Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File:                     kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier:          n0snRRsN50mGUz1MFz5q67wp8hOCzMc2/4CJ4R7gI1M=
Subject key identifier:   44:80:2F:DA:2A:72:C6:AA:39:F4:B8:0A:4D:AA:F5:9E:75:AA:2F:53
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer:       /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial:       01A1005A356A99EC940156A2D50751923E55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number:          0752
Signing time:             Sat 03 Oct 2026 06:01:14 +0000
Manifest this update:     Sat 03 Oct 2026 06:01:14 +0000
Manifest next update:     Sun 04 Oct 2026 06:01:14 +0000
Files and hashes:         1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: kGZM/PSWbE21MOnpdwT17IeQ8pzM85zLm9R2QKQzato=)
                          2: rOZu6wYLzhNpmg8j69cWttIEmiQ.roa (hash: yuT/NXTQJjp1YdXNP2jjlInGWMr7pc0nxgMJpIJbpWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 06:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:5a:35:6a:99:ec:94:01:56:a2:d5:07:51:92:3e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
        Validity
            Not Before: Oct  3 06:01:14 2026 GMT
            Not After : Oct  4 06:01:14 2026 GMT
        Subject: CN=44802fda2a72c6aa39f4b80a4daaf59e75aa2f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:20:c7:02:47:9d:78:b9:a1:13:71:04:ef:d8:
                    78:36:7d:4e:b8:2c:4c:58:3d:2e:fa:4b:69:47:01:
                    8e:64:dd:1e:e0:f7:18:76:6e:d4:61:24:c3:40:ea:
                    aa:7f:ea:fb:21:ba:a3:22:c7:76:4a:80:9d:c0:37:
                    7f:6b:c2:f8:68:cb:12:b7:54:c2:71:0a:b8:5a:f2:
                    ee:bf:9a:8d:4e:59:db:44:7a:a5:60:88:e6:71:c2:
                    8a:d2:42:91:54:08:9f:9e:c7:ae:73:a7:00:76:51:
                    ee:80:16:55:b4:3d:fb:a5:c5:ba:93:cd:14:87:29:
                    3c:93:ec:a1:0d:53:3a:27:95:fe:91:93:85:5f:8d:
                    c8:84:ef:b5:84:7d:c1:29:e1:0a:10:c6:bf:0c:2a:
                    ab:5c:9f:53:21:d2:11:1d:fd:27:0f:d7:6e:ec:81:
                    27:01:c1:da:7e:67:70:69:0e:2f:25:d8:79:c0:1e:
                    d5:1f:43:d0:d1:66:ea:39:e9:80:40:79:84:95:5a:
                    92:0a:af:4f:cc:4a:a5:82:ed:de:c2:97:85:35:e6:
                    01:5b:d8:87:a2:e1:a4:10:f6:1f:ad:0c:9b:37:7e:
                    b9:aa:29:75:53:a1:14:f6:70:f2:3c:3b:a9:33:77:
                    13:bb:8b:74:4a:79:fc:ef:bd:f2:81:dc:4c:df:23:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:80:2F:DA:2A:72:C6:AA:39:F4:B8:0A:4D:AA:F5:9E:75:AA:2F:53
            X509v3 Authority Key Identifier:
                keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a7:d6:29:d4:d6:1e:c9:90:85:8b:32:3a:61:af:13:a1:e8:
         5b:04:0c:b2:62:4d:8d:2a:48:9c:ed:37:4a:94:9d:98:3b:92:
         49:dd:ab:ea:38:48:91:73:ea:72:b4:99:1e:26:a3:1a:14:82:
         3b:ba:46:af:c4:64:cb:e8:2a:a0:5b:ca:01:af:35:3a:84:41:
         55:bf:28:9b:3c:2c:b0:69:4c:f0:51:a9:bf:5e:ce:73:0b:d2:
         d8:51:6a:ad:2a:dd:de:9b:fa:cc:e3:6a:17:13:a0:70:de:91:
         9e:d8:48:ad:cd:ef:21:01:8e:ab:1b:dc:a7:c5:fc:ba:70:b8:
         cc:a2:de:dc:72:7c:fa:07:e4:5d:cd:34:e2:c4:34:04:4d:66:
         d4:a4:41:77:ee:8b:3c:a3:94:30:73:54:25:ed:f9:47:4a:83:
         e2:8c:6d:2e:4c:ac:0b:54:77:5b:e4:bd:b8:d7:87:fb:68:fc:
         51:74:24:90:07:58:39:9d:ad:bf:7f:77:bb:fa:2b:01:11:95:
         06:f0:4d:e6:2e:c2:23:76:93:11:8a:16:b0:cd:47:f3:15:00:
         be:5c:c6:2c:e3:17:c1:b0:df:f3:32:9b:08:83:36:f7:33:46:
         b3:e3:99:1c:3c:da:c9:45:a9:eb:49:b3:f7:52:81:77:79:01:
         e0:f3:3f:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAWjVqmeyUAVai1QdRkj5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDc3ODYwNDc3YTUzNTRiNWE4Njk2NWRkMzk5ZTk4OTg3
ZTU5MGUwHhcNMjYxMDAzMDYwMTE0WhcNMjYxMDA0MDYwMTE0WjAzMTEwLwYDVQQD
Eyg0NDgwMmZkYTJhNzJjNmFhMzlmNGI4MGE0ZGFhZjU5ZTc1YWEyZjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCDHAkedeLmhE3EE79h4Nn1OuCxM
WD0u+ktpRwGOZN0e4PcYdm7UYSTDQOqqf+r7IbqjIsd2SoCdwDd/a8L4aMsSt1TC
cQq4WvLuv5qNTlnbRHqlYIjmccKK0kKRVAifnseuc6cAdlHugBZVtD37pcW6k80U
hyk8k+yhDVM6J5X+kZOFX43IhO+1hH3BKeEKEMa/DCqrXJ9TIdIRHf0nD9du7IEn
AcHafmdwaQ4vJdh5wB7VH0PQ0WbqOemAQHmElVqSCq9PzEqlgu3ewpeFNeYBW9iH
ouGkEPYfrQybN365qil1U6EU9nDyPDupM3cTu4t0Snn8773ygdxM3yNtGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESAL9oqcsaqOfS4Ck2q9Z51qi9TMB8GA1UdIwQY
MBaAFJJHeGBHelNUtahpZd05npiYflkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYjY2NjEtMTcxYy00MDZmLWIzMTMt
YTYzN2NkODQ2Y2Y2LzEva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jYjY2NjEtMTcxYy00MDZmLWIzMTMtYTYzN2NkODQ2Y2Y2
LzEva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACafWKdTW
HsmQhYsyOmGvE6HoWwQMsmJNjSpInO03SpSdmDuSSd2r6jhIkXPqcrSZHiajGhSC
O7pGr8Rky+gqoFvKAa81OoRBVb8omzwssGlM8FGpv17OcwvS2FFqrSrd3pv6zONq
FxOgcN6RnthIrc3vIQGOqxvcp8X8unC4zKLe3HJ8+gfkXc004sQ0BE1m1KRBd+6L
PKOUMHNUJe35R0qD4oxtLkysC1R3W+S9uNeH+2j8UXQkkAdYOZ2tv393u/orARGV
BvBN5i7CI3aTEYoWsM1H8xUAvlzGLOMXwbDf8zKbCIM29zNGs+OZHDzayUWp60mz
91KBd3kB4PM/cA==
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:41:37 2026 by rpki-client