Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
File:                     HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft (raw, json)
Hash identifier:          A+Gy88fMJLQ8Pmnb0zU6Hrq5Zo3cTTwS3ROmAA6q8e8=
Subject key identifier:   17:1C:13:F1:93:91:8A:CC:BB:3A:4D:57:D0:D0:51:74:D0:3E:15:5F
Authority key identifier: 1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA
Certificate issuer:       /CN=1dd7088d9da221f0565eb178443600171e7977aa
Certificate serial:       01A0D94D4608952548CE77734893895D5E26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
Manifest number:          0577
Signing time:             Fri 25 Sep 2026 16:01:54 +0000
Manifest this update:     Fri 25 Sep 2026 16:01:54 +0000
Manifest next update:     Sat 26 Sep 2026 16:01:54 +0000
Files and hashes:         1: HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl (hash: KijJHHYAnmVnlHlcGDq6LaXzcAUe1gCutr9aUzJZIMo=)
                          2: jj4p-t17R-_1G4MNsVWsKf7lxt8.roa (hash: gxtd056u5s+5E72I3IyM1AJXXx0KOPdQmubbLYFzxYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4d:46:08:95:25:48:ce:77:73:48:93:89:5d:5e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd7088d9da221f0565eb178443600171e7977aa
        Validity
            Not Before: Sep 25 16:01:54 2026 GMT
            Not After : Sep 26 16:01:54 2026 GMT
        Subject: CN=171c13f193918accbb3a4d57d0d05174d03e155f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:aa:04:56:43:30:64:8f:04:28:58:88:cd:4f:
                    98:e2:c5:92:10:87:6c:fb:53:06:f1:f5:af:18:fd:
                    44:04:96:65:c2:06:d3:47:3e:59:a6:ae:34:86:00:
                    71:41:f1:14:05:7b:68:e2:cd:49:87:00:4e:0e:76:
                    dc:c7:f5:62:d7:d9:02:bd:1d:65:d7:a3:a3:b9:82:
                    00:02:81:7a:0f:24:fb:96:f9:f4:c6:ab:40:d2:ad:
                    86:11:06:e4:1e:d0:e0:23:0a:c4:76:ed:b3:22:75:
                    5e:ac:52:ab:b6:85:52:f4:96:a1:7a:88:aa:2a:8a:
                    cf:7f:97:a8:f9:ed:7b:bc:25:de:1d:df:14:46:63:
                    6b:e0:13:ad:be:73:7d:50:10:f7:5a:a5:60:7e:3b:
                    7d:be:02:18:3d:d6:ec:ec:b8:25:80:78:e5:d3:aa:
                    43:09:46:62:de:74:07:f2:05:8f:49:12:87:3f:a8:
                    a5:fa:e2:39:6c:43:ad:b3:bc:f5:cd:7d:97:22:da:
                    d2:47:21:d3:f4:1c:96:bd:c7:63:aa:e7:7e:c1:6f:
                    f1:5d:60:6d:be:cd:9d:ea:dd:03:51:67:b8:c4:c5:
                    b0:fb:a4:6a:e6:28:d2:38:80:13:8e:34:10:f8:9a:
                    98:f9:f0:6c:99:31:bd:c3:7c:28:67:b6:71:a4:1f:
                    78:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1C:13:F1:93:91:8A:CC:BB:3A:4D:57:D0:D0:51:74:D0:3E:15:5F
            X509v3 Authority Key Identifier:
