Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
File:                     S1KaTSL67yMTXW7_iRImZiPEklU.mft (raw, json)
Hash identifier:          Bu3/0Gk5LYk1b7Mx1SQDfBupWRqTmVv6V0+HGO/A2ao=
Subject key identifier:   80:7F:1F:4E:8E:B7:4E:57:41:F0:EC:BE:52:A8:A7:0E:43:B6:B0:14
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Certificate issuer:       /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial:       01A00213E1B865AE55E9B586D1C665062E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
Manifest number:          1A1F
Signing time:             Fri 14 Aug 2026 21:00:52 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:52 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:52 +0000
Files and hashes:         1: 8JTBQJyqUxIFa2P7t0W6NdfJ7CI.roa (hash: bvR7uwT6CerdByDmx1xzty2bHjJMPuqJsJHdeopKM9Y=)
                          2: IAcgHGi2lFpmozwldAdI6otCCf8.roa (hash: BMvZpTPd4wPptVWAuFWagP2MsiisY343W0Dlxwe5jk8=)
                          3: PGdzQPbVNWOAAR-X1BVXtgxofwg.roa (hash: dnLVHCkUAzZBzW5KJgWgdjrJ3f9Bmjq6lfV0HEQ9YaI=)
                          4: S1KaTSL67yMTXW7_iRImZiPEklU.crl (hash: aJAygtS4GOVIAUvXlBXLZagPUVaQEyJLbhaM315OLcI=)
                          5: UeKejWBuRMBTzBVkphHiwU6F1G4.roa (hash: 4Va/WDHUaUbqMZBtGC/uemvvWN5D2KRgvotniu/r8z8=)
                          6: bspFglFUNNfB3BfctmrtidkBJJ0.roa (hash: b4qzed65X33LBM+fRSUuJ6eNd3msfTHJCKt5GOuVSMY=)
                          7: yf5DE453VSZNaMBDFecfcs8_ti8.roa (hash: /6VfJrCwSdAcWd7VeCBpZye97Dzq0Ew18Tz6xEOZHdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:e1:b8:65:ae:55:e9:b5:86:d1:c6:65:06:2e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
        Validity
            Not Before: Aug 14 21:00:52 2026 GMT
            Not After : Aug 15 21:00:52 2026 GMT
        Subject: CN=807f1f4e8eb74e5741f0ecbe52a8a70e43b6b014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:8d:b6:21:cc:2b:68:52:8f:ba:ad:09:76:
                    a2:e6:3b:84:35:81:c0:34:85:2d:9b:b8:50:7c:3b:
                    27:c7:94:9c:8b:e5:77:4a:44:ff:65:b2:e7:4b:1a:
                    29:7e:01:b7:7c:34:ec:9d:5a:1c:17:77:b4:19:b7:
                    4f:15:9a:77:bc:3b:82:bf:99:6c:ff:6f:14:14:ea:
                    43:22:af:d2:f2:f4:8d:c2:1f:88:6a:c2:8d:4c:9e:
                    05:4d:fd:dd:79:f0:a3:58:83:57:81:c9:47:9f:a5:
                    1d:cc:69:ae:0d:0d:27:36:8a:3f:d1:a2:8a:5a:91:
                    72:86:df:98:54:ce:38:26:3b:3d:88:81:48:ef:7c:
                    1e:c3:66:92:97:a0:75:a3:36:05:b0:1a:d8:7b:83:
                    15:67:82:e0:c4:b3:39:0e:13:a7:5f:da:ed:1e:cd:
                    42:01:e0:ce:76:ee:0c:24:6d:db:39:81:85:c2:74:
                    58:bb:b6:8f:48:0e:05:a6:e6:67:8b:26:e9:d8:53:
                    00:a2:e5:31:e6:38:bf:9e:4a:15:26:a8:13:56:1e:
