Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File:                     dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier:          CtgxxuaoCUC8491p15r/iQMRAsxKMWYm9W8XKsN2SEY=
Subject key identifier:   58:2F:F0:B1:D3:EE:44:C3:65:EF:A8:B2:94:6E:EB:26:B8:CC:B7:DC
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer:       /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial:       01A0E3999EACA83BDE8AAC05E3A1CAD01FF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number:          075A
Signing time:             Sun 27 Sep 2026 16:01:30 +0000
Manifest this update:     Sun 27 Sep 2026 16:01:30 +0000
Manifest next update:     Mon 28 Sep 2026 16:01:30 +0000
Files and hashes:         1: 3lauIf0YpbUjYSTnhhTVxklgLKk.roa (hash: yggx4J03w1luy3uhGhFmtwjE58TFme6YVBEKV6qwxTo=)
                          2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: asmGqzgGkODIWaC4zzquXDZYfFt8ulBHRtMLm1ij0mY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:99:9e:ac:a8:3b:de:8a:ac:05:e3:a1:ca:d0:1f:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
        Validity
            Not Before: Sep 27 16:01:30 2026 GMT
            Not After : Sep 28 16:01:30 2026 GMT
        Subject: CN=582ff0b1d3ee44c365efa8b2946eeb26b8ccb7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ac:79:e0:8f:e7:9f:ac:9d:38:37:31:06:5c:
                    c6:2e:30:3a:8f:c7:fb:4a:53:28:6e:42:bd:e1:1e:
                    5e:c7:69:af:75:59:20:8d:aa:76:e8:98:24:24:eb:
                    00:57:fa:51:74:f3:ab:f5:af:06:3b:4e:bd:d1:7c:
                    ca:6b:aa:73:67:4d:61:f3:1c:40:f9:b6:52:b3:c9:
                    32:ff:98:c3:aa:f1:ab:11:29:5d:58:17:45:58:a6:
                    4b:95:4d:02:fb:65:5f:be:25:02:c7:14:5d:59:ba:
                    e3:62:88:7d:9c:26:32:e6:00:65:c5:1e:bf:14:8b:
                    8d:11:ed:0a:2a:f3:08:0e:e9:46:b2:67:e0:38:42:
                    89:41:f5:4b:15:c4:c4:82:3d:91:ae:a7:cc:d1:cd:
                    76:65:d1:91:ce:62:6a:a0:3b:5d:d8:9b:33:e3:91:
                    72:04:15:5e:ec:62:a8:a2:ce:85:da:b1:08:b0:05:
                    91:c4:f6:06:a5:5d:a0:a6:51:84:23:65:02:88:c3:
                    88:90:b6:ab:3f:d2:4c:0b:b2:d1:be:1f:20:49:d0:
                    9b:38:58:1b:a4:65:ce:5b:b7:48:66:ed:af:37:d9:
                    14:6c:4a:db:b0:94:f6:50:29:97:be:a6:05:78:ce:
                    a6:9f:e7:28:72:06:cc:7f:6c:0e:3f:17:9b:87:6c:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:F0:B1:D3:EE:44:C3:65:EF:A8:B2:94:6E:EB:26:B8:CC:B7:DC
            X509v3 Authority Key Identifier:
                keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:aa:94:23:a7:23:63:03:58:84:43:9b:52:0c:1d:b4:70:68:
         02:78:71:57:6a:b2:aa:3f:67:cd:64:1e:ed:04:b0:c6:14:50:
         ad:71:26:5f:2d:21:57:46:f0:be:a0:c9:3d:2c:1b:79:ae:84:
         e1:9b:f4:db:3d:fa:2f:c0:fa:3b:b7:d3:2c:4a:c4:44:9b:f6:
         2a:8e:51:91:47:f7:ae:08:88:14:4b:71:b4:cb:76:21:bc:25:
         bc:2b:51:46:38:9d:b7:34:b2:ba:1d:0b:e8:e1:6d:96:c4:c3:
         80:e2:79:e5:ba:51:bb:72:55:5d:f9:96:64:7d:a3:3c:89:55:
         f1:48:b5:79:68:4c:d1:a7:bf:91:2d:a4:b8:6f:66:f1:3c:87:
         b3:0f:19:59:e7:a3:05:5d:cb:66:61:63:2e:9d:3b:ae:ac:32:
         56:77:96:15:25:bf:43:e1:73:e0:d4:cb:40:e8:6e:f3:1e:b6:
         c1:aa:67:a8:a6:bd:ea:af:80:09:2c:e3:39:f0:60:71:b2:37:
         2d:25:65:9a:df:08:ae:72:75:54:be:e0:71:66:51:8c:24:5b:
         f3:eb:c0:2d:80:b2:a0:f0:b9:24:18:db:64:78:d4:d9:ce:da:
         79:36:b4:a8:1c:94:70:50:10:93:2c:05:6a:b7:ca:e1:8c:97:
         74:d0:94:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:13:23 2026 by rpki-client