                keyid:1D:D7:08:8D:9D:A2:21:F0:56:5E:B1:78:44:36:00:17:1E:79:77:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HdcIjZ2iIfBWXrF4RDYAFx55d6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/679968-11e9-49a5-b1d1-e0be148c4097/1/HdcIjZ2iIfBWXrF4RDYAFx55d6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:07:5a:f7:2e:76:86:be:29:85:78:37:e0:77:88:73:96:74:
         b8:00:0b:ff:aa:dd:33:a4:9c:cd:44:6b:93:37:06:32:39:e7:
         d0:37:da:ac:3b:e1:3a:da:f1:bd:cc:4f:25:87:80:61:d9:55:
         23:58:9d:12:a8:b7:bd:8a:4e:a3:e9:83:69:4a:06:c0:53:81:
         c6:e4:a9:37:8b:0f:99:27:db:d5:1b:2f:74:b2:4e:13:f6:00:
         a4:a0:77:ea:9a:b9:08:ee:17:8e:1d:97:63:c2:b8:53:71:78:
         5e:84:29:70:a9:f6:fe:19:d0:16:76:dd:16:b9:94:a4:a0:7a:
         28:ff:d9:68:23:ee:43:51:be:99:5e:44:fa:9b:b2:26:a1:b2:
         6d:49:b4:0d:dd:da:c3:55:fe:94:26:2e:84:59:26:74:be:9d:
         7d:19:7d:e6:b0:3a:68:73:39:7b:cc:cf:e1:ce:96:94:1a:02:
         c4:84:92:e9:0a:9b:a6:0b:b1:67:44:7d:5a:59:3d:40:05:89:
         25:18:ca:a2:b0:a4:68:52:53:5e:51:7c:6c:99:61:e0:88:88:
         1f:ae:64:1c:6b:65:d5:eb:92:62:5f:57:e5:b7:ba:ed:c2:34:
         ab:c1:f8:c6:6b:07:24:c8:de:7e:94:45:0e:22:fa:f6:b3:7d:
         6a:23:e3:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTUYIlSVIzndzSJOJXV4mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkZDcwODhkOWRhMjIxZjA1NjVlYjE3ODQ0MzYwMDE3MWU3
OTc3YWEwHhcNMjYwOTI1MTYwMTU0WhcNMjYwOTI2MTYwMTU0WjAzMTEwLwYDVQQD
EygxNzFjMTNmMTkzOTE4YWNjYmIzYTRkNTdkMGQwNTE3NGQwM2UxNTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKoEVkMwZI8EKFiIzU+Y4sWSEIds
+1MG8fWvGP1EBJZlwgbTRz5Zpq40hgBxQfEUBXto4s1JhwBODnbcx/Vi19kCvR1l
16OjuYIAAoF6DyT7lvn0xqtA0q2GEQbkHtDgIwrEdu2zInVerFKrtoVS9Jaheoiq
KorPf5eo+e17vCXeHd8URmNr4BOtvnN9UBD3WqVgfjt9vgIYPdbs7LglgHjl06pD
CUZi3nQH8gWPSRKHP6il+uI5bEOts7z1zX2XItrSRyHT9ByWvcdjqud+wW/xXWBt
vs2d6t0DUWe4xMWw+6Rq5ijSOIATjjQQ+JqY+fBsmTG9w3woZ7ZxpB94ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBccE/GTkYrMuzpNV9DQUXTQPhVfMB8GA1UdIwQY
MBaAFB3XCI2doiHwVl6xeEQ2ABceeXeqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEt
ZTBiZTE0OGM0MDk3LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS82Nzk5NjgtMTFlOS00OWE1LWIxZDEtZTBiZTE0OGM0MDk3
LzEvSGRjSWpaMmlJZkJXWHJGNFJEWUFGeDU1ZDZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgda9y52
hr4phXg34HeIc5Z0uAAL/6rdM6SczURrkzcGMjnn0DfarDvhOtrxvcxPJYeAYdlV
I1idEqi3vYpOo+mDaUoGwFOBxuSpN4sPmSfb1RsvdLJOE/YApKB36pq5CO4Xjh2X
Y8K4U3F4XoQpcKn2/hnQFnbdFrmUpKB6KP/ZaCPuQ1G+mV5E+puyJqGybUm0Dd3a
w1X+lCYuhFkmdL6dfRl95rA6aHM5e8zP4c6WlBoCxISS6QqbpguxZ0R9Wlk9QAWJ
JRjKorCkaFJTXlF8bJlh4IiIH65kHGtl1euSYl9X5be67cI0q8H4xmsHJMjefpRF
DiL69rN9aiPjTA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:38 2026 by rpki-client