Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
File:                     d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json)
Hash identifier:          BVKx+IpIUuFJq04LVUtN4gij4VXhAPJYQiLF16AeTMk=
Subject key identifier:   F8:7F:C3:F8:59:A3:29:AB:7E:2F:87:E8:B5:40:BD:A9:87:4B:ED:7A
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Certificate issuer:       /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial:       019E1DFE1DE6E904DCED09FED5B0A1AFAECB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
Manifest number:          092D
Signing time:             Tue 12 May 2026 21:00:53 +0000
Manifest this update:     Tue 12 May 2026 21:00:53 +0000
Manifest next update:     Wed 13 May 2026 21:00:53 +0000
Files and hashes:         1: 9F2fGaXqkwYq7hsidHwhVUABVT0.roa (hash: b+5jUhu8wzSR5Hz+8wVW5uNIAXefzuPQ7RL1+84Zd/s=)
                          2: FJjLx1iJw4VqFKz7FPQ0JyldOfI.roa (hash: ev1W9ohjVf7Q0Z9nGx/i+Cc2wNkdLs6mHMbE9kefqiU=)
                          3: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: 4F3eVhg9tmX6jxdWFeQo9cNVWfCJaMUBUzv+685A/W0=)
                          4: yj4Baoa8O0cK9liPFSajl18EXPE.roa (hash: qR4NJRolj3aKBGShXLhpMIVXbSB+hmucW84pdI75rZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:1d:e6:e9:04:dc:ed:09:fe:d5:b0:a1:af:ae:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
        Validity
            Not Before: May 12 21:00:53 2026 GMT
            Not After : May 13 21:00:53 2026 GMT
        Subject: CN=f87fc3f859a329ab7e2f87e8b540bda9874bed7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:90:23:18:bc:fe:ee:94:f9:6a:74:37:2a:f0:
                    0a:72:fe:18:b2:f3:0d:a7:96:c9:b3:b7:5b:e9:41:
                    25:fd:5e:a6:9a:14:e8:d2:91:a6:3b:3f:3c:10:64:
                    c5:68:13:cd:45:91:8d:ac:18:92:31:2d:b0:22:88:
                    37:b0:77:cb:d1:37:51:cc:6c:36:d3:25:b2:da:e6:
                    b4:28:74:a0:99:d2:e6:a1:62:ba:d8:61:3d:b9:f1:
                    8b:68:da:78:8b:25:36:17:dd:8c:4d:5f:3c:b4:3b:
                    06:bf:51:d8:36:2f:e1:87:fd:bd:a6:8e:0c:f5:2a:
                    25:86:94:fd:44:2a:4b:f3:41:47:84:bb:a1:5d:55:
                    2b:78:99:2c:37:49:5c:c0:a5:76:68:53:1b:46:46:
                    f1:bf:57:24:f8:fb:3b:32:0c:92:52:53:92:d8:16:
                    4c:dc:ac:ca:64:20:0b:4f:02:b6:1d:1c:78:1a:b1:
                    34:9a:90:65:f3:f8:f6:42:34:1c:33:86:51:18:8c:
                    f1:4f:6c:83:b7:05:1c:04:4b:c1:92:a9:d5:32:24:
                    e3:d2:e7:05:d7:18:32:aa:94:81:41:52:fe:3e:b6:
                    19:a9:44:57:84:44:da:41:47:c3:75:19:c0:5c:0d:
                    de:70:d8:a2:ed:3f:64:ba:ea:c9:81:e8:da:18:82:
