Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
File:                     1R5nmbxcooWjdjcvC2NF3_yHuMA.mft (raw, json)
Hash identifier:          Rh3lBn9WcmUv1wan9lAffN6mJ8r889++0X1yghwqGzI=
Subject key identifier:   62:CA:33:BF:C9:24:C8:5B:29:59:6F:F9:24:4D:25:C2:F0:D3:48:51
Authority key identifier: D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0
Certificate issuer:       /CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
Certificate serial:       01A00137CA329D454765549E4F7B53821832
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
Manifest number:          1872
Signing time:             Fri 14 Aug 2026 17:00:28 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:28 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:28 +0000
Files and hashes:         1: 1R5nmbxcooWjdjcvC2NF3_yHuMA.crl (hash: BTHf+b+sKhlVvrWANBwfEfo3GpyXXgufqkKqgH3J5T8=)
                          2: GllxanRi9edQc4SoJ1p-sRQjjuU.roa (hash: Om+DeQOxMRS5RnhUZBxqORnDtsjXB3ZQzZG6mlBEotI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:ca:32:9d:45:47:65:54:9e:4f:7b:53:82:18:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51e6799bc5ca285a376372f0b6345dffc87b8c0
        Validity
            Not Before: Aug 14 17:00:28 2026 GMT
            Not After : Aug 15 17:00:28 2026 GMT
        Subject: CN=62ca33bfc924c85b29596ff9244d25c2f0d34851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:50:ae:7b:e5:a2:28:2b:2e:67:0e:a1:59:14:
                    62:cf:45:53:3f:ab:54:04:8f:14:c1:e7:f6:5d:45:
                    48:f4:8f:de:0b:52:9b:c6:55:da:e1:3d:60:81:79:
                    96:74:4e:b3:d9:db:e8:35:32:62:67:ad:29:4e:32:
                    21:22:b7:23:64:af:e4:41:39:29:f4:ba:fa:f2:3b:
                    b5:e4:7e:a7:f5:85:71:03:af:d2:ac:55:17:96:2f:
                    02:95:7e:27:3d:da:2d:91:41:08:75:31:49:ba:8d:
                    d9:66:a2:dc:dc:57:86:85:6a:99:8e:ce:75:94:a0:
                    43:fd:e2:02:1f:04:b1:74:51:d2:1e:cb:66:94:fa:
                    d1:b8:e7:12:8c:90:44:1c:10:17:f2:2b:eb:04:4e:
                    6b:95:7c:d0:cf:02:5e:d0:14:3a:75:5a:ea:a2:be:
                    4f:9e:ba:62:b2:14:e3:5a:bd:42:47:98:95:55:d6:
                    aa:74:e3:44:11:b4:f2:25:55:74:ec:f6:40:cf:05:
                    31:5f:76:9a:10:1c:3e:75:77:51:7f:7e:37:19:ef:
                    2e:37:20:24:e0:a7:fd:be:c5:c4:98:9a:90:62:6e:
                    df:e2:36:02:75:13:48:2b:21:23:0e:3a:f7:ac:7d:
                    6c:e9:f3:59:83:48:58:07:50:7a:94:a3:97:52:34:
                    ad:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CA:33:BF:C9:24:C8:5B:29:59:6F:F9:24:4D:25:C2:F0:D3:48:51
            X509v3 Authority Key Identifier:
                keyid:D5:1E:67:99:BC:5C:A2:85:A3:76:37:2F:0B:63:45:DF:FC:87:B8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1R5nmbxcooWjdjcvC2NF3_yHuMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fe36aa-a6ae-4063-b2fa-9ca251c0548b/1/1R5nmbxcooWjdjcvC2NF3_yHuMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:89:e4:8b:a8:20:f8:82:a0:2c:e0:e4:ec:2a:ee:1a:f0:db:
         10:4e:c9:f9:34:d1:01:14:3f:bb:2a:9e:50:6d:69:fd:29:56:
         5a:eb:70:a9:d4:01:52:98:93:26:e5:98:5d:31:cc:c7:e7:f3:
         ab:13:7f:0f:e4:63:1e:4d:c9:26:bb:17:f3:90:ed:91:8e:e5:
         01:72:db:ac:69:13:d4:36:07:cf:42:54:d7:61:0d:db:97:a8:
         e1:52:a7:6d:11:5f:07:4d:fc:84:41:3d:37:41:93:17:85:22:
         45:75:86:e3:a7:65:42:ba:9f:18:61:45:1f:90:c5:72:bc:6e:
         0e:f5:4f:a9:4c:18:7f:b9:2e:69:6e:0b:ad:d8:17:99:fe:72:
         3c:88:13:32:4a:39:e1:e4:8d:ec:d5:60:75:da:ff:50:90:39:
         22:65:0d:bd:b9:d4:b4:e4:d6:e4:6e:2f:64:9a:ef:38:f7:bc:
         c0:33:2a:bb:a7:ad:97:dd:72:cb:c2:35:ca:c8:8e:2a:33:05:
         ad:28:10:3d:2c:62:a5:93:81:f2:d2:92:2e:99:41:47:4e:83:
         b5:11:f4:d6:2e:c2:51:7a:fe:29:c9:12:52:8e:49:12:4b:b2:
         05:94:30:79:7d:d7:94:38:50:00:f7:36:d9:c7:2e:d2:df:c7:
         1e:e0:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:11 2026 by rpki-client