:45:ee:dd:a5:bb:d6:95:
         bc:a3:75:ed:06:d9:e1:a0:91:ed:8c:a4:4b:6d:9a:f6:e6:0f:
         bb:d3:60:2b:d9:87:09:c6:fe:eb:c0:d5:92:c6:bf:e3:e9:86:
         1b:e2:d7:c8:41:c3:4d:bf:c0:d9:67:ac:e8:ed:cf:ae:e2:3d:
         d4:93:bf:f1:e3:ab:fe:9e:e9:0d:1c:5c:9a:74:b2:6f:23:04:
         40:02:56:f5:db:d7:e9:68:13:b1:ed:16:ed:40:f7:73:ad:4a:
         6d:90:49:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:50 2026 by rpki-client