Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
File:                     74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft (raw, json)
Hash identifier:          VSeeur2d98RMNOrR0OD8Dw4PuAhiR5LDfU7Gk+vGznE=
Subject key identifier:   C0:9B:3F:38:B7:BD:2E:39:02:C5:E8:B6:84:0E:AD:7C:91:89:72:B9
Authority key identifier: EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4
Certificate issuer:       /CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
Certificate serial:       01A0EDAF9DF74850A7A452E0FB323998E84F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
Manifest number:          0C15
Signing time:             Tue 29 Sep 2026 15:01:44 +0000
Manifest this update:     Tue 29 Sep 2026 15:01:44 +0000
Manifest next update:     Wed 30 Sep 2026 15:01:44 +0000
Files and hashes:         1: 3nO3Eu2HYNgfsHOzOD5IS3szUzQ.roa (hash: CLkZIvvir/OJbbrzSfgsy0YtbLrBe518P4dyR0joX20=)
                          2: 74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl (hash: ae3rQ6zi41GzBusHes8tSLNB//TgEgE+JXE/M5eIZwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:af:9d:f7:48:50:a7:a4:52:e0:fb:32:39:98:e8:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef803a490fd6203518bbe644bc7209afb77ec7b4
        Validity
            Not Before: Sep 29 15:01:44 2026 GMT
            Not After : Sep 30 15:01:44 2026 GMT
        Subject: CN=c09b3f38b7bd2e3902c5e8b6840ead7c918972b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:be:a6:a3:d4:0f:04:18:65:18:e4:39:b6:47:
                    e0:9b:66:4e:e0:50:18:b4:74:ed:05:cd:9d:84:75:
                    24:0c:f6:36:27:43:85:c7:fb:0f:89:06:4c:9d:5d:
                    60:28:a7:c6:7a:b4:30:ec:23:6c:6e:7c:d8:20:b6:
                    8d:c7:5e:86:c7:96:af:20:7b:18:8e:48:4e:7d:5d:
                    02:b5:fc:5f:5d:b3:fc:86:c4:d2:d7:06:0b:b9:ec:
                    6a:a6:16:5e:93:d3:46:95:c6:51:a7:52:f2:41:b3:
                    88:6d:3b:aa:f8:ba:2e:77:84:3b:b4:39:76:75:e8:
                    4d:9f:b3:13:d8:46:62:67:e3:4a:51:98:0c:0e:71:
                    dd:2f:36:0e:81:a0:49:40:a0:f5:07:e7:08:52:9e:
                    6d:13:e7:ab:ba:a0:68:3c:27:da:17:54:c1:5c:b4:
                    01:73:c2:53:ac:6f:f2:bd:2f:c7:c1:ed:db:13:06:
                    66:1c:52:7e:42:15:3b:c8:ca:6b:0d:b0:9a:bf:0a:
                    09:26:ba:ed:72:b1:81:6a:1d:5c:b0:18:23:19:bc:
                    e5:f6:8c:20:8f:1c:38:5c:31:8f:15:92:db:2e:e6:
                    ce:7b:4c:54:1b:4f:63:05:6c:19:fb:7a:b8:c6:b7:
                    3e:7f:fb:90:f1:aa:09:90:df:d3:77:ee:b2:b2:75:
                    fb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9B:3F:38:B7:BD:2E:39:02:C5:E8:B6:84:0E:AD:7C:91:89:72:B9
            X509v3 Authority Key Identifier:
