Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          cSZzf2B9YavtxJCp3X+9pwbTmfwp6ieGMVyG09Hjd5k=
Subject key identifier:   34:75:23:5D:13:29:88:30:A5:15:00:DF:9C:67:7C:52:0A:F7:7D:00
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       01A0CBC7264E62BFA5478DE9D3958250D1FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0FAF
Signing time:             Wed 23 Sep 2026 01:00:21 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:21 +0000
Manifest next update:     Thu 24 Sep 2026 01:00:21 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: C1AYP0PC8IQXQka9AQaPPznudhdEGaXKTZw5zJ4trxE=)
                          2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:c7:26:4e:62:bf:a5:47:8d:e9:d3:95:82:50:d1:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Sep 23 01:00:21 2026 GMT
            Not After : Sep 24 01:00:21 2026 GMT
        Subject: CN=3475235d13298830a51500df9c677c520af77d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:6f:1e:2e:67:6e:e7:d7:fe:a3:e0:7b:e6:
                    c2:6c:64:de:47:e9:da:4f:f7:9d:29:6a:c6:00:97:
                    c3:7a:1a:fb:61:3c:b0:1b:40:77:82:4c:0c:57:f5:
                    8b:fb:ae:9f:bc:b3:88:ec:29:8d:8c:08:81:07:f5:
                    9f:ff:ef:df:21:10:33:a3:83:be:08:9e:e8:3a:41:
                    70:95:c9:73:b1:f0:89:9a:a4:83:4c:db:71:80:9b:
                    2c:21:a6:be:07:10:16:7d:9a:c6:bb:5d:e2:09:06:
                    6d:a1:12:05:a9:9b:33:be:00:05:b8:03:e5:25:2b:
                    8d:cc:eb:83:33:d1:47:4a:a8:3e:77:9e:45:53:6f:
                    f7:4f:92:18:89:9e:68:b9:35:9a:00:62:cd:88:51:
                    42:d9:a4:11:fd:c6:f4:34:f4:35:7b:c3:13:15:6c:
                    b2:be:a8:07:fd:9f:89:24:b8:6c:7c:ec:e7:f0:af:
                    c0:a4:17:7a:7b:ac:f3:a7:9a:a4:72:71:a7:59:d9:
                    e9:13:6c:d8:6b:ba:8e:8f:f2:7e:9e:94:2a:8a:01:
                    4c:6c:ae:40:16:c4:8e:b4:6a:61:f1:9f:24:c8:3f:
                    8c:a8:ef:43:b3:69:f2:29:23:ed:a2:87:cc:9e:54:
                    e5:4a:01:bb:48:ae:a0:f8:34:05:33:1d:91:3e:90:
                    d7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:75:23:5D:13:29:88:30:A5:15:00:DF:9C:67:7C:52:0A:F7:7D:00
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:bc:0f:e9:07:40:30:08:ab:22:be:59:68:a0:7a:1a:9c:db:
         b7:98:22:fb:f1:17:9c:fd:57:aa:00:2a:03:45:6c:2d:36:cf:
         89:28:8a:02:a7:de:4c:04:46:25:fe:49:a6:63:ed:3a:79:f8:
         cb:64:8f:f5:52:bd:b7:7d:80:4e:5d:6a:ee:f2:73:ca:67:71:
         89:34:5d:3f:30:0c:0a:e0:ff:3c:29:8c:2b:c2:27:59:70:90:
         f5:76:6f:27:8a:39:4e:23:7a:ba:87:8e:94:c0:0c:62:a8:58:
         63:56:d0:ec:15:ba:0b:a7:4a:6c:b6:38:96:ef:24:62:f7:01:
         e6:b8:9d:b9:54:bc:b7:63:77:fd:cf:a1:a3:13:61:ab:0a:a2:
         8d:38:1a:84:7f:5c:67:b4:78:b2:c0:c1:36:5b:a2:89:aa:ad:
         a0:e5:f8:9d:4a:56:25:b4:ed:53:dc:ea:56:03:a4:47:85:66:
         01:15:fe:ad:34:fa:46:79:9f:c8:87:dd:57:91:1d:70:a5:55:
         88:32:ec:09:14:6b:c1:6f:08:2f:3e:1c:a1:e1:2c:a8:e2:83:
         9d:c2:2c:ee:2c:59:45:11:26:3a:3d:62:dc:c3:be:42:7a:0c:
         3a:ec:51:29:59:e5:46:4b:94:3c:48:7d:8b:ed:5a:09:7e:7c:
         b7:fe:29:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:22:51 2026 by rpki-client