Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
File:                     91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json)
Hash identifier:          u1n26kVu+7LdOO0UR6ri6YyoZFgJfagpz/Mt1Zeicf0=
Subject key identifier:   78:00:92:F8:12:9C:D5:FA:31:59:7E:EA:24:D8:E3:65:DC:0A:CD:14
Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
Certificate issuer:       /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Certificate serial:       01A0CC352EB450C35DC2850FC5308A97C13B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
Manifest number:          15F0
Signing time:             Wed 23 Sep 2026 03:00:32 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:32 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:32 +0000
Files and hashes:         1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: JVon/hNZlPk6ijGULLFh4xkc3jR0W8GAtHyw3WqY+Do=)
                          2: zzK4qCAtynNjDjZWUiRCQn5dpDk.roa (hash: E6+IdS0ezqI3UKO4kCUBOk2GF16tHu1sV21TlzMQxMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:2e:b4:50:c3:5d:c2:85:0f:c5:30:8a:97:c1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
        Validity
            Not Before: Sep 23 03:00:32 2026 GMT
            Not After : Sep 24 03:00:32 2026 GMT
        Subject: CN=780092f8129cd5fa31597eea24d8e365dc0acd14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:81:be:60:75:16:eb:4f:b7:f8:82:57:b5:
                    3e:db:cf:03:38:93:8c:a2:aa:12:3a:4b:0b:57:4c:
                    c2:9c:d8:b6:04:55:99:d5:f3:f3:fd:33:0a:6e:d4:
                    55:10:6c:aa:b6:b3:fe:8d:c0:a6:5a:e7:c4:f4:38:
                    3d:8c:c8:be:66:26:b8:1c:89:8c:e9:ba:20:b2:ed:
                    a4:25:97:90:4f:4b:b8:be:cf:b4:03:60:cb:92:cc:
                    78:f9:4a:8f:c6:30:b3:78:bb:06:ee:66:46:c5:f2:
                    e1:b4:c6:e8:9f:ef:dc:b4:50:d8:27:ea:a0:c1:86:
                    6b:1b:24:ba:ce:4c:a3:1f:b8:7b:e1:01:74:c5:a4:
                    84:ae:c3:e2:70:8e:53:67:d9:3b:7b:2e:0b:dd:63:
                    46:11:fc:1c:12:42:40:16:8f:02:ca:48:10:71:e6:
                    d0:00:37:23:f0:0e:53:89:6f:da:a3:17:f3:c5:52:
                    b5:35:a7:78:a4:e4:29:34:26:17:a8:eb:ba:07:af:
                    39:1f:f6:b3:04:0a:13:ef:c3:93:63:b9:ac:60:b7:
                    88:dc:ae:9a:cd:22:c6:7e:0e:02:ba:55:70:1d:76:
                    a8:f6:71:8b:c8:50:e8:62:ac:c7:a2:83:7f:96:0f:
                    56:e6:50:9c:fc:d8:68:36:05:d2:0e:aa:18:c4:1e:
                    b7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:00:92:F8:12:9C:D5:FA:31:59:7E:EA:24:D8:E3:65:DC:0A:CD:14
            X509v3 Authority Key Identifier:
                keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b2:4c:ce:82:31:cd:21:7e:c8:da:47:c1:c6:cd:3b:08:71:
         b5:1c:93:0f:b4:7a:b8:8c:f3:43:5c:79:f5:09:f5:63:cd:7f:
         a4:8e:d5:32:da:52:0f:cf:48:fe:3f:32:e5:4b:c7:70:55:cc:
         b1:de:3c:21:3c:31:ff:64:03:13:ca:41:18:ab:75:23:eb:20:
         67:31:34:1a:e9:97:27:0a:0b:60:66:8a:3a:f9:69:d3:94:a1:
         82:e7:07:14:c8:7a:f3:c5:32:b9:c1:c1:d2:4f:d4:69:56:58:
         1e:45:4a:21:85:dc:a7:0e:63:70:a7:5c:a2:d1:37:a7:6a:d4:
         04:7a:46:50:7a:0e:48:d1:77:d6:0a:50:d5:62:12:db:03:0d:
         57:6b:5f:b6:db:c6:ca:88:1b:ba:25:13:f3:12:4e:84:7a:64:
         eb:92:84:65:93:98:30:d9:da:07:9f:5a:0f:4b:3e:ab:0c:de:
         85:ea:84:d6:28:d8:64:ec:b1:cb:b4:d3:25:4e:23:6f:42:e2:
         11:fc:19:0a:a3:bd:66:1c:e9:cc:db:e6:1e:9e:03:33:af:78:
         79:d6:cc:ab:2c:9e:72:34:5a:b3:80:3d:30:41:6e:e4:43:d6:
         d6:e9:81:23:08:46:9a:41:85:09:04:04:98:eb:f0:8f:89:c7:
         b5:11:c7:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNS60UMNdwoUPxTCKl8E7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWIwMmEyOWM3NjZlNWIxM2IzZWIxNzZhOTcxYzEyZGRl
MWQ0Y2UwHhcNMjYwOTIzMDMwMDMyWhcNMjYwOTI0MDMwMDMyWjAzMTEwLwYDVQQD
Eyg3ODAwOTJmODEyOWNkNWZhMzE1OTdlZWEyNGQ4ZTM2NWRjMGFjZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0yBvmB1FutPt/iCV7U+288DOJOM
oqoSOksLV0zCnNi2BFWZ1fPz/TMKbtRVEGyqtrP+jcCmWufE9Dg9jMi+Zia4HImM
6bogsu2kJZeQT0u4vs+0A2DLksx4+UqPxjCzeLsG7mZGxfLhtMbon+/ctFDYJ+qg
wYZrGyS6zkyjH7h74QF0xaSErsPicI5TZ9k7ey4L3WNGEfwcEkJAFo8CykgQcebQ
ADcj8A5TiW/aoxfzxVK1Nad4pOQpNCYXqOu6B685H/azBAoT78OTY7msYLeI3K6a
zSLGfg4CulVwHXao9nGLyFDoYqzHooN/lg9W5lCc/NhoNgXSDqoYxB632QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgAkvgSnNX6MVl+6iTY42XcCs0UMB8GA1UdIwQY
MBaAFPdbAqKcdm5bE7PrF2qXHBLd4dTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYt
YmNkYmI1NDJjYjVhLzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8wYTlmZjItN2RmOC00M2YzLWEzMWYtYmNkYmI1NDJjYjVh
LzEvOTFzQ29weDJibHNUcy1zWGFwY2NFdDNoMU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsrJMzoIx
zSF+yNpHwcbNOwhxtRyTD7R6uIzzQ1x59Qn1Y81/pI7VMtpSD89I/j8y5UvHcFXM
sd48ITwx/2QDE8pBGKt1I+sgZzE0GumXJwoLYGaKOvlp05ShgucHFMh688UyucHB
0k/UaVZYHkVKIYXcpw5jcKdcotE3p2rUBHpGUHoOSNF31gpQ1WIS2wMNV2tfttvG
yogbuiUT8xJOhHpk65KEZZOYMNnaB59aD0s+qwzeheqE1ijYZOyxy7TTJU4jb0Li
EfwZCqO9ZhzpzNvmHp4DM694edbMqyyecjRas4A9MEFu5EPW1umBIwhGmkGFCQQE
mOvwj4nHtRHHoQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 12:29:48 2026 by rpki-client