Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
File:                     DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json)
Hash identifier:          WfxR55K3trf+eTu9WjmNI5oO+PM5kmHZkpiv5VN2Y/Q=
Subject key identifier:   6B:63:85:95:31:97:0D:B2:E4:0A:99:0B:86:CE:82:00:91:23:2F:09
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Certificate issuer:       /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial:       01A0D124CA68C2B2CF3DBD2A5AB0EF3B406B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
Manifest number:          1A77
Signing time:             Thu 24 Sep 2026 02:00:44 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:44 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:44 +0000
Files and hashes:         1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=)
                          2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=)
                          3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=)
                          4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=)
                          5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: CjfZEwKYz4Pqt41HQh4dBGaoyJDqp/o8gaYfJObwLIY=)
                          6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=)
                          7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=)
                          8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=)
                          9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=)
                          10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=)
                          11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=)
                          12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=)
                          13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=)
                          14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=)
                          15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=)
                          16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=)
                          17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=)
                          18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=)
                          19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=)
                          20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=)
                          21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=)
                          22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=)
                          23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=)
                          24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 02:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:ca:68:c2:b2:cf:3d:bd:2a:5a:b0:ef:3b:40:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
        Validity
            Not Before: Sep 24 02:00:44 2026 GMT
            Not After : Sep 25 02:00:44 2026 GMT
        Subject: CN=6b63859531970db2e40a990b86ce820091232f09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:96:ea:12:67:75:33:02:a8:d4:a2:98:57:
                    6a:5f:a7:f2:f2:67:0b:19:e4:05:b1:67:6d:57:54:
                    63:76:b0:8f:ad:16:12:84:2c:41:c6:2d:ef:f6:04:
                    e8:65:85:a5:e3:50:9b:c3:7a:bb:f5:c8:7f:28:9f:
                    a0:b0:83:7a:bf:80:ba:98:01:66:bd:4d:f7:a2:3a:
                    2d:bd:92:7e:4f:f6:3b:66:c5:d1:b2:6a:a7:7e:7f:
                    cf:45:b0:6f:09:01:0a:9b:5d:53:09:7b:9d:27:ef:
                    84:e9:d4:80:68:71:95:b1:a0:f5:41:39:ae:64:8b:
                    66:6a:52:05:0e:91:68:6b:6e:89:d1:57:e9:78:57:
                    07:21:55:3e:3b:ab:6c:d4:ee:54:ba:1b:00:71:31:
                    c3:5a:db:41:d6:95:ea:27:27:70:61:68:91:20:8b:
                    22:0c:b9:d8:5e:e8:02:69:49:4e:91:6f:70:6d:2a:
                    db:4e:99:79:3e:27:0f:4f:84:49:ea:d7:91:14:4c:
                    a5:07:bb:80:f3:d7:16:20:1c:ea:99:18:5d:b2:1c:
                    d5:2f:34:be:a6:30:e6:0e:10:cf:a1:11:14:54:91:
                    a8:2c:2a:8e:dd:34:b1:cf:5f:9d:6f:68:c0:68:cf:
                    ba:fb:f0:1f:2d:cd:b9:c0:40:ca:99:12:3c:d4:d1:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:63:85:95:31:97:0D:B2:E4:0A:99:0B:86:CE:82:00:91:23:2F:09
            X509v3 Authority Key Identifier:
                keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:a8:b6:5b:9b:83:3d:32:68:f7:33:ef:08:00:6c:23:7f:4a:
         70:b8:1e:38:2d:b3:f5:b3:c5:33:78:c0:45:34:1f:fb:9a:d2:
         09:f4:a5:c6:03:bf:d9:7b:24:e6:68:6d:d1:f5:a5:56:3a:f3:
         dc:58:3d:89:27:61:7a:84:5c:d7:df:a2:85:ea:42:6a:ed:b1:
         14:9e:3c:ff:d3:6f:fb:4e:6a:4b:36:08:1a:58:10:90:d1:4b:
         89:30:ea:74:06:ae:7d:00:2e:33:05:b4:8b:24:af:52:ce:fb:
         26:8f:e9:46:2c:0f:55:21:34:56:31:4f:25:f0:cd:97:35:39:
         f8:f6:f8:63:28:df:24:9c:81:60:c1:c7:8b:cf:cc:73:24:b9:
         8b:31:9b:8a:45:55:11:4f:0b:6a:69:34:57:41:a9:19:19:e8:
         ad:66:56:1b:13:d6:21:39:ec:9e:a6:97:d6:66:69:4c:22:aa:
         96:5e:b5:98:71:4c:e5:bf:9e:81:6a:e6:3c:e7:a5:66:7a:8f:
         a5:db:4c:8d:4c:f3:29:60:15:01:6b:28:40:01:1f:2b:41:25:
         35:eb:d2:9a:37:c7:e1:75:05:c3:4f:f2:28:4d:b3:ab:7e:c9:
         a1:92:9a:8c:57:ec:59:d7:e7:10:20:e0:15:3a:dc:45:60:8f:
         c5:b6:6f:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJMpowrLPPb0qWrDvO0BrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5
NWRmYzYwHhcNMjYwOTI0MDIwMDQ0WhcNMjYwOTI1MDIwMDQ0WjAzMTEwLwYDVQQD
Eyg2YjYzODU5NTMxOTcwZGIyZTQwYTk5MGI4NmNlODIwMDkxMjMyZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1mW6hJndTMCqNSimFdqX6fy8mcL
GeQFsWdtV1RjdrCPrRYShCxBxi3v9gToZYWl41Cbw3q79ch/KJ+gsIN6v4C6mAFm
vU33ojotvZJ+T/Y7ZsXRsmqnfn/PRbBvCQEKm11TCXudJ++E6dSAaHGVsaD1QTmu
ZItmalIFDpFoa26J0VfpeFcHIVU+O6ts1O5UuhsAcTHDWttB1pXqJydwYWiRIIsi
DLnYXugCaUlOkW9wbSrbTpl5PicPT4RJ6teRFEylB7uA89cWIBzqmRhdshzVLzS+
pjDmDhDPoREUVJGoLCqO3TSxz1+db2jAaM+6+/AfLc25wEDKmRI81NE3DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtjhZUxlw2y5AqZC4bOggCRIy8JMB8GA1UdIwQY
MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut
YTM0NzU2NDE1OGY4LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4
LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvqi2W5uD
PTJo9zPvCABsI39KcLgeOC2z9bPFM3jARTQf+5rSCfSlxgO/2Xsk5mht0fWlVjrz
3Fg9iSdheoRc19+ihepCau2xFJ48/9Nv+05qSzYIGlgQkNFLiTDqdAaufQAuMwW0
iySvUs77Jo/pRiwPVSE0VjFPJfDNlzU5+Pb4YyjfJJyBYMHHi8/McyS5izGbikVV
EU8Lamk0V0GpGRnorWZWGxPWITnsnqaX1mZpTCKqll61mHFM5b+egWrmPOelZnqP
pdtMjUzzKWAVAWsoQAEfK0ElNevSmjfH4XUFw0/yKE2zq37JoZKajFfsWdfnECDg
FTrcRWCPxbZvmw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:13:23 2026 by rpki-client