Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
File:                     1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft (raw, json)
Hash identifier:          h9UxiYL8cpTfMMO58zStaAwEa3hJzAiL23Kq37oygF8=
Subject key identifier:   70:FE:CB:7B:CB:80:4F:FD:CD:C7:9A:A6:ED:18:0C:2A:87:A1:7C:07
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Certificate issuer:       /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial:       019E2FCDBDA2529766EB457FAF8835E84E4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
Manifest number:          1098
Signing time:             Sat 16 May 2026 08:01:12 +0000
Manifest this update:     Sat 16 May 2026 08:01:12 +0000
Manifest next update:     Sun 17 May 2026 08:01:12 +0000
Files and hashes:         1: 1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl (hash: vd7HL3S3vGVILeBIC2uSQ8ekUMNJqCd8h1WKtamMVPM=)
                          2: KFS9AT9Dh5IYqtvylPcHNAxeD1Q.roa (hash: aPsZ9SwAfwr9bP1Lvnapo0qJgXtXh+rAUimtLCb9z5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:bd:a2:52:97:66:eb:45:7f:af:88:35:e8:4e:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
        Validity
            Not Before: May 16 08:01:12 2026 GMT
            Not After : May 17 08:01:12 2026 GMT
        Subject: CN=70fecb7bcb804ffdcdc79aa6ed180c2a87a17c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2a:99:6f:e9:de:8d:5e:70:f5:47:cc:75:26:
                    8a:ec:c5:b4:bf:ed:5d:90:62:f3:50:73:1f:16:8f:
                    1f:03:16:e9:ed:25:af:74:04:86:54:7f:aa:a3:89:
                    29:21:06:67:e8:9d:d3:1b:fa:f9:0f:a5:63:a8:da:
                    ad:bc:7a:7c:4a:83:e0:28:19:34:47:16:dd:94:95:
                    e9:39:52:0e:bd:ad:ab:a1:07:13:95:5a:27:5f:55:
                    2f:64:b5:94:87:21:3d:ad:8e:16:30:5e:da:75:f0:
                    24:7a:98:a6:61:9b:d8:c2:a3:b5:37:8f:f1:5c:56:
                    80:c3:51:10:60:e1:e5:5f:41:35:29:5e:29:cf:63:
                    b0:bb:ae:4d:06:65:9d:a5:39:76:85:e5:f6:e9:e6:
                    97:aa:f0:19:a7:e4:85:f3:7c:63:f2:b5:db:ac:a6:
                    b6:d3:e3:63:39:2b:89:cf:5e:89:b6:ce:da:a0:d2:
                    84:9f:ad:f2:ee:e7:86:12:4b:33:20:57:0e:bb:bb:
                    15:7d:49:a2:35:e3:14:c6:2b:79:3f:08:ce:99:74:
                    51:ac:3c:71:55:13:b3:8a:a7:b0:9f:21:ba:d9:24:
                    9e:17:5b:00:5a:8d:23:7a:cb:e7:d2:12:98:66:6b:
                    bb:8a:bc:77:70:64:03:5c:d3:7d:df:4f:bb:77:85:
                    44:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FE:CB:7B:CB:80:4F:FD:CD:C7:9A:A6:ED:18:0C:2A:87:A1:7C:07
            X509v3 Authority Key Identifier:
                keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:dc:3a:84:a5:7d:b8:9c:e5:4a:01:37:16:66:35:3e:96:d8:
         67:ad:b6:9e:74:ff:9d:e9:3e:04:f6:34:b4:35:56:f3:de:8d:
         c7:45:44:a9:f1:9f:04:67:60:bd:15:3e:e2:b7:32:0f:80:b1:
         68:33:e4:1a:ac:3e:27:3f:57:e8:22:2c:a3:6b:88:a8:8b:b0:
         ec:d1:e5:ae:5f:0a:2a:7f:11:18:61:69:33:88:84:25:8d:00:
         0b:58:76:da:51:ab:f7:a6:28:2e:58:71:05:5c:68:1e:c3:2f:
         07:91:05:3a:5e:6e:64:00:be:81:a5:6c:79:8c:2f:99:5f:52:
         1a:7d:df:40:6a:e8:8e:74:18:ca:14:35:35:0f:d2:0d:b5:e2:
         43:dc:e7:e3:06:8e:71:1d:fc:63:0d:0a:90:0b:85:65:5a:4d:
         fc:b1:c2:e8:18:49:27:21:8f:23:a3:e3:a5:fd:9b:a1:e6:96:
         38:26:fd:d5:3d:6f:bc:7d:19:bc:8b:94:7e:18:30:3e:ad:5d:
         cb:ef:4f:0c:42:56:c8:35:6e:f9:8c:8f:76:f0:df:cc:64:bd:
         6a:66:7f:03:50:1d:ed:6e:eb:e2:73:eb:20:a8:ce:7b:bd:39:
         dd:23:38:b2:35:0b:aa:e1:81:82:1b:76:bd:41:15:af:27:9d:
         0e:46:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:55 2026 by rpki-client