Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File:                     1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier:          aXgDUM1HjGNmQrlk56c5DSd0w2svrot07L+Vy8eeND0=
Subject key identifier:   5E:ED:9A:B5:3E:74:80:45:BE:3C:90:B5:37:6B:19:66:12:D0:50:BA
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer:       /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial:       019FAA1A37B0014E93995A4300403456E54A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number:          0A39
Signing time:             Tue 28 Jul 2026 19:01:12 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:12 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:12 +0000
Files and hashes:         1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: YKAlaFO1jeeL0mEm1xdwThnqwMrsp12bVFrOuTnMfBs=)
                          2: zsQtQXRIMfmAATwnDwSYChB6X74.roa (hash: Usub4GZLrzPgjoxI/zygWmH+Aj3bFEudCK+rN9RJJeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:37:b0:01:4e:93:99:5a:43:00:40:34:56:e5:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
        Validity
            Not Before: Jul 28 19:01:12 2026 GMT
            Not After : Jul 29 19:01:12 2026 GMT
        Subject: CN=5eed9ab53e748045be3c90b5376b196612d050ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5b:70:e3:c5:66:e1:33:f4:66:11:d4:87:11:
                    40:aa:69:09:78:89:a0:ec:e5:84:5a:d8:94:89:ed:
                    02:78:6b:f0:7f:d9:54:13:af:a8:9e:ab:e4:d1:38:
                    69:03:47:20:e2:68:e4:76:38:76:98:8d:da:11:30:
                    ab:5b:86:8a:16:a5:21:cb:bd:54:1e:a6:7e:55:a6:
                    d0:46:14:78:38:2a:e0:59:35:a0:b0:d6:f4:08:54:
                    80:cc:06:d2:e3:3a:75:d9:c8:5a:e3:83:80:14:1b:
                    ba:17:9f:45:33:70:17:c6:ca:a6:3b:80:3a:29:f2:
                    f5:de:d5:02:d7:ec:61:20:2a:16:ef:a4:d7:a9:5f:
                    69:56:48:e5:a0:db:38:8e:81:2e:19:12:4d:1b:a5:
                    71:40:2d:4d:ed:f2:18:cf:44:ac:cf:f8:4f:fc:a3:
                    a6:c7:e6:98:7e:38:54:e7:aa:7a:92:d6:a9:09:a6:
                    92:3d:81:fc:f7:22:64:6e:63:da:fd:eb:02:c0:fe:
                    82:89:db:7e:55:62:53:21:c3:6a:13:d8:72:3d:6e:
                    b2:6b:26:70:88:aa:6e:a5:f1:aa:16:8c:3d:9d:46:
                    d0:c7:57:72:be:8e:49:d5:d8:e8:f4:20:c1:2c:ee:
                    ae:72:7e:b3:64:21:6d:ff:a3:68:42:64:8c:4a:c3:
                    10:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:ED:9A:B5:3E:74:80:45:BE:3C:90:B5:37:6B:19:66:12:D0:50:BA
            X509v3 Authority Key Identifier:
                keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:90:ad:af:66:63:21:a0:85:b6:fe:03:9f:96:17:25:9d:0a:
         85:a6:1c:28:38:fc:d3:f7:38:5f:4e:92:d0:da:8a:fc:9e:96:
         7b:7f:a6:11:36:7d:94:09:1a:fa:0c:a2:b9:75:ff:d8:02:1e:
         29:32:01:15:9d:a7:9c:73:4b:0c:e8:f9:05:d6:1f:5c:80:0d:
         21:09:96:28:8d:19:3c:34:95:cf:94:45:3c:65:5c:d8:62:04:
         8b:ab:5a:54:e3:5e:1e:4c:1f:4f:d1:3c:4b:13:1e:2e:e2:c3:
         33:ea:d3:a2:8b:0e:3a:eb:33:06:ef:07:85:81:43:04:d7:d8:
         88:74:d7:0c:71:64:9a:95:68:f5:d6:60:82:7e:1d:e7:f6:cd:
         e6:02:a4:07:b0:85:ab:a8:c8:c0:7b:7e:47:fd:73:52:0e:93:
         b9:e9:ce:db:67:13:b8:d7:3a:4b:e2:64:74:21:46:03:b1:73:
         41:c0:a6:03:54:e5:a1:c8:2f:7d:2f:98:6f:8f:94:a5:20:c1:
         a1:c6:55:af:3a:b8:98:8b:6c:3b:eb:af:e6:a6:25:a2:45:5d:
         2c:ae:21:a9:a5:61:6a:31:4d:09:4e:04:a8:0a:16:ea:83:b0:
         e4:ef:f6:9f:b4:c1:1b:c1:e4:2b:13:06:7d:f5:a5:92:17:7a:
         35:43:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:22:01 2026 by rpki-client