Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          1sBj6om5DIAuFdqgsHZgdE/UKUt0OrdoFlG8/sHKTJo=
Subject key identifier:   E2:D4:02:6E:23:5F:79:77:6E:64:3D:9F:FC:C7:30:D8:A6:9B:E6:16
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       019CABA2142FDE050FAD58CEFD2B1BB5A979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          1849
Signing time:             Sun 01 Mar 2026 23:00:51 +0000
Manifest this update:     Sun 01 Mar 2026 23:00:51 +0000
Manifest next update:     Mon 02 Mar 2026 23:00:51 +0000
Files and hashes:         1: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: pyy/CaFwImWhyyftsAWLl4RWeM7726fI2hvg3ZVHZBU=)
                          2: Citg7qmp5SFz0X_DakT70Agy58A.roa (hash: suNo82Y9tPBibDI6nJIgvkFyxyp4RTbZM/6snuEOgFo=)
                          3: E6-KUD7DRI_0w_-xYTRlsYMzOAY.roa (hash: fNcbRaDAR/ECLiVIt5ZdhOFIfcxlGWzAHM9UPEfw0U0=)
                          4: X0ur3LhvwaGbR0SSZ5X6a-FSnjA.roa (hash: IToaXqDk0KkIsGrmapc6E0mxayDrae727bDiBQN47vQ=)
                          5: pgKqZWjn8bJ132yin6103Bat9Vc.roa (hash: M83Fju8fgneb3OZm/YtaPkJlVKYgDt3W/DPj1+xb3L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:a2:14:2f:de:05:0f:ad:58:ce:fd:2b:1b:b5:a9:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: Mar  1 23:00:51 2026 GMT
            Not After : Mar  2 23:00:51 2026 GMT
        Subject: CN=e2d4026e235f79776e643d9ffcc730d8a69be616
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:14:d1:00:8d:72:ec:5b:06:e6:1e:ef:21:e3:
                    ab:30:2e:65:94:08:5f:c8:a6:bb:81:f3:83:99:30:
                    9b:f2:d7:d1:df:e1:02:48:c8:42:98:56:f0:bd:ee:
                    d0:a5:65:c8:d0:6f:56:d8:39:25:49:84:61:bf:69:
                    63:3a:18:24:b1:5b:23:dd:08:83:2e:1c:72:ae:4c:
                    e2:7b:f5:ae:e8:b7:6b:ec:89:56:2b:0f:77:96:f7:
                    ce:3d:a1:50:b7:03:be:05:f9:4a:bf:11:c4:fb:bc:
                    e0:39:91:f3:c0:66:de:53:a7:72:25:28:b6:60:9b:
                    42:27:52:a3:1f:85:17:96:c6:4d:eb:2a:41:7e:a2:
                    af:18:78:41:54:2a:95:e7:4b:c3:50:34:72:b0:0b:
                    95:09:79:0b:18:ac:e3:db:68:97:2f:27:3e:8d:d0:
                    ab:67:9b:a3:01:66:77:f2:2a:30:ac:99:ad:a5:2b:
                    a9:66:e4:e1:3f:e5:14:fd:e7:02:93:b8:cf:4f:ce:
                    32:23:71:26:7c:52:74:4d:10:15:eb:3b:f2:bb:3e:
                    d7:7e:14:fd:43:fe:22:49:ac:89:2e:aa:6f:2d:d8:
                    b2:5d:c5:70:e4:d5:6e:f8:38:1a:87:d0:42:20:23:
                    a7:24:20:ef:7c:16:c0:43:78:1e:f0:35:ae:18:c0:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:D4:02:6E:23:5F:79:77:6E:64:3D:9F:FC:C7:30:D8:A6:9B:E6:16
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:33:01:33:35:14:9b:6f:ba:9c:0b:db:e6:70:d1:1e:3c:44:
         ff:ec:5b:cd:ea:a9:96:62:0c:3d:bf:d4:4f:b7:93:9f:b0:15:
         cd:a1:bd:45:8b:75:af:d9:e3:e8:c5:0c:ca:34:fc:8e:eb:b1:
         cc:fe:ac:dc:48:45:e6:60:01:97:2e:70:73:1b:00:88:ad:9b:
         36:ac:05:20:5d:3f:17:04:b1:8d:11:b9:f4:5d:8f:1c:8d:81:
         5b:82:b4:19:ac:e5:29:04:ba:d8:8f:dd:bd:f5:b2:59:6c:68:
         3c:78:44:28:9b:95:3a:06:20:11:e6:ad:e8:2f:6e:40:1b:70:
         f0:15:31:3a:c2:42:93:a0:d8:dd:7c:ac:9f:72:49:30:0d:59:
         65:ad:28:37:42:5e:81:ac:62:c2:5a:c7:fb:74:f7:57:c9:49:
         a4:7d:7e:b4:74:66:b1:51:fd:92:21:ff:69:ec:3b:0d:bc:b1:
         60:8b:9f:76:a4:41:79:29:e5:42:41:6c:7e:5c:bf:0c:4b:ad:
         b2:92:44:7d:85:f1:4a:9e:b2:3c:5d:fe:c0:86:c5:b0:9d:82:
         b9:c3:78:d7:d4:6c:99:38:fd:24:54:74:a1:d9:b0:15:53:af:
         85:7e:a8:66:1b:e8:e6:aa:06:ae:1d:74:a4:ef:f5:85:ad:6c:
         e0:2c:bc:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:15 2026 by rpki-client