                    5d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7F:C3:F8:59:A3:29:AB:7E:2F:87:E8:B5:40:BD:A9:87:4B:ED:7A
            X509v3 Authority Key Identifier:
                keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:88:ea:5b:42:82:9e:ee:a8:ea:a4:89:e1:4e:c6:42:70:05:
         4f:e4:90:09:bf:45:4a:e5:ed:df:83:19:97:aa:ed:27:7d:db:
         78:40:3e:87:28:63:b2:d1:22:ae:e4:16:fc:38:14:f0:3d:6a:
         b2:20:65:3e:79:a9:07:24:41:f5:88:7b:d4:88:2e:f5:76:c0:
         30:f8:b3:46:e3:b4:66:66:87:4f:df:af:92:37:a5:d7:67:3a:
         7e:6b:88:15:6b:49:c0:5e:7d:34:19:87:04:f3:5f:65:5e:a9:
         2b:df:8a:d3:64:1f:44:f6:12:3d:f0:71:95:16:88:d2:bd:98:
         c7:fa:99:91:7d:50:3c:0a:8b:0c:a9:a3:c3:31:96:71:6b:2c:
         4f:80:90:e4:f8:a3:e4:6a:8d:20:21:12:b4:2f:03:9a:1b:0c:
         c4:2f:d0:92:4f:10:fa:32:47:a2:f0:7a:18:44:f7:7f:ec:d0:
         9f:2e:bf:1b:8d:c5:c2:ae:0e:2b:b8:16:bc:69:63:36:e0:0a:
         4b:a3:92:a9:91:bb:b3:05:ee:0b:a7:88:5c:10:6d:88:c3:f4:
         80:59:8c:06:47:12:f3:85:16:8c:04:2a:16:0a:19:81:77:f9:
         a9:ca:04:d9:82:ee:59:1f:82:a8:87:23:c2:fd:5a:62:04:c7:
         12:10:7d:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4d/h3m6QTc7Qn+1bChr67LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NTVjZDhiZTcxZTI5ZTcyZDk2OTBjN2NkNDA4N2I1ZjI2
MTE2ZjAwHhcNMjYwNTEyMjEwMDUzWhcNMjYwNTEzMjEwMDUzWjAzMTEwLwYDVQQD
EyhmODdmYzNmODU5YTMyOWFiN2UyZjg3ZThiNTQwYmRhOTg3NGJlZDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5AjGLz+7pT5anQ3KvAKcv4YsvMN
p5bJs7db6UEl/V6mmhTo0pGmOz88EGTFaBPNRZGNrBiSMS2wIog3sHfL0TdRzGw2
0yWy2ua0KHSgmdLmoWK62GE9ufGLaNp4iyU2F92MTV88tDsGv1HYNi/hh/29po4M
9SolhpT9RCpL80FHhLuhXVUreJksN0lcwKV2aFMbRkbxv1ck+Ps7MgySUlOS2BZM
3KzKZCALTwK2HRx4GrE0mpBl8/j2QjQcM4ZRGIzxT2yDtwUcBEvBkqnVMiTj0ucF
1xgyqpSBQVL+PrYZqURXhETaQUfDdRnAXA3ecNii7T9kuurJgejaGIJd9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPh/w/hZoymrfi+H6LVAvamHS+16MB8GA1UdIwQY
MBaAFHdVzYvnHinnLZaQx81Ah7XyYRbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQt
ZTAyMWY4Y2U2YzUxLzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My83YzBjNTctMTVhOC00MzA3LTg1MGQtZTAyMWY4Y2U2YzUx
LzEvZDFYTmktY2VLZWN0bHBESHpVQ0h0ZkpoRnZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPIjqW0KC
nu6o6qSJ4U7GQnAFT+SQCb9FSuXt34MZl6rtJ33beEA+hyhjstEiruQW/DgU8D1q
siBlPnmpByRB9Yh71Igu9XbAMPizRuO0ZmaHT9+vkjel12c6fmuIFWtJwF59NBmH
BPNfZV6pK9+K02QfRPYSPfBxlRaI0r2Yx/qZkX1QPAqLDKmjwzGWcWssT4CQ5Pij
5GqNICEStC8DmhsMxC/Qkk8Q+jJHovB6GET3f+zQny6/G43Fwq4OK7gWvGljNuAK
S6OSqZG7swXuC6eIXBBtiMP0gFmMBkcS84UWjAQqFgoZgXf5qcoE2YLuWR+CqIcj
wv1aYgTHEhB9fw==
-----END CERTIFICATE-----
Generated at Wed May 13 08:17:14 2026 by rpki-client