                    83:7b:24:58:10:84:55:2a:f1:fa:2a:01:49:1d:49:
                    e7:81:c7:94:15:e3:87:fd:a5:c2:eb:30:4f:62:8e:
                    97:af:e4:e2:01:74:19:a4:63:fa:e0:a7:ba:82:e3:
                    0b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:7F:1F:4E:8E:B7:4E:57:41:F0:EC:BE:52:A8:A7:0E:43:B6:B0:14
            X509v3 Authority Key Identifier:
                keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:75:e9:df:13:41:ce:1b:73:c5:da:c0:d0:69:60:44:b7:c0:
         bb:11:c7:3c:45:1c:ca:04:be:70:15:fb:c7:ff:6a:7a:18:16:
         6f:65:59:5f:e5:67:02:09:f9:36:81:d3:6f:f5:ad:9e:79:fc:
         f0:0f:bb:f0:a6:99:34:aa:a7:a2:f4:70:dc:1f:af:52:8e:88:
         60:93:a0:ae:29:42:7d:95:40:f0:1d:48:19:03:43:b1:a2:fb:
         33:ac:e9:6b:bf:f0:61:76:cf:d0:22:9d:76:cc:68:ac:64:77:
         16:c1:7e:66:5a:07:38:49:d2:74:47:aa:69:1b:b0:31:21:09:
         d9:af:38:c0:6f:1c:03:64:e8:54:7c:0a:18:0e:e4:04:29:62:
         4e:7a:8c:41:cb:2c:fe:fc:28:ca:36:33:1a:ad:e2:1a:40:d6:
         48:39:d5:cd:7a:00:b6:f9:61:d1:f1:96:bb:00:dd:13:72:64:
         89:78:ff:3d:7e:5b:c9:32:4c:6e:2e:23:5e:d8:5c:fb:ae:53:
         f5:6b:4a:7c:73:d2:b0:c1:fb:df:29:3c:5e:53:5d:c5:87:54:
         45:95:ff:5a:a6:71:f5:ed:8d:5e:dd:ee:0e:1e:2b:b4:ac:33:
         cc:7a:f7:f5:dd:ae:cb:21:8b:c8:3c:b9:4c:68:e5:74:22:c2:
         e3:ab:fc:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE+G4Za5V6bWG0cZlBi4YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTI5YTRkMjJmYWVmMjMxMzVkNmVmZjg5MTIyNjY2MjNj
NDkyNTUwHhcNMjYwODE0MjEwMDUyWhcNMjYwODE1MjEwMDUyWjAzMTEwLwYDVQQD
Eyg4MDdmMWY0ZThlYjc0ZTU3NDFmMGVjYmU1MmE4YTcwZTQzYjZiMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFuNtiHMK2hSj7qtCXai5juENYHA
NIUtm7hQfDsnx5Sci+V3SkT/ZbLnSxopfgG3fDTsnVocF3e0GbdPFZp3vDuCv5ls
/28UFOpDIq/S8vSNwh+IasKNTJ4FTf3defCjWINXgclHn6UdzGmuDQ0nNoo/0aKK
WpFyht+YVM44Jjs9iIFI73wew2aSl6B1ozYFsBrYe4MVZ4LgxLM5DhOnX9rtHs1C
AeDOdu4MJG3bOYGFwnRYu7aPSA4FpuZniybp2FMAouUx5ji/nkoVJqgTVh6DeyRY
EIRVKvH6KgFJHUnngceUFeOH/aXC6zBPYo6Xr+TiAXQZpGP64Ke6guML/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB/H06Ot05XQfDsvlKopw5DtrAUMB8GA1UdIwQY
MBaAFEtSmk0i+u8jE11u/4kSJmYjxJJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTct
MzZhZTc2ZWU5ODNlLzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTctMzZhZTc2ZWU5ODNl
LzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuXXp3xNB
zhtzxdrA0GlgRLfAuxHHPEUcygS+cBX7x/9qehgWb2VZX+VnAgn5NoHTb/Wtnnn8
8A+78KaZNKqnovRw3B+vUo6IYJOgrilCfZVA8B1IGQNDsaL7M6zpa7/wYXbP0CKd
dsxorGR3FsF+ZloHOEnSdEeqaRuwMSEJ2a84wG8cA2ToVHwKGA7kBCliTnqMQcss
/vwoyjYzGq3iGkDWSDnVzXoAtvlh0fGWuwDdE3JkiXj/PX5byTJMbi4jXthc+65T
9WtKfHPSsMH73yk8XlNdxYdURZX/WqZx9e2NXt3uDh4rtKwzzHr39d2uyyGLyDy5
TGjldCLC46v8uQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:02 2026 by rpki-client