Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File:                     Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier:          cLtECERKdIDQQKIWUedEwC+t1IjEutZiJMMJvYGCsbE=
Subject key identifier:   01:1C:51:DB:30:73:20:6B:EA:9E:BD:F2:8F:5E:DB:54:03:07:9C:1D
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer:       /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial:       019F9247FFE19445D69A14B76BF4DC26664F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number:          1876
Signing time:             Fri 24 Jul 2026 04:00:19 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:19 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:19 +0000
Files and hashes:         1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: WYvAx5b79Wq4fTGBjZypQP/nHhygJpQjwBVCX+yEnTc=)
                          2: vOLYbuZI2HiAQAMspaYJozGTYd4.roa (hash: 2GBF+iOAjgmkpYWuKiOs1PlAzGgzPUynmOp5R9AhrOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:47:ff:e1:94:45:d6:9a:14:b7:6b:f4:dc:26:66:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
        Validity
            Not Before: Jul 24 04:00:19 2026 GMT
            Not After : Jul 25 04:00:19 2026 GMT
        Subject: CN=011c51db3073206bea9ebdf28f5edb5403079c1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3a:59:8e:29:07:0d:96:4d:0f:86:89:bd:6b:
                    5d:5a:15:2e:4a:a8:6b:0c:79:90:24:02:c6:41:ea:
                    60:55:4a:2d:37:b1:8e:5b:10:ac:69:d4:86:e2:81:
                    37:07:d7:1d:12:50:09:ce:68:7c:e0:2d:f0:14:2b:
                    8b:ae:3f:fc:13:6a:a7:a9:28:7f:1b:6a:6c:e9:aa:
                    3b:4a:28:43:7f:4b:b5:76:09:88:61:6d:b4:ca:5d:
                    7d:1d:58:5a:d9:5c:fb:4f:a2:db:34:b1:b9:cc:46:
                    0e:f1:3a:b2:78:4b:b9:34:e0:ab:d5:fe:1e:f5:df:
                    f8:3e:a6:39:ed:4d:e0:3b:80:05:ef:7f:95:2f:7e:
                    e8:7d:8a:54:62:9e:ac:81:71:b4:3b:08:bc:93:2e:
                    77:ee:d7:f6:dd:ed:b7:9c:2a:e3:2e:6b:dc:02:6e:
                    07:9c:b2:8c:45:62:ef:f7:31:e6:aa:7d:cb:88:87:
                    1e:1d:7f:d5:62:a1:58:d5:41:f4:a2:f2:8c:72:1c:
                    18:46:39:d9:27:e3:92:86:5a:a0:99:7d:31:f3:87:
                    8f:db:52:15:c0:89:ac:f6:8f:27:68:af:70:e2:02:
                    bd:77:3e:5b:38:a8:87:94:be:81:b7:7f:a2:db:dc:
                    32:71:a6:91:a3:bf:17:27:53:17:6b:d5:6f:6b:d4:
                    65:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1C:51:DB:30:73:20:6B:EA:9E:BD:F2:8F:5E:DB:54:03:07:9C:1D
            X509v3 Authority Key Identifier:
                keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:da:bc:36:6f:80:d0:40:1d:90:0c:fc:70:73:d1:16:0d:46:
         ad:c2:f4:ba:32:e9:97:e6:7b:30:9d:81:45:c3:65:90:cd:9a:
         b9:00:99:df:d8:2d:82:c7:de:ef:e0:27:6d:75:4c:f7:9b:02:
         a7:4f:ec:72:f1:ef:a2:a1:5d:5b:cf:a9:bd:b7:3d:26:5d:c0:
         7a:7d:b7:d0:e7:db:61:05:5f:c0:ab:fe:26:75:b3:ca:29:1c:
         cc:ee:ba:7c:6e:e9:17:ab:be:52:23:20:46:2c:27:59:ce:0e:
         6b:43:6b:47:6e:5a:1d:9f:ae:4f:38:98:dc:a9:e0:89:0d:15:
         21:15:7d:47:e5:4a:4a:db:72:67:44:ea:fe:32:39:27:a2:db:
         bc:c4:da:47:2c:12:d3:76:2e:ec:b3:1b:74:c6:da:50:34:ea:
         94:c9:0b:4a:da:86:3e:65:03:64:03:26:bc:a5:24:27:2a:ea:
         bb:b5:cb:ab:af:b7:61:88:0c:6d:e2:14:ee:8d:b3:a5:f0:cf:
         29:35:6c:a9:67:43:25:a9:08:6a:05:b0:8e:fd:fc:83:21:95:
         90:0d:7a:5c:a6:1e:ab:a7:ce:ae:b9:88:57:5f:39:c1:84:60:
         ef:2c:5e:13:6c:9f:56:0a:1a:06:a0:17:c2:a1:87:c8:7e:2a:
         f5:97:0a:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SR//hlEXWmhS3a/TcJmZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlY2JlZmUyMGUxODg2NmI4YTQ5MGM5NWVlNDU5OTI2NDNi
ZWQ2OWQwHhcNMjYwNzI0MDQwMDE5WhcNMjYwNzI1MDQwMDE5WjAzMTEwLwYDVQQD
EygwMTFjNTFkYjMwNzMyMDZiZWE5ZWJkZjI4ZjVlZGI1NDAzMDc5YzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTpZjikHDZZND4aJvWtdWhUuSqhr
DHmQJALGQepgVUotN7GOWxCsadSG4oE3B9cdElAJzmh84C3wFCuLrj/8E2qnqSh/
G2ps6ao7SihDf0u1dgmIYW20yl19HVha2Vz7T6LbNLG5zEYO8TqyeEu5NOCr1f4e
9d/4PqY57U3gO4AF73+VL37ofYpUYp6sgXG0Owi8ky537tf23e23nCrjLmvcAm4H
nLKMRWLv9zHmqn3LiIceHX/VYqFY1UH0ovKMchwYRjnZJ+OShlqgmX0x84eP21IV
wIms9o8naK9w4gK9dz5bOKiHlL6Bt3+i29wycaaRo78XJ1MXa9Vva9RliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEcUdswcyBr6p698o9e21QDB5wdMB8GA1UdIwQY
MBaAFA7L7+IOGIZrikkMle5FmSZDvtadMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHN2djRnNFlobXVLU1F5VjdrV1pKa08tMXAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jNzU1Y2MtNWY5MC00N2Y1LWFkZWMt
OTA1ZjI0YzI1OGVlLzEvRHN2djRnNFlobXVLU1F5VjdrV1pKa08tMXAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jNzU1Y2MtNWY5MC00N2Y1LWFkZWMtOTA1ZjI0YzI1OGVl
LzEvRHN2djRnNFlobXVLU1F5VjdrV1pKa08tMXAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9q8Nm+A
0EAdkAz8cHPRFg1GrcL0ujLpl+Z7MJ2BRcNlkM2auQCZ39gtgsfe7+AnbXVM95sC
p0/scvHvoqFdW8+pvbc9Jl3Aen230OfbYQVfwKv+JnWzyikczO66fG7pF6u+UiMg
RiwnWc4Oa0NrR25aHZ+uTziY3KngiQ0VIRV9R+VKSttyZ0Tq/jI5J6LbvMTaRywS
03Yu7LMbdMbaUDTqlMkLStqGPmUDZAMmvKUkJyrqu7XLq6+3YYgMbeIU7o2zpfDP
KTVsqWdDJakIagWwjv38gyGVkA16XKYeq6fOrrmIV185wYRg7yxeE2yfVgoaBqAX
wqGHyH4q9ZcKRQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:07:13 2026 by rpki-client