Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File:                     d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier:          MOedjOnFQzufjMhmPZSPjcQ5bXiAOAilOzoRUjEBzgE=
Subject key identifier:   6F:D2:21:23:AB:88:1F:09:98:D5:90:43:FB:D5:CC:4B:CB:74:F6:A4
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer:       /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial:       019F9323F2009809B16A0599C182119B4418
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number:          0E58
Signing time:             Fri 24 Jul 2026 08:00:33 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:33 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:33 +0000
Files and hashes:         1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: kQuOBksb53YT3qyLqUUeRRflBtFhDOCWOHOL7rpzKXM=)
                          2: p6qsa6svPJ0422i3SiO1EzgoFFQ.roa (hash: TXPP91hJYndsd1QK98Dq8mZrdcp6BkkwS6MxLqiQzbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:f2:00:98:09:b1:6a:05:99:c1:82:11:9b:44:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
        Validity
            Not Before: Jul 24 08:00:33 2026 GMT
            Not After : Jul 25 08:00:33 2026 GMT
        Subject: CN=6fd22123ab881f0998d59043fbd5cc4bcb74f6a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:58:f6:7f:2d:e7:1a:d5:2c:04:72:88:c6:96:
                    fd:35:d5:0e:a4:89:d4:d5:33:bc:db:8f:87:96:ed:
                    04:97:af:fd:e6:35:fc:6e:1d:bf:44:8c:8a:04:09:
                    94:12:00:47:b0:61:38:57:6a:35:6f:77:70:af:76:
                    f6:58:3f:65:31:88:cf:62:fd:97:d3:d1:09:bd:42:
                    2f:0c:4f:3f:fb:24:b6:0f:03:0c:a4:58:68:6e:c8:
                    1e:ba:44:b9:3c:92:f4:f1:81:6c:0a:86:e7:24:90:
                    0a:1f:25:b9:6c:37:82:db:d8:f0:4b:96:ef:42:5d:
                    b9:39:f2:52:1f:c3:eb:37:6a:4d:cd:88:a6:13:c5:
                    ec:3d:ac:c6:74:10:f8:be:e1:5b:58:16:49:7c:9c:
                    db:17:31:76:b5:2d:90:7b:37:79:91:92:42:00:79:
                    cb:05:90:4f:fe:bc:11:6f:81:d7:62:d9:a5:eb:d8:
                    76:9f:ad:5d:0b:cb:b8:b8:77:88:ab:a4:31:0e:88:
                    2c:aa:ad:8b:4e:e7:92:e0:25:76:f8:6a:c5:0d:4f:
                    44:43:c5:80:25:ab:7c:5f:28:28:ed:61:d5:e7:59:
                    64:c8:62:3e:d3:05:a6:62:e9:cd:26:40:5f:17:2d:
                    c3:cf:5d:38:50:b1:3f:58:3a:5b:2a:b7:5e:16:ae:
                    a4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D2:21:23:AB:88:1F:09:98:D5:90:43:FB:D5:CC:4B:CB:74:F6:A4
            X509v3 Authority Key Identifier:
                keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:43:a4:d9:e7:99:50:69:87:78:24:f6:34:4b:02:30:ac:95:
         9e:60:21:33:5e:94:0a:bc:7c:46:51:1f:ac:51:2c:31:a2:6b:
         2c:54:fb:1c:8b:85:2d:e7:dc:dc:9a:13:53:27:37:d0:ec:cf:
         4c:a9:d9:c6:6f:3c:cc:c2:b9:46:f7:7d:d7:8d:07:27:79:c0:
         92:2d:c8:7d:52:37:aa:46:2f:9d:97:de:b0:f4:1b:06:ce:d1:
         c7:e3:97:8f:13:24:bd:b5:53:a5:f4:75:89:02:26:a5:cc:66:
         a6:7b:3f:25:9e:93:c1:73:7d:27:86:fe:78:82:df:42:96:db:
         76:a5:54:03:f2:54:dc:3b:b9:a8:8e:b4:dd:2a:58:cc:0c:08:
         fe:2c:34:4d:fc:cd:6a:35:7a:3d:75:4b:42:df:b2:5a:a9:7a:
         83:87:03:4f:f3:ee:17:b1:3e:d9:75:fe:99:04:8e:48:b1:9d:
         94:3d:c7:f2:e6:39:95:9a:40:c0:e7:75:86:89:0e:84:06:16:
         35:c1:7d:04:46:ae:9e:7c:d8:6c:c7:54:a4:1e:ed:1f:61:f2:
         48:be:83:28:db:3e:f5:6d:f7:b0:c5:6a:96:10:16:f9:e1:f7:
         a0:05:48:6d:bf:19:49:7f:ea:af:d0:bb:67:6c:f3:b8:e3:07:
         2a:aa:f0:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI/IAmAmxagWZwYIRm0QYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODJlMDBhN2ZjNzYxN2Q5NDI2MGI4MWZkMjJhM2EzZjNk
YzY4NmQwHhcNMjYwNzI0MDgwMDMzWhcNMjYwNzI1MDgwMDMzWjAzMTEwLwYDVQQD
Eyg2ZmQyMjEyM2FiODgxZjA5OThkNTkwNDNmYmQ1Y2M0YmNiNzRmNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVj2fy3nGtUsBHKIxpb9NdUOpInU
1TO824+Hlu0El6/95jX8bh2/RIyKBAmUEgBHsGE4V2o1b3dwr3b2WD9lMYjPYv2X
09EJvUIvDE8/+yS2DwMMpFhobsgeukS5PJL08YFsCobnJJAKHyW5bDeC29jwS5bv
Ql25OfJSH8PrN2pNzYimE8XsPazGdBD4vuFbWBZJfJzbFzF2tS2Qezd5kZJCAHnL
BZBP/rwRb4HXYtml69h2n61dC8u4uHeIq6QxDogsqq2LTueS4CV2+GrFDU9EQ8WA
Jat8Xygo7WHV51lkyGI+0wWmYunNJkBfFy3Dz104ULE/WDpbKrdeFq6kAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/SISOriB8JmNWQQ/vVzEvLdPakMB8GA1UdIwQY
MBaAFHeC4Ap/x2F9lCYLgf0io6Pz3GhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgt
OWEwMjg0YjNhZGMxLzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgtOWEwMjg0YjNhZGMx
LzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEOk2eeZ
UGmHeCT2NEsCMKyVnmAhM16UCrx8RlEfrFEsMaJrLFT7HIuFLefc3JoTUyc30OzP
TKnZxm88zMK5Rvd9140HJ3nAki3IfVI3qkYvnZfesPQbBs7Rx+OXjxMkvbVTpfR1
iQImpcxmpns/JZ6TwXN9J4b+eILfQpbbdqVUA/JU3Du5qI603SpYzAwI/iw0TfzN
ajV6PXVLQt+yWql6g4cDT/PuF7E+2XX+mQSOSLGdlD3H8uY5lZpAwOd1hokOhAYW
NcF9BEaunnzYbMdUpB7tH2HySL6DKNs+9W33sMVqlhAW+eH3oAVIbb8ZSX/qr9C7
Z2zzuOMHKqrwsw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:20 2026 by rpki-client