Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
File:                     1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft (raw, json)
Hash identifier:          7zzXMdQkT/uaaIzLXLSePgj4WZeVvwoZzVEebXjwSSY=
Subject key identifier:   C3:C0:52:5E:C7:50:54:1E:0A:6F:E9:8E:40:27:B0:3E:AF:E0:CE:84
Authority key identifier: D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C
Certificate issuer:       /CN=d46c4359926ac7f3acf8dc520e787a366271387c
Certificate serial:       01A0E7E4433E6D4EA53ADA8F09594A57BCA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
Manifest number:          0879
Signing time:             Mon 28 Sep 2026 12:01:31 +0000
Manifest this update:     Mon 28 Sep 2026 12:01:31 +0000
Manifest next update:     Tue 29 Sep 2026 12:01:31 +0000
Files and hashes:         1: 1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl (hash: GPLU1Pbf1gpEi5WcA8JKZ8efFedEqOlVKolrCbdxpjs=)
                          2: rdRK4HKKePC5wQDyC11wkiwopqw.roa (hash: qa/S5O84ZAb8y1Kb/hqHJSvhVOMhRujyJpiZNbcCAnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 08:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:e4:43:3e:6d:4e:a5:3a:da:8f:09:59:4a:57:bc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c4359926ac7f3acf8dc520e787a366271387c
        Validity
            Not Before: Sep 28 12:01:31 2026 GMT
            Not After : Sep 29 12:01:31 2026 GMT
        Subject: CN=c3c0525ec750541e0a6fe98e4027b03eafe0ce84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:0b:04:a8:76:e2:09:9f:ad:ef:f9:6a:b9:
                    b0:b2:8c:70:68:96:30:79:67:fd:81:af:5d:59:87:
                    26:6f:83:9d:fb:77:28:68:7b:d5:b4:74:b3:a8:92:
                    43:5c:14:d2:71:2e:45:fb:35:09:2b:93:8e:c4:0f:
                    a9:a0:c0:ea:f4:6c:9a:b2:a8:d8:25:62:0f:5e:84:
                    fc:86:09:7e:dd:f9:b3:da:a8:44:38:ac:23:f1:04:
                    c1:ce:f7:a2:79:ec:ff:70:89:73:59:6c:84:8d:af:
                    0a:98:d2:19:55:16:c3:1a:96:bc:88:80:03:d3:da:
                    dc:25:0b:ca:e9:a9:f3:c4:04:96:aa:c2:90:a2:9a:
                    53:89:cd:18:d8:44:c7:1f:9f:2e:f2:2d:19:62:4d:
                    f3:09:32:59:99:10:34:08:b8:ac:3a:23:4e:e6:e3:
                    0b:a2:9f:12:4c:8f:03:36:1e:ed:a8:ae:b0:d8:27:
                    31:d4:f2:45:30:33:6e:52:b8:71:00:25:4d:e0:0a:
                    94:39:8f:44:a3:23:57:da:b9:7d:6d:78:af:5f:42:
                    4f:7a:e2:87:53:0b:ca:0c:26:b1:b1:cb:92:a1:b1:
                    b2:47:bf:73:6b:ec:93:90:40:e4:6f:d3:7e:1e:2f:
                    7c:89:8a:d0:87:e0:16:4d:6d:b2:64:2c:1f:d4:f0:
                    ef:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C0:52:5E:C7:50:54:1E:0A:6F:E9:8E:40:27:B0:3E:AF:E0:CE:84
            X509v3 Authority Key Identifier:
