Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
File:                     rc47owvQQ0BmFuIx-DHAO8cN_sM.mft (raw, json)
Hash identifier:          64z6KMZQNxlENiHlqP5rdBHyhkv5Wa8Nfhbtpv3GSdw=
Subject key identifier:   22:CB:38:FE:12:20:73:82:BE:69:2C:CD:4E:B1:49:DA:C6:8B:2D:04
Authority key identifier: AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3
Certificate issuer:       /CN=adce3ba30bd043406616e231f831c03bc70dfec3
Certificate serial:       01A0DBA9C80A3EC19AA46326D5EDEB7ABB04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
Manifest number:          EB
Signing time:             Sat 26 Sep 2026 03:02:11 +0000
Manifest this update:     Sat 26 Sep 2026 03:02:11 +0000
Manifest next update:     Sun 27 Sep 2026 03:02:11 +0000
Files and hashes:         1: hxtJjNM-jXAId3t9QxiU4RhKDn0.roa (hash: kCGRegaekycExv3Ea9rc9bDXuzaYL1+3mHe+GykP47o=)
                          2: rc47owvQQ0BmFuIx-DHAO8cN_sM.crl (hash: ELEaE1/yI35uiAMgZ5Bpx0kjd1pKUquMmn05Y/6mCQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:a9:c8:0a:3e:c1:9a:a4:63:26:d5:ed:eb:7a:bb:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adce3ba30bd043406616e231f831c03bc70dfec3
        Validity
            Not Before: Sep 26 03:02:11 2026 GMT
            Not After : Sep 27 03:02:11 2026 GMT
        Subject: CN=22cb38fe12207382be692ccd4eb149dac68b2d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:75:cb:f2:40:be:21:d2:fd:5c:60:b0:86:b5:
                    c3:79:74:25:22:7d:93:5b:75:4c:09:77:cc:af:47:
                    d6:5c:db:47:3a:7e:ac:08:3b:2c:b0:08:d3:2a:59:
                    7f:ce:f7:24:26:e4:9d:69:8b:e7:63:6c:bd:f5:09:
                    52:d5:9e:cd:5d:2d:7e:7c:01:9b:63:ea:4d:94:a1:
                    26:23:05:7c:3d:a0:bb:05:82:c3:a5:77:af:5f:fc:
                    fb:95:c4:a0:00:e9:d1:1d:e9:f9:80:11:a5:25:ae:
                    15:e2:ae:8c:2c:38:1a:9c:d1:17:74:23:73:07:7e:
                    bc:a2:65:07:d3:ac:fa:96:75:44:cf:94:ee:cc:a7:
                    a2:95:bf:64:5f:7f:d0:05:a6:f4:30:0d:fe:ac:76:
                    cd:e5:0b:de:bc:5d:33:d2:af:96:d4:4e:73:82:7e:
                    3f:70:18:d3:e5:f6:ca:fb:a7:02:45:f1:1c:5b:3a:
                    ec:5e:ce:93:e2:ed:9b:c1:ed:12:9f:61:b7:64:10:
                    45:0e:3b:60:ef:b4:14:c6:4b:a8:f3:f2:75:54:95:
                    84:14:0d:22:f5:cc:21:9b:3c:b0:3d:bd:fb:77:c9:
                    9a:4c:b9:6e:3b:88:ea:49:01:fc:0e:89:2f:d9:a4:
                    11:20:16:67:16:d3:b3:7f:d2:00:ec:3e:31:d0:4a:
                    bf:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:CB:38:FE:12:20:73:82:BE:69:2C:CD:4E:B1:49:DA:C6:8B:2D:04
            X509v3 Authority Key Identifier:
                keyid:AD:CE:3B:A3:0B:D0:43:40:66:16:E2:31:F8:31:C0:3B:C7:0D:FE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rc47owvQQ0BmFuIx-DHAO8cN_sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/13d50b-7db3-4d10-8a4e-6eb3aa6a21af/1/rc47owvQQ0BmFuIx-DHAO8cN_sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:11:c1:9d:68:06:8e:5d:c2:d7:bf:e7:c2:3c:eb:93:40:0f:
         f1:b1:b2:0d:68:04:42:b4:15:5d:49:4d:b1:69:f1:a7:a6:9c:
         2e:1a:1c:84:a9:fa:af:11:58:11:07:ea:eb:10:c6:b3:ce:c1:
         6f:79:20:4a:ca:8c:bb:fa:e0:32:e9:35:d7:c9:7c:8c:c4:70:
         1c:0c:da:e2:5d:c7:cd:16:d8:3d:b1:04:ce:38:b5:cb:6a:14:
         b4:29:b9:2e:b9:92:8d:44:8d:98:29:a3:a5:19:95:56:a6:cb:
         23:90:5a:9e:c5:58:00:c8:9f:55:27:a7:3f:27:ba:63:03:04:
         c2:5f:6a:37:8d:0c:e5:a3:d2:71:c8:4f:b8:c6:89:b3:b7:0b:
         ed:34:bf:11:30:35:64:07:3b:ed:2b:d6:22:85:ba:ff:0c:ee:
         53:36:50:1f:80:77:22:da:e7:03:eb:01:66:d8:1c:a6:bd:fe:
         f9:25:a1:aa:80:b3:33:7a:00:3b:20:df:0e:69:cb:e2:77:af:
         93:71:4b:61:d9:4a:13:e4:58:4e:d6:52:8b:18:ca:61:9c:e4:
         48:10:3a:ef:39:92:e6:41:40:1d:b9:67:b1:0d:72:f3:46:df:
         e5:d7:f8:b5:11:76:10:7c:fa:1e:f6:f5:3e:cd:a7:a2:c1:40:
         a7:c8:f9:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbqcgKPsGapGMm1e3rersEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkY2UzYmEzMGJkMDQzNDA2NjE2ZTIzMWY4MzFjMDNiYzcw
ZGZlYzMwHhcNMjYwOTI2MDMwMjExWhcNMjYwOTI3MDMwMjExWjAzMTEwLwYDVQQD
EygyMmNiMzhmZTEyMjA3MzgyYmU2OTJjY2Q0ZWIxNDlkYWM2OGIyZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3XL8kC+IdL9XGCwhrXDeXQlIn2T
W3VMCXfMr0fWXNtHOn6sCDsssAjTKll/zvckJuSdaYvnY2y99QlS1Z7NXS1+fAGb
Y+pNlKEmIwV8PaC7BYLDpXevX/z7lcSgAOnRHen5gBGlJa4V4q6MLDganNEXdCNz
B368omUH06z6lnVEz5TuzKeilb9kX3/QBab0MA3+rHbN5QvevF0z0q+W1E5zgn4/
cBjT5fbK+6cCRfEcWzrsXs6T4u2bwe0Sn2G3ZBBFDjtg77QUxkuo8/J1VJWEFA0i
9cwhmzywPb37d8maTLluO4jqSQH8Dokv2aQRIBZnFtOzf9IA7D4x0Eq/uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLLOP4SIHOCvmkszU6xSdrGiy0EMB8GA1UdIwQY
MBaAFK3OO6ML0ENAZhbiMfgxwDvHDf7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmM0N293dlFRMEJtRnVJeC1ESEFPOGNOX3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8xM2Q1MGItN2RiMy00ZDEwLThhNGUt
NmViM2FhNmEyMWFmLzEvcmM0N293dlFRMEJtRnVJeC1ESEFPOGNOX3NNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8xM2Q1MGItN2RiMy00ZDEwLThhNGUtNmViM2FhNmEyMWFm
LzEvcmM0N293dlFRMEJtRnVJeC1ESEFPOGNOX3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBHBnWgG
jl3C17/nwjzrk0AP8bGyDWgEQrQVXUlNsWnxp6acLhochKn6rxFYEQfq6xDGs87B
b3kgSsqMu/rgMuk118l8jMRwHAza4l3HzRbYPbEEzji1y2oUtCm5LrmSjUSNmCmj
pRmVVqbLI5BansVYAMifVSenPye6YwMEwl9qN40M5aPScchPuMaJs7cL7TS/ETA1
ZAc77SvWIoW6/wzuUzZQH4B3ItrnA+sBZtgcpr3++SWhqoCzM3oAOyDfDmnL4nev
k3FLYdlKE+RYTtZSixjKYZzkSBA67zmS5kFAHblnsQ1y80bf5df4tRF2EHz6Hvb1
Ps2nosFAp8j5zA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:47:52 2026 by rpki-client