Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
File:                     1dhc7fCdgveSwYDZClqaI21qcFw.mft (raw, json)
Hash identifier:          QcHe3iP2VJYFrKS6Zl45jb4mZm1QFVyQb5MGyVZ5uLI=
Subject key identifier:   73:4C:AF:04:11:DB:06:FD:5A:BA:B3:12:92:F7:FC:E1:6E:3F:90:72
Authority key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Certificate issuer:       /CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Certificate serial:       01A0D0800EAC34E928EFB949F3A11EB405D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
Manifest number:          1A68
Signing time:             Wed 23 Sep 2026 23:00:48 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:48 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:48 +0000
Files and hashes:         1: 1dhc7fCdgveSwYDZClqaI21qcFw.crl (hash: iWOxUJJi79vZpVIckWRNsx+fkHmp1hN1SOzadAmhPJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:80:0e:ac:34:e9:28:ef:b9:49:f3:a1:1e:b4:05:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
        Validity
            Not Before: Sep 23 23:00:48 2026 GMT
            Not After : Sep 24 23:00:48 2026 GMT
        Subject: CN=734caf0411db06fd5abab31292f7fce16e3f9072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f3:6f:32:ab:0c:b2:46:16:79:83:18:f3:29:
                    e9:c2:59:65:00:cd:03:fa:a5:cf:37:3c:2f:bb:4a:
                    87:4d:ec:7b:05:99:bc:6a:ee:ca:91:d0:24:01:51:
                    37:36:4e:a6:14:38:f2:bf:4c:15:bc:27:33:89:fd:
                    aa:b4:9c:37:77:87:37:54:9f:a9:32:a7:d9:3c:d7:
                    8d:f6:da:02:6e:f7:ba:f5:32:63:72:7d:26:df:a2:
                    2f:b3:a7:dd:93:89:65:0c:05:47:1c:f8:21:16:1c:
                    12:f4:03:cb:a3:22:fe:8a:1f:ab:94:bc:af:81:0e:
                    9d:2f:2f:18:4a:5e:0e:5d:d2:74:21:05:8f:7b:ae:
                    5f:e5:49:e5:59:96:5b:3f:f8:a8:99:29:03:66:91:
                    5f:bd:bf:2a:d4:5b:ff:c7:d3:37:b2:02:57:be:1c:
                    0e:8d:c9:91:86:64:a0:04:9c:7d:fb:2d:28:77:46:
                    67:18:06:6f:f0:b9:f5:3a:bc:a8:32:bb:4e:43:d7:
                    54:11:d6:4d:b9:4e:31:aa:19:25:a0:7e:5f:b2:50:
                    5c:dc:77:17:da:79:83:fa:7b:42:a7:d9:ec:c3:3b:
                    1c:b8:d7:f2:09:70:25:29:0c:7c:fa:db:ef:d5:e5:
                    1c:00:4d:08:31:6e:b2:07:5b:26:4e:2a:b9:2b:d2:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4C:AF:04:11:DB:06:FD:5A:BA:B3:12:92:F7:FC:E1:6E:3F:90:72
            X509v3 Authority Key Identifier:
                keyid:D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a5:25:9c:41:9b:9b:65:ea:b4:b9:bf:8f:ca:23:4a:f5:ff:
         25:6c:bf:e6:a8:88:df:6d:ba:bc:63:57:71:83:a5:04:7e:e3:
         e5:25:9c:7c:d8:fc:79:76:2c:e5:7b:6c:f8:0d:ad:f8:9f:1c:
         42:4c:08:1f:16:56:a4:6e:b6:81:e2:ac:2f:c0:b9:ce:8e:ec:
         b6:19:f3:1f:6e:2e:a8:d5:5c:5b:07:04:2f:7d:03:53:53:ad:
         67:41:46:e4:4b:e9:68:06:04:89:ad:2d:95:10:93:cc:f7:80:
         72:41:11:30:ba:0b:3c:33:fa:79:63:a7:ac:ec:ca:08:b2:e0:
         84:80:af:20:a1:58:0a:3c:c1:88:1d:3f:f0:1d:0c:2f:80:a0:
         7a:e7:6a:18:55:f5:c4:55:d2:74:ef:c8:a0:e4:a0:a6:73:ba:
         78:ca:51:7a:91:c6:56:9c:93:30:af:19:55:b9:a3:a1:6e:cf:
         76:cf:1d:4e:8b:ed:71:ac:74:9d:bc:b0:03:6a:a0:32:a6:25:
         72:5e:c5:aa:75:bc:ae:d6:37:7e:43:52:fd:5d:ba:3f:49:cd:
         08:1d:d0:6d:7b:52:55:13:b4:0c:b3:35:26:51:7f:17:76:0b:
         79:4c:eb:46:ce:ba:27:44:69:9a:72:cc:02:d5:bb:ac:a0:1c:
         af:a5:8c:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQgA6sNOko77lJ86EetAXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDg1Y2VkZjA5ZDgyZjc5MmMxODBkOTBhNWE5YTIzNmQ2
YTcwNWMwHhcNMjYwOTIzMjMwMDQ4WhcNMjYwOTI0MjMwMDQ4WjAzMTEwLwYDVQQD
Eyg3MzRjYWYwNDExZGIwNmZkNWFiYWIzMTI5MmY3ZmNlMTZlM2Y5MDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvNvMqsMskYWeYMY8ynpwlllAM0D
+qXPNzwvu0qHTex7BZm8au7KkdAkAVE3Nk6mFDjyv0wVvCczif2qtJw3d4c3VJ+p
MqfZPNeN9toCbve69TJjcn0m36Ivs6fdk4llDAVHHPghFhwS9APLoyL+ih+rlLyv
gQ6dLy8YSl4OXdJ0IQWPe65f5UnlWZZbP/iomSkDZpFfvb8q1Fv/x9M3sgJXvhwO
jcmRhmSgBJx9+y0od0ZnGAZv8Ln1OryoMrtOQ9dUEdZNuU4xqhkloH5fslBc3HcX
2nmD+ntCp9nswzscuNfyCXAlKQx8+tvv1eUcAE0IMW6yB1smTiq5K9KpkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNMrwQR2wb9WrqzEpL3/OFuP5ByMB8GA1UdIwQY
MBaAFNXYXO3wnYL3ksGA2QpamiNtanBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAt
YjFmN2M3MWIyMDFiLzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAtYjFmN2M3MWIyMDFi
LzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkqUlnEGb
m2XqtLm/j8ojSvX/JWy/5qiI3226vGNXcYOlBH7j5SWcfNj8eXYs5Xts+A2t+J8c
QkwIHxZWpG62geKsL8C5zo7sthnzH24uqNVcWwcEL30DU1OtZ0FG5EvpaAYEia0t
lRCTzPeAckERMLoLPDP6eWOnrOzKCLLghICvIKFYCjzBiB0/8B0ML4CgeudqGFX1
xFXSdO/IoOSgpnO6eMpRepHGVpyTMK8ZVbmjoW7Pds8dTovtcax0nbywA2qgMqYl
cl7FqnW8rtY3fkNS/V26P0nNCB3QbXtSVRO0DLM1JlF/F3YLeUzrRs66J0RpmnLM
AtW7rKAcr6WMjw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:04 2026 by rpki-client