Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
File:                     33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json)
Hash identifier:          7Zd2ehDh0m0PMpC2d29k/dYhBNt27qc1vbTQuM1RPm0=
Subject key identifier:   C5:D1:00:34:F0:F6:3B:9A:1A:4A:14:EE:77:B3:51:34:FD:2E:F4:D5
Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77
Certificate issuer:       /CN=df77662f60b5c41032e0535ee727184e3adb7b77
Certificate serial:       019F8F7EC06AA57A8C7864B4C640CDDEC21F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
Manifest number:          181C
Signing time:             Thu 23 Jul 2026 15:01:16 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:16 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:16 +0000
Files and hashes:         1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: eVIZwN0hfyj0+LLYw+PE0vtOzbJHEE4zsBPAL47bLHY=)
                          2: awGbKeiIXvU216fzJMCxNDxUUJY.roa (hash: piofhzgTxalrRmezqZx4jWP4SBJFItloggR8CaiMj4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:c0:6a:a5:7a:8c:78:64:b4:c6:40:cd:de:c2:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77
        Validity
            Not Before: Jul 23 15:01:16 2026 GMT
            Not After : Jul 24 15:01:16 2026 GMT
        Subject: CN=c5d10034f0f63b9a1a4a14ee77b35134fd2ef4d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5e:a6:17:42:c5:45:f0:0c:26:ca:04:b8:8a:
                    81:89:71:9b:21:b3:f2:16:20:16:da:c8:60:88:0c:
                    d1:f4:7f:a9:eb:03:57:9e:ae:45:77:47:2f:5d:e7:
                    36:15:a1:07:50:7b:65:c6:8f:29:be:fc:87:bc:75:
                    17:fa:f4:a1:1a:56:70:78:45:75:fd:11:e7:6a:5e:
                    f1:11:5d:17:e5:79:56:2c:42:33:23:e0:22:72:b5:
                    09:47:b5:18:a1:b0:aa:f0:17:32:6c:2e:39:23:43:
                    dc:dc:07:1f:f3:d4:a4:fd:0e:5f:ce:d8:c0:6b:d2:
                    56:e8:7e:1a:b3:20:8b:da:f2:db:1d:15:e2:f5:0a:
                    75:7c:c1:5a:e8:3d:b6:14:9c:d9:a1:c7:79:b5:38:
                    55:35:7f:7a:2d:71:f8:83:3e:a5:7c:ce:a5:4a:5a:
                    08:65:87:38:86:be:cb:67:92:4e:72:e6:5e:ff:05:
                    5e:43:3d:6d:f6:4f:74:35:46:8a:b4:cc:c3:8e:32:
                    ab:a3:9c:05:f2:c4:7d:59:2b:57:8f:fa:aa:db:a5:
                    d8:65:2b:da:b8:5a:86:3e:fa:69:f3:48:0b:8d:6d:
                    c5:59:dd:49:60:49:ff:e7:49:1a:01:65:c3:87:57:
                    ab:f1:e2:df:bf:a1:36:c6:92:e6:1d:0f:26:4c:46:
                    cc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D1:00:34:F0:F6:3B:9A:1A:4A:14:EE:77:B3:51:34:FD:2E:F4:D5
            X509v3 Authority Key Identifier:
                keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a3:08:af:7f:29:50:00:27:4c:ba:51:02:c3:53:42:b7:58:
         8d:fe:7f:c7:95:ce:43:60:b2:28:ff:2e:8c:53:19:b5:36:ec:
         e9:f3:7b:85:51:b1:4b:f1:0c:c6:d3:b6:9c:88:5d:a6:47:37:
         b5:2b:1d:8d:b1:1d:eb:8b:09:6b:5e:4e:ac:c8:b3:cd:41:ac:
         7b:c6:2b:28:c0:69:77:97:d2:69:de:90:78:ef:c2:ec:ac:10:
         88:14:1b:d9:c2:d5:a6:f2:8c:82:ca:b2:7b:77:be:9b:01:69:
         1c:e6:74:52:cb:1f:59:7c:94:02:53:a4:65:88:68:b6:a0:7f:
         4d:e0:8d:36:d5:ff:e7:6f:b1:da:2e:83:58:20:fc:8e:a0:69:
         2a:0a:86:e0:2a:b1:92:82:91:62:ba:77:b0:af:b0:eb:e3:5a:
         c4:db:16:31:b9:76:08:f6:da:2b:3c:0a:95:cd:59:8a:80:77:
         38:b7:8c:25:1b:70:ac:b4:3e:76:00:cd:01:b4:28:b5:e0:41:
         8b:1e:e7:dd:11:d9:d4:0a:e4:d3:74:00:af:8f:04:df:ba:c6:
         86:c0:3e:d2:29:d1:ad:0a:ad:3c:e7:09:c8:a4:fc:a2:21:a8:
         70:08:48:9e:37:19:3b:ae:af:29:1f:c2:fa:d4:bb:21:bc:09:
         54:9e:44:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfsBqpXqMeGS0xkDN3sIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmNzc2NjJmNjBiNWM0MTAzMmUwNTM1ZWU3MjcxODRlM2Fk
YjdiNzcwHhcNMjYwNzIzMTUwMTE2WhcNMjYwNzI0MTUwMTE2WjAzMTEwLwYDVQQD
EyhjNWQxMDAzNGYwZjYzYjlhMWE0YTE0ZWU3N2IzNTEzNGZkMmVmNGQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAll6mF0LFRfAMJsoEuIqBiXGbIbPy
FiAW2shgiAzR9H+p6wNXnq5Fd0cvXec2FaEHUHtlxo8pvvyHvHUX+vShGlZweEV1
/RHnal7xEV0X5XlWLEIzI+AicrUJR7UYobCq8BcybC45I0Pc3Acf89Sk/Q5fztjA
a9JW6H4asyCL2vLbHRXi9Qp1fMFa6D22FJzZocd5tThVNX96LXH4gz6lfM6lSloI
ZYc4hr7LZ5JOcuZe/wVeQz1t9k90NUaKtMzDjjKro5wF8sR9WStXj/qq26XYZSva
uFqGPvpp80gLjW3FWd1JYEn/50kaAWXDh1er8eLfv6E2xpLmHQ8mTEbMYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXRADTw9juaGkoU7nezUTT9LvTVMB8GA1UdIwQY
MBaAFN93Zi9gtcQQMuBTXucnGE4623t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2Yt
NDEwNWY4YTNiYjljLzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2YtNDEwNWY4YTNiYjlj
LzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV6MIr38p
UAAnTLpRAsNTQrdYjf5/x5XOQ2CyKP8ujFMZtTbs6fN7hVGxS/EMxtO2nIhdpkc3
tSsdjbEd64sJa15OrMizzUGse8YrKMBpd5fSad6QeO/C7KwQiBQb2cLVpvKMgsqy
e3e+mwFpHOZ0UssfWXyUAlOkZYhotqB/TeCNNtX/52+x2i6DWCD8jqBpKgqG4Cqx
koKRYrp3sK+w6+NaxNsWMbl2CPbaKzwKlc1ZioB3OLeMJRtwrLQ+dgDNAbQoteBB
ix7n3RHZ1Ark03QAr48E37rGhsA+0inRrQqtPOcJyKT8oiGocAhInjcZO66vKR/C
+tS7IbwJVJ5EsA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:12:51 2026 by rpki-client