Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
File:                     sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft (raw, json)
Hash identifier:          kM/cjpoUxmVhmB2zkbayHfUere7c3BVqmbNl7fltXIY=
Subject key identifier:   C4:45:FF:21:AF:68:67:15:46:F0:46:FE:FF:D9:D9:66:B6:1E:7C:56
Authority key identifier: B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4
Certificate issuer:       /CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
Certificate serial:       01A0EE5477D7ADC82CC411BA36BEA6419482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
Manifest number:          19C1
Signing time:             Tue 29 Sep 2026 18:01:48 +0000
Manifest this update:     Tue 29 Sep 2026 18:01:48 +0000
Manifest next update:     Wed 30 Sep 2026 18:01:48 +0000
Files and hashes:         1: 5KOoriFpYDWNQa_aIXxLJE8pBHY.roa (hash: 9iEGmIKb7O59KI7QS/sDIkqkU0kq2Alr+CCrXsTWZJ4=)
                          2: sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl (hash: d7HOAj1S5+pzqdgd4iFa1DnptlvMiATpcXQGSzF4FR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ee:54:77:d7:ad:c8:2c:c4:11:ba:36:be:a6:41:94:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1d596fb1a3f2f4b127fb7cec19fd90bb94c73a4
        Validity
            Not Before: Sep 29 18:01:48 2026 GMT
            Not After : Sep 30 18:01:48 2026 GMT
        Subject: CN=c445ff21af68671546f046feffd9d966b61e7c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:66:10:1c:24:c3:1b:55:2e:1f:5b:4e:01:7c:
                    05:6e:7f:62:ed:e6:61:10:bc:97:96:02:be:1f:3c:
                    d5:b8:00:ee:5c:cd:26:a1:19:9d:37:e7:56:a2:1b:
                    04:e7:13:84:66:dd:1e:68:ff:30:26:a7:17:de:e1:
                    6f:c4:33:13:a7:94:db:58:92:c9:e9:bf:51:5b:c5:
                    c7:a7:4b:ea:90:85:65:c6:c5:da:56:be:b4:01:cc:
                    fe:4a:c1:60:39:d4:c7:5f:f1:d4:e1:6d:be:86:19:
                    d2:ce:c2:49:b7:ca:af:02:1f:87:7c:5b:77:af:c7:
                    c1:78:a8:99:07:f5:fe:e2:46:65:6e:88:c6:0c:36:
                    37:ac:b0:28:d0:9d:4f:6d:f9:31:ba:25:d2:31:8a:
                    1d:0d:5a:f8:7d:39:9d:6c:59:5d:88:e0:a4:69:57:
                    84:6b:31:b5:9c:41:9d:9d:5e:34:46:40:db:8b:d5:
                    71:9b:09:7f:29:a1:53:0d:d9:ce:82:00:fe:4f:32:
                    14:ba:10:55:cf:b8:e1:ab:a9:50:b3:13:c4:15:2a:
                    b8:ca:51:56:6b:6f:92:cb:c4:bf:34:8c:f7:8a:92:
                    5f:7b:f3:56:74:0a:46:ef:3d:bb:ee:e7:66:b5:f2:
                    6e:df:7a:a4:f4:f4:16:3f:55:77:d2:4c:4a:e1:25:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:45:FF:21:AF:68:67:15:46:F0:46:FE:FF:D9:D9:66:B6:1E:7C:56
            X509v3 Authority Key Identifier:
