Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File:                     1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier:          eCE2YyqCvp+ylCgrwW6C2G4eRni1/sMtgq7s0rwdDpo=
Subject key identifier:   A1:A8:37:5D:45:38:81:D8:ED:E8:6B:E4:A6:46:76:B9:C1:8B:E8:AD
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer:       /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial:       01A001388FA05B265E2B23600584A0F95494
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number:          1498
Signing time:             Fri 14 Aug 2026 17:01:18 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:18 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:18 +0000
Files and hashes:         1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: HegiHA+S76itC0RCQjMFxYrSFm6GonxEZopC7kV2XUY=)
                          2: q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa (hash: k/Wh/c00eZEFbymGhdaEUynKj87Lx/1rWZSCYQ9Ry88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:8f:a0:5b:26:5e:2b:23:60:05:84:a0:f9:54:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
        Validity
            Not Before: Aug 14 17:01:18 2026 GMT
            Not After : Aug 15 17:01:18 2026 GMT
        Subject: CN=a1a8375d453881d8ede86be4a64676b9c18be8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:37:89:5f:24:fd:6d:a7:d9:6c:90:40:90:81:
                    0c:e1:59:f2:45:b7:87:37:f0:59:30:24:36:46:e7:
                    b8:01:2b:59:c2:dc:a5:90:82:a1:27:1d:9c:e6:ea:
                    02:e1:c8:9e:87:2e:ac:89:1e:e5:27:ad:47:09:45:
                    13:37:a1:3d:a1:29:b8:a4:c7:7d:78:0a:b3:6c:63:
                    ff:e9:ee:36:ce:a8:9a:8b:63:24:19:8a:20:3d:5e:
                    a4:1f:e0:9a:de:05:1a:7e:70:d9:26:e6:43:03:b6:
                    c6:63:9a:c6:36:cf:50:16:65:6f:84:04:d9:86:35:
                    8c:7c:35:61:d7:77:db:c3:83:25:76:3a:62:51:ef:
                    fa:38:ae:c4:f1:8f:9a:04:78:ce:09:4a:5b:7f:51:
                    31:ff:67:1a:66:d4:7c:32:a0:06:8a:f8:af:4e:8c:
                    cc:3b:75:7c:0f:10:11:12:4b:97:ac:70:c8:11:37:
                    26:4f:f3:09:af:91:11:a3:41:a0:c4:9a:98:3e:f7:
                    b2:1e:f3:a6:b9:8c:cd:98:1d:f6:ff:ef:54:fc:b1:
                    7c:b4:34:66:fb:38:c4:e3:6b:e6:31:67:1d:6f:bb:
                    69:4b:8c:02:de:50:69:f0:96:bc:f1:64:05:f9:85:
                    bd:46:b2:df:24:4e:be:77:20:43:76:a2:ac:d3:e9:
                    0f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A8:37:5D:45:38:81:D8:ED:E8:6B:E4:A6:46:76:B9:C1:8B:E8:AD
            X509v3 Authority Key Identifier:
                keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:aa:e9:c9:a6:05:30:76:88:5f:e3:89:f4:09:e6:b7:5e:24:
         45:16:bc:ef:22:22:50:7c:78:ec:0c:0a:86:1c:a4:2f:84:16:
         29:39:45:69:ec:cc:f8:f5:2e:28:21:88:5c:79:db:d3:18:a1:
         21:61:a0:f4:cd:6b:38:4b:a1:99:cd:cc:b8:4c:05:d9:9e:bd:
         f9:55:9b:e2:a6:18:14:dd:ec:fc:5d:fc:62:9e:ec:57:39:35:
         d7:b7:18:fc:79:c0:58:3e:3a:1f:5a:b5:b5:33:6b:41:8e:3f:
         6d:89:4f:15:74:3b:6a:53:8d:e8:69:8f:b5:d8:56:b2:77:76:
         7c:e0:cf:b6:59:43:ec:cb:8a:2d:c3:b1:f6:46:55:e3:f4:63:
         da:38:5f:76:23:6b:64:1e:33:95:15:96:dd:cd:8e:9a:28:8f:
         c3:82:bd:23:1b:25:1c:c5:ce:d8:59:dd:01:34:8c:67:53:56:
         93:41:3f:49:78:7a:4a:bf:03:f1:c2:01:4d:0a:75:b2:b9:a0:
         8e:f3:0c:37:83:4c:c4:f7:4e:e5:ac:83:71:56:f3:d3:cd:a0:
         a0:95:cd:98:a9:11:7c:69:77:33:4b:92:e9:f3:95:c6:fe:f8:
         13:66:f4:8a:f8:84:ec:43:dc:47:ff:42:01:63:a3:1d:26:68:
         01:b6:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:32:07 2026 by rpki-client