                keyid:D4:6C:43:59:92:6A:C7:F3:AC:F8:DC:52:0E:78:7A:36:62:71:38:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GxDWZJqx_Os-NxSDnh6NmJxOHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/723f34-7b2d-4ad3-a4ac-44179bee149a/1/1GxDWZJqx_Os-NxSDnh6NmJxOHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:14:31:6d:65:f8:d4:59:fa:95:98:74:84:73:f9:39:8b:6b:
         bf:bf:54:ea:42:03:fa:26:1c:8a:c6:1b:26:3c:5b:50:09:aa:
         af:51:47:94:7b:aa:ef:ee:dd:16:e0:7a:53:9a:64:87:c6:1b:
         17:c4:29:06:6c:67:cc:08:09:b8:4b:0f:b0:04:f2:a6:0f:e5:
         8f:2a:90:50:86:7a:07:e4:b0:77:11:23:b0:94:37:f4:95:e0:
         84:db:fa:bf:75:e2:b0:4a:01:80:47:bb:67:1a:29:de:71:b0:
         4b:f6:c9:02:56:2e:07:46:ad:95:cd:17:37:c4:95:74:29:05:
         5e:48:f2:af:39:29:b6:48:2b:2c:fd:73:49:3c:91:ad:86:58:
         46:9c:c8:47:c6:3f:b8:aa:cb:53:13:c0:ab:aa:6b:73:1a:42:
         70:48:f9:18:80:a8:82:e9:a0:b1:aa:f7:8f:d3:4b:bb:4c:d4:
         73:c9:22:00:8e:16:08:c7:7b:52:97:2a:c6:9c:b3:56:9c:98:
         98:c8:60:1b:c8:19:42:1b:a2:fd:62:0e:a5:e7:8a:4a:af:13:
         0e:64:60:0d:c0:4c:6e:c6:a9:fb:f1:eb:bf:a0:76:c1:db:d1:
         f7:89:c2:4d:2e:3e:5b:5e:3c:69:94:32:9e:61:10:0d:43:f1:
         16:44:b9:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDn5EM+bU6lOtqPCVlKV7ygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NmM0MzU5OTI2YWM3ZjNhY2Y4ZGM1MjBlNzg3YTM2NjI3
MTM4N2MwHhcNMjYwOTI4MTIwMTMxWhcNMjYwOTI5MTIwMTMxWjAzMTEwLwYDVQQD
EyhjM2MwNTI1ZWM3NTA1NDFlMGE2ZmU5OGU0MDI3YjAzZWFmZTBjZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9cLBKh24gmfre/5armwsoxwaJYw
eWf9ga9dWYcmb4Od+3coaHvVtHSzqJJDXBTScS5F+zUJK5OOxA+poMDq9GyasqjY
JWIPXoT8hgl+3fmz2qhEOKwj8QTBzveieez/cIlzWWyEja8KmNIZVRbDGpa8iIAD
09rcJQvK6anzxASWqsKQoppTic0Y2ETHH58u8i0ZYk3zCTJZmRA0CLisOiNO5uML
op8STI8DNh7tqK6w2Ccx1PJFMDNuUrhxACVN4AqUOY9EoyNX2rl9bXivX0JPeuKH
UwvKDCaxscuSobGyR79za+yTkEDkb9N+Hi98iYrQh+AWTW2yZCwf1PDvEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPAUl7HUFQeCm/pjkAnsD6v4M6EMB8GA1UdIwQY
MBaAFNRsQ1mSasfzrPjcUg54ejZicTh8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUd4RFdaSnF4X09zLU54U0RuaDZObUp4T0h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83MjNmMzQtN2IyZC00YWQzLWE0YWMt
NDQxNzliZWUxNDlhLzEvMUd4RFdaSnF4X09zLU54U0RuaDZObUp4T0h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83MjNmMzQtN2IyZC00YWQzLWE0YWMtNDQxNzliZWUxNDlh
LzEvMUd4RFdaSnF4X09zLU54U0RuaDZObUp4T0h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMhQxbWX4
1Fn6lZh0hHP5OYtrv79U6kID+iYcisYbJjxbUAmqr1FHlHuq7+7dFuB6U5pkh8Yb
F8QpBmxnzAgJuEsPsATypg/ljyqQUIZ6B+SwdxEjsJQ39JXghNv6v3XisEoBgEe7
Zxop3nGwS/bJAlYuB0atlc0XN8SVdCkFXkjyrzkptkgrLP1zSTyRrYZYRpzIR8Y/
uKrLUxPAq6prcxpCcEj5GICogumgsar3j9NLu0zUc8kiAI4WCMd7UpcqxpyzVpyY
mMhgG8gZQhui/WIOpeeKSq8TDmRgDcBMbsap+/Hrv6B2wdvR94nCTS4+W148aZQy
nmEQDUPxFkS5Fw==
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:39:02 2026 by rpki-client