Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
File:                     1gKgc6GrxkQ1el-XOO62dqSpPcY.mft (raw, json)
Hash identifier:          9GBtRmm5FAdcWrQf6DH8+ovaYu7dQ5O82JY1aSwnq88=
Subject key identifier:   A5:A4:B5:AA:CD:D0:51:9C:2B:05:2F:EA:7A:F8:9C:88:EE:97:8A:07
Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
Certificate issuer:       /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Certificate serial:       019F8FEC6179F58B05A8235A497AF0E71454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
Manifest number:          0366
Signing time:             Thu 23 Jul 2026 17:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:00 +0000
Files and hashes:         1: 1gKgc6GrxkQ1el-XOO62dqSpPcY.crl (hash: 5XS4pWnlZMNkrceq4NNEwu1o9jFpMHDPvDqq53xPsYk=)
                          2: rK0z1TiNfJOaF3HXB1_sAZ-3RlA.roa (hash: WOLvx0AjMY9Du4g/aClrv5eIz8O7Ff49lQ/abQMFyg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:61:79:f5:8b:05:a8:23:5a:49:7a:f0:e7:14:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
        Validity
            Not Before: Jul 23 17:01:00 2026 GMT
            Not After : Jul 24 17:01:00 2026 GMT
        Subject: CN=a5a4b5aacdd0519c2b052fea7af89c88ee978a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:72:2b:ca:21:6c:89:8a:64:63:07:7a:78:
                    19:b8:79:bf:2f:f1:7b:33:23:03:48:ec:95:dd:8b:
                    21:81:7a:21:fb:e2:1d:1f:17:03:9c:30:57:4a:7b:
                    6c:87:02:fe:f0:c6:54:a4:67:1f:a0:46:e1:99:10:
                    cc:12:24:51:ce:8f:62:66:ae:eb:98:03:ca:11:3f:
                    a4:7a:e9:44:34:69:02:cc:9a:b4:3a:13:3a:c5:23:
                    61:e9:a2:bd:35:38:ef:bd:77:11:b9:93:8f:8e:0d:
                    06:94:55:d6:e4:b3:c2:d6:e5:3d:a9:7f:56:2e:5b:
                    bb:ca:92:22:45:fa:64:c9:08:a8:14:68:d7:d1:d0:
                    d8:8b:eb:55:5c:d2:cb:f9:54:d8:ef:7f:27:2c:48:
                    8c:99:48:a0:f3:fe:92:04:31:0b:91:7a:6a:28:15:
                    7c:80:2b:c1:19:75:ee:25:c4:4f:da:1e:07:24:30:
                    f8:8e:f5:75:e3:be:01:97:ab:f4:ae:5e:4f:5b:34:
                    48:aa:87:f6:60:2b:af:8b:b9:e6:0f:6f:b4:a4:4d:
                    17:65:f3:3e:dc:33:0f:fd:96:59:5d:ce:f1:95:a7:
                    3a:ad:d2:b1:7d:d8:57:ee:ab:b4:6f:ea:3b:00:2a:
                    93:4a:2c:b3:29:6c:c7:13:45:69:49:6d:72:1c:c0:
                    70:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A4:B5:AA:CD:D0:51:9C:2B:05:2F:EA:7A:F8:9C:88:EE:97:8A:07
            X509v3 Authority Key Identifier:
                keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:37:6c:5c:85:8f:72:cb:c6:97:cc:dc:df:f7:c8:c1:54:b5:
         b0:e5:5b:e1:ff:63:5b:86:29:73:11:1b:20:89:04:4c:5f:36:
         dc:cb:8d:50:2a:f1:b8:4b:b3:8c:2a:96:26:77:80:b1:3f:9a:
         f2:5a:21:03:4d:13:49:5e:96:d1:40:e0:bb:4b:fe:2f:0c:f6:
         a7:bb:9a:19:6c:14:b2:28:59:7f:82:c1:84:5e:7c:1d:6b:c8:
         4f:a3:fd:c7:81:c0:2f:19:dd:cc:b9:0f:64:b4:db:99:38:13:
         2a:b6:3c:99:7f:51:9e:3c:68:c0:48:cf:f0:df:f2:a7:8f:65:
         42:ca:33:c1:5f:4a:7a:26:4a:17:0c:ae:a0:ba:db:7d:1e:85:
         50:9c:2b:72:13:47:75:de:89:8c:ff:f0:50:c2:f7:a2:90:c2:
         e6:80:eb:bb:bc:b6:7b:6c:f7:fb:ec:31:d8:f8:6c:f4:35:6d:
         ee:68:8c:0d:a3:fe:a6:ce:75:84:6d:88:00:03:69:4d:73:47:
         e8:00:98:a9:f9:ae:4a:a4:75:1d:4c:f0:f3:3a:e5:97:c5:9e:
         41:9a:9f:3e:29:67:b3:72:61:ad:15:2a:d6:ea:8c:07:cd:c6:
         ca:a8:ce:06:9f:ef:f7:d3:1e:10:52:68:13:4a:5f:2a:34:70:
         58:ee:a4:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7GF59YsFqCNaSXrw5xRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDJhMDczYTFhYmM2NDQzNTdhNWY5NzM4ZWViNjc2YTRh
OTNkYzYwHhcNMjYwNzIzMTcwMTAwWhcNMjYwNzI0MTcwMTAwWjAzMTEwLwYDVQQD
EyhhNWE0YjVhYWNkZDA1MTljMmIwNTJmZWE3YWY4OWM4OGVlOTc4YTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoylyK8ohbImKZGMHengZuHm/L/F7
MyMDSOyV3YshgXoh++IdHxcDnDBXSntshwL+8MZUpGcfoEbhmRDMEiRRzo9iZq7r
mAPKET+keulENGkCzJq0OhM6xSNh6aK9NTjvvXcRuZOPjg0GlFXW5LPC1uU9qX9W
Llu7ypIiRfpkyQioFGjX0dDYi+tVXNLL+VTY738nLEiMmUig8/6SBDELkXpqKBV8
gCvBGXXuJcRP2h4HJDD4jvV1474Bl6v0rl5PWzRIqof2YCuvi7nmD2+0pE0XZfM+
3DMP/ZZZXc7xlac6rdKxfdhX7qu0b+o7ACqTSiyzKWzHE0VpSW1yHMBwGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKWktarN0FGcKwUv6nr4nIjul4oHMB8GA1UdIwQY
MBaAFNYCoHOhq8ZENXpflzjutnakqT3GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdLZ2M2R3J4a1ExZWwtWE9PNjJkcVNwUGNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83MmJkODgtYTBiNC00ZGU0LWE2NTYt
MjhhMTU0MDQ0NTNlLzEvMWdLZ2M2R3J4a1ExZWwtWE9PNjJkcVNwUGNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83MmJkODgtYTBiNC00ZGU0LWE2NTYtMjhhMTU0MDQ0NTNl
LzEvMWdLZ2M2R3J4a1ExZWwtWE9PNjJkcVNwUGNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajdsXIWP
csvGl8zc3/fIwVS1sOVb4f9jW4YpcxEbIIkETF823MuNUCrxuEuzjCqWJneAsT+a
8lohA00TSV6W0UDgu0v+Lwz2p7uaGWwUsihZf4LBhF58HWvIT6P9x4HALxndzLkP
ZLTbmTgTKrY8mX9RnjxowEjP8N/yp49lQsozwV9KeiZKFwyuoLrbfR6FUJwrchNH
dd6JjP/wUML3opDC5oDru7y2e2z3++wx2Phs9DVt7miMDaP+ps51hG2IAANpTXNH
6ACYqfmuSqR1HUzw8zrll8WeQZqfPilns3JhrRUq1uqMB83GyqjOBp/v99MeEFJo
E0pfKjRwWO6kCA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:52:00 2026 by rpki-client