                keyid:B1:D5:96:FB:1A:3F:2F:4B:12:7F:B7:CE:C1:9F:D9:0B:B9:4C:73:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/ccc7de-47de-4287-a0b2-1df40145b0be/1/sdWW-xo_L0sSf7fOwZ_ZC7lMc6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:91:f8:6d:26:ed:c4:62:fa:8c:84:cb:4d:88:f5:a6:73:88:
         4a:2b:1c:37:2b:17:1c:ac:b2:74:59:81:49:26:ac:67:d5:08:
         39:a0:f5:43:38:3c:70:fb:5e:38:77:92:6c:c1:63:2b:f7:f6:
         ab:0f:ad:34:75:81:01:a9:db:2c:15:6b:b0:63:8e:5e:6b:fd:
         bb:1a:de:fe:a8:63:09:b6:27:d6:6f:33:f2:e9:7c:2f:8f:b3:
         08:bd:2c:df:15:11:0d:2e:29:33:48:57:4c:5e:55:42:30:74:
         f8:e0:3a:50:71:33:52:f0:60:7a:51:e3:f0:be:d7:8b:f6:9e:
         a0:e9:83:c8:7c:8a:ac:86:58:d0:df:0c:99:36:ef:d9:6d:c1:
         1f:bd:e8:ba:e3:77:4e:9c:91:74:8b:e0:d2:2f:70:a5:67:cc:
         a0:40:67:06:47:f3:65:6d:af:bb:8a:c7:5a:ac:18:c5:9d:40:
         1e:4c:50:0d:5f:7d:a4:04:ba:ac:7e:41:a5:28:41:b4:5c:5a:
         ac:e0:9e:6e:1a:1e:08:86:b3:fd:69:f0:5d:e7:40:f7:d7:88:
         07:01:a8:9d:92:29:f8:89:e6:a8:6d:97:6e:07:9a:9c:3b:78:
         6d:3c:dd:80:6a:6e:c5:77:aa:97:41:6e:35:d2:93:5e:98:7c:
         fb:01:47:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDuVHfXrcgsxBG6Nr6mQZSCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZDU5NmZiMWEzZjJmNGIxMjdmYjdjZWMxOWZkOTBiYjk0
YzczYTQwHhcNMjYwOTI5MTgwMTQ4WhcNMjYwOTMwMTgwMTQ4WjAzMTEwLwYDVQQD
EyhjNDQ1ZmYyMWFmNjg2NzE1NDZmMDQ2ZmVmZmQ5ZDk2NmI2MWU3YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmYQHCTDG1UuH1tOAXwFbn9i7eZh
ELyXlgK+HzzVuADuXM0moRmdN+dWohsE5xOEZt0eaP8wJqcX3uFvxDMTp5TbWJLJ
6b9RW8XHp0vqkIVlxsXaVr60Acz+SsFgOdTHX/HU4W2+hhnSzsJJt8qvAh+HfFt3
r8fBeKiZB/X+4kZlbojGDDY3rLAo0J1PbfkxuiXSMYodDVr4fTmdbFldiOCkaVeE
azG1nEGdnV40RkDbi9Vxmwl/KaFTDdnOggD+TzIUuhBVz7jhq6lQsxPEFSq4ylFW
a2+Sy8S/NIz3ipJfe/NWdApG7z277udmtfJu33qk9PQWP1V30kxK4SULhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRF/yGvaGcVRvBG/v/Z2Wa2HnxWMB8GA1UdIwQY
MBaAFLHVlvsaPy9LEn+3zsGf2Qu5THOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jY2M3ZGUtNDdkZS00Mjg3LWEwYjIt
MWRmNDAxNDViMGJlLzEvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jY2M3ZGUtNDdkZS00Mjg3LWEwYjItMWRmNDAxNDViMGJl
LzEvc2RXVy14b19MMHNTZjdmT3daX1pDN2xNYzZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJH4bSbt
xGL6jITLTYj1pnOISiscNysXHKyydFmBSSasZ9UIOaD1Qzg8cPteOHeSbMFjK/f2
qw+tNHWBAanbLBVrsGOOXmv9uxre/qhjCbYn1m8z8ul8L4+zCL0s3xURDS4pM0hX
TF5VQjB0+OA6UHEzUvBgelHj8L7Xi/aeoOmDyHyKrIZY0N8MmTbv2W3BH73ouuN3
TpyRdIvg0i9wpWfMoEBnBkfzZW2vu4rHWqwYxZ1AHkxQDV99pAS6rH5BpShBtFxa
rOCebhoeCIaz/WnwXedA99eIBwGonZIp+InmqG2XbgeanDt4bTzdgGpuxXeql0Fu
NdKTXph8+wFHrg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 05:53:19 2026 by rpki-client