Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          rYy07fka9eXApLxAGm7BFzKrwXj/skQtYnBen9OeFOo=
Subject key identifier:   7C:29:B2:56:FD:D1:8D:B9:8A:48:E0:6A:64:FB:70:9A:04:0A:32:5B
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       01A1DE70F9BFFD6814D96540340616E29C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          1AFB
Signing time:             Sun 15 Nov 2026 09:01:48 +0000
Manifest this update:     Sun 15 Nov 2026 09:01:48 +0000
Manifest next update:     Mon 16 Nov 2026 09:01:48 +0000
Files and hashes:         1: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: lp29xKpnloXNwgzsjAKZ0nfnbPd+s8XbLUAWnYXc29A=)
                          2: AlX1xy2wTjSnp3VHffeoAdWgrO0.roa (hash: 3qeZn7BmBW3ItYa3CR4Tpn6LYwKMLMwGEuP59PDDtPM=)
                          3: E6-KUD7DRI_0w_-xYTRlsYMzOAY.roa (hash: fNcbRaDAR/ECLiVIt5ZdhOFIfcxlGWzAHM9UPEfw0U0=)
                          4: X0ur3LhvwaGbR0SSZ5X6a-FSnjA.roa (hash: IToaXqDk0KkIsGrmapc6E0mxayDrae727bDiBQN47vQ=)
                          5: YpERScUPA382FK4NL5ibHCIFyDk.roa (hash: 3Ct/GtumEcJr0cG9KaRMbw6tKj791i3q2bQpl5vvwFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:70:f9:bf:fd:68:14:d9:65:40:34:06:16:e2:9c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: Nov 15 09:01:48 2026 GMT
            Not After : Nov 16 09:01:48 2026 GMT
        Subject: CN=7c29b256fdd18db98a48e06a64fb709a040a325b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a0:bb:c0:cb:d2:a2:d0:fd:40:56:74:88:c9:
                    fc:a6:73:46:54:41:4d:b7:52:71:8a:59:24:fc:d9:
                    3d:92:a4:ff:75:a3:0d:80:8c:7c:3c:a6:12:05:70:
                    e6:ce:f0:9f:85:96:8d:0a:fd:a5:53:9a:4e:c2:9e:
                    6d:20:8f:05:7b:ba:70:8a:2f:f6:72:80:2a:c6:71:
                    e9:3b:51:b6:fe:3b:6a:16:26:9d:ad:6c:f4:d9:d5:
                    46:57:73:31:a5:4f:78:21:22:3f:29:fa:8b:40:5a:
                    26:15:9a:b3:5f:3e:46:08:71:57:1d:f2:7c:91:25:
                    da:09:cb:df:d5:b9:ff:60:59:6e:bf:87:50:77:a2:
                    2a:96:cf:41:6a:53:67:11:a0:bb:e8:5b:e4:0b:fa:
                    29:b6:23:11:91:7c:e3:cb:cc:f1:34:4d:0f:a0:6e:
                    b0:de:65:c8:53:96:ea:b0:8d:0d:8f:bb:53:62:04:
                    11:6a:c1:de:49:d5:c4:ca:b5:93:4a:30:e9:ee:93:
                    07:3c:4b:20:c5:c9:7f:d0:db:6d:ba:5f:54:7e:31:
                    2b:9b:82:9a:c4:82:45:0e:11:bb:ec:15:74:a0:2f:
                    1e:17:7d:7d:87:f7:13:48:6f:4a:1b:d6:a5:84:96:
                    e6:48:11:1a:66:52:44:82:c1:35:63:32:9f:fa:fa:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:29:B2:56:FD:D1:8D:B9:8A:48:E0:6A:64:FB:70:9A:04:0A:32:5B
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:6f:f2:c1:56:dd:14:87:0c:c9:31:d6:79:49:e0:de:33:f7:
         24:0e:0a:30:d6:96:6f:cb:09:2a:40:32:fa:11:d8:1a:60:e6:
         3e:b4:31:f7:f8:26:1e:15:42:be:3d:73:24:43:b9:b7:53:c5:
         ed:da:fd:04:59:61:9b:8c:c6:70:64:23:4c:06:9a:25:23:a7:
         3f:8d:50:dd:7f:42:46:4f:b4:f1:4f:dc:51:68:7d:22:10:4f:
         55:35:4a:91:c9:2a:6f:88:7c:f6:fb:3a:8e:ca:a6:a1:b8:63:
         db:7a:59:9f:78:93:a0:31:e6:1b:86:48:14:a1:67:32:ee:73:
         da:4d:94:47:92:91:a9:b2:47:93:14:b4:86:e7:3b:8c:b2:26:
         be:53:d5:b9:1e:46:77:1e:aa:54:96:bc:a5:1f:7c:1b:a0:73:
         9a:51:cc:ce:2c:54:f4:53:4f:5c:80:85:de:f4:cb:0b:f8:48:
         28:b6:81:f0:ea:a6:bd:8d:ee:b0:3f:90:ab:f9:78:d6:c0:16:
         79:c4:2e:74:31:5e:68:c6:d3:d5:f1:fc:a3:42:ba:39:81:fe:
         db:b7:3e:a6:b9:2a:d7:b7:37:12:32:16:8e:ca:5b:72:e4:be:
         a1:43:b4:22:ee:c2:dc:0e:23:05:9e:9b:0d:35:9d:ac:a7:4a:
         14:23:a1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:01 2026 by rpki-client