Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
File:                     1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft (raw, json)
Hash identifier:          Kx9t2XGmxxSGRUd5CIpPhYVStHEROe+rDfIfPQxGRwQ=
Subject key identifier:   8B:F3:7C:2E:14:E0:F1:94:61:D8:39:CB:56:CA:07:E9:AD:40:4B:8E
Authority key identifier: F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56
Certificate issuer:       /CN=f9951ba56329323b4c60f620d6a7391e707b5556
Certificate serial:       01A001DD6D4E2B052033473984E0FF2FA50B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
Manifest number:          1221
Signing time:             Fri 14 Aug 2026 20:01:23 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:23 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:23 +0000
Files and hashes:         1: 1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl (hash: 1rHOIxqm0firlMIEd7rZH53iMckt4F2pzsL1m/WlucU=)
                          2: 3KARvcQJLBK_AN72q-v-VXBedTc.roa (hash: QFK7Ue4or8LMr7VexDK6GWjCaMT28dD7LoXQN+qlc8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:6d:4e:2b:05:20:33:47:39:84:e0:ff:2f:a5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9951ba56329323b4c60f620d6a7391e707b5556
        Validity
            Not Before: Aug 14 20:01:23 2026 GMT
            Not After : Aug 15 20:01:23 2026 GMT
        Subject: CN=8bf37c2e14e0f19461d839cb56ca07e9ad404b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:be:52:fc:48:60:8a:b5:0c:fd:db:de:f0:3f:
                    41:06:40:b1:54:ed:82:bc:09:a1:e0:f4:db:91:d3:
                    a7:48:e3:f8:30:42:75:d5:80:49:b8:82:19:d5:31:
                    c4:86:1a:d8:92:8c:e1:de:85:ae:75:2f:b8:c0:48:
                    c6:6f:fc:41:30:52:fd:67:54:a4:83:f1:4c:ee:dc:
                    36:7f:ac:f5:71:a3:1a:15:b3:61:a0:8f:ce:35:55:
                    3f:c8:c8:78:f5:11:54:cf:29:d5:ed:7c:2f:4c:05:
                    5f:d5:54:89:83:f2:f0:f3:7e:19:94:14:af:c1:07:
                    eb:c5:aa:92:a2:c9:18:a2:70:4d:af:a0:ac:12:0e:
                    5e:00:64:9c:1a:af:bd:0d:62:37:c5:9a:29:e3:e3:
                    96:ec:fb:dd:10:4d:d6:04:22:86:12:39:8e:3a:72:
                    60:13:b5:c5:0d:eb:42:07:c9:a1:33:b0:b0:b4:db:
                    0d:fa:26:9e:48:93:05:c4:e8:8b:d9:bf:65:a4:67:
                    6f:0e:d5:20:a1:31:65:5b:a4:ed:52:86:2c:72:d7:
                    fe:43:36:d5:ee:29:32:c7:f0:61:28:c8:94:6c:e1:
                    0c:b8:08:1a:77:75:a3:24:98:f9:30:2e:bf:15:ff:
                    05:d6:e3:54:46:a0:ff:64:6c:79:85:c7:58:1e:3c:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:F3:7C:2E:14:E0:F1:94:61:D8:39:CB:56:CA:07:E9:AD:40:4B:8E
            X509v3 Authority Key Identifier:
                keyid:F9:95:1B:A5:63:29:32:3B:4C:60:F6:20:D6:A7:39:1E:70:7B:55:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8f5cbd-f539-4fff-b42f-4745d7cd93f1/1/1-ZUbpWMpMjtMYPYg1qc5HnB7VVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:ff:36:f6:9f:79:11:c9:73:c4:da:4c:b1:64:ba:ac:9f:
         5b:73:53:37:66:46:58:57:7c:03:e9:37:90:45:1b:7a:c1:bc:
         76:64:77:81:a2:b9:41:61:f3:f7:d6:53:35:7f:33:38:92:bf:
         e2:3d:bc:c0:54:21:53:72:7d:a8:22:8c:f5:1b:60:62:22:51:
         0a:a9:28:d7:c4:67:c3:34:0d:f7:bd:06:b4:26:2a:b9:d6:5d:
         b9:67:03:56:bc:33:c2:39:7f:73:d7:d7:9e:17:50:dc:01:32:
         5d:73:18:1e:72:18:e8:88:b1:fb:ba:a5:37:f0:43:de:4f:43:
         ef:e9:80:eb:42:c3:9a:b0:0d:e2:4a:6d:57:5e:66:cd:93:73:
         cf:1c:73:c6:6f:6d:58:9c:ce:a5:bc:bf:b8:af:2a:a1:12:8f:
         e6:54:04:d1:c2:68:91:fe:76:1a:7e:c3:ec:be:53:02:b8:7e:
         9b:68:19:e2:2e:d8:23:63:21:80:af:e1:f8:cc:df:e5:1b:22:
         94:24:2c:25:1e:8d:d5:47:cb:ef:2b:eb:55:55:20:d8:f0:c0:
         87:3d:c0:5e:25:14:fd:ef:ac:fb:72:66:c5:83:d1:47:2d:6b:
         e5:ad:30:22:07:7f:2d:2f:d0:a4:8e:32:cd:13:b3:e1:9b:66:
         49:f3:d8:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:50 2026 by rpki-client