                keyid:EF:80:3A:49:0F:D6:20:35:18:BB:E6:44:BC:72:09:AF:B7:7E:C7:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8c48ac-d96a-441a-b186-8787d0bf1207/1/74A6SQ_WIDUYu-ZEvHIJr7d-x7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f4:84:b3:85:3f:5a:78:d4:ee:63:22:6c:43:1f:65:b6:87:
         3c:50:f5:50:b2:83:59:d9:be:f0:cd:84:df:87:8b:11:f7:7d:
         a2:25:f5:a3:54:ac:ed:65:5f:03:3e:5a:82:19:9e:d4:0c:98:
         1b:61:a7:85:2f:64:d4:37:46:70:d4:56:5b:fa:9d:88:e9:01:
         6a:dc:20:64:08:e7:17:30:36:29:4b:d1:cb:07:2c:4e:32:f4:
         f1:1a:1b:2c:82:13:fd:06:7e:fa:88:64:c9:6f:79:7c:b9:9b:
         a7:f8:2d:41:31:9a:64:e1:50:84:8d:a8:4c:c9:18:65:1f:0a:
         93:fe:62:27:93:9f:d9:91:6e:17:29:2b:d5:97:c8:e3:93:be:
         47:9b:1b:f3:bd:f4:f3:d9:23:41:a6:8e:b1:bc:6f:59:02:e8:
         f0:5c:ae:65:4d:a0:ef:e5:63:ea:ef:30:2d:b4:43:4c:2f:7a:
         dc:4a:7a:71:20:c8:14:3a:ca:2d:97:55:21:b8:32:b1:6b:4c:
         d2:74:4d:1e:07:c3:0c:c8:04:0d:0d:c0:35:4c:4a:3c:9b:29:
         5c:6a:81:4c:20:1d:0e:7a:15:b0:62:9d:ce:d9:aa:9d:bc:53:
         ee:8c:e6:8a:d9:93:ee:a2:e6:40:42:56:83:05:e6:a6:41:32:
         ea:17:f7:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDtr533SFCnpFLg+zI5mOhPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmODAzYTQ5MGZkNjIwMzUxOGJiZTY0NGJjNzIwOWFmYjc3
ZWM3YjQwHhcNMjYwOTI5MTUwMTQ0WhcNMjYwOTMwMTUwMTQ0WjAzMTEwLwYDVQQD
EyhjMDliM2YzOGI3YmQyZTM5MDJjNWU4YjY4NDBlYWQ3YzkxODk3MmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4L6mo9QPBBhlGOQ5tkfgm2ZO4FAY
tHTtBc2dhHUkDPY2J0OFx/sPiQZMnV1gKKfGerQw7CNsbnzYILaNx16Gx5avIHsY
jkhOfV0CtfxfXbP8hsTS1wYLuexqphZek9NGlcZRp1LyQbOIbTuq+Loud4Q7tDl2
dehNn7MT2EZiZ+NKUZgMDnHdLzYOgaBJQKD1B+cIUp5tE+eruqBoPCfaF1TBXLQB
c8JTrG/yvS/Hwe3bEwZmHFJ+QhU7yMprDbCavwoJJrrtcrGBah1csBgjGbzl9owg
jxw4XDGPFZLbLubOe0xUG09jBWwZ+3q4xrc+f/uQ8aoJkN/Td+6ysnX7IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCbPzi3vS45AsXotoQOrXyRiXK5MB8GA1UdIwQY
MBaAFO+AOkkP1iA1GLvmRLxyCa+3fse0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84YzQ4YWMtZDk2YS00NDFhLWIxODYt
ODc4N2QwYmYxMjA3LzEvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC84YzQ4YWMtZDk2YS00NDFhLWIxODYtODc4N2QwYmYxMjA3
LzEvNzRBNlNRX1dJRFVZdS1aRXZISUpyN2QteDdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvSEs4U/
WnjU7mMibEMfZbaHPFD1ULKDWdm+8M2E34eLEfd9oiX1o1Ss7WVfAz5aghme1AyY
G2GnhS9k1DdGcNRWW/qdiOkBatwgZAjnFzA2KUvRywcsTjL08RobLIIT/QZ++ohk
yW95fLmbp/gtQTGaZOFQhI2oTMkYZR8Kk/5iJ5Of2ZFuFykr1ZfI45O+R5sb8730
89kjQaaOsbxvWQLo8FyuZU2g7+Vj6u8wLbRDTC963Ep6cSDIFDrKLZdVIbgysWtM
0nRNHgfDDMgEDQ3ANUxKPJspXGqBTCAdDnoVsGKdztmqnbxT7ozmitmT7qLmQEJW
gwXmpkEy6hf36g==
-----END CERTIFICATE-----
Generated at Tue Sep 29 19:34:47 2026 by rpki-client