Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
File:                     74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json)
Hash identifier:          0JwGWwLcgLOKCtsQP3joTv+ESSRK9ZxK4FB7kD9GxU0=
Subject key identifier:   59:20:D9:A6:10:19:A0:54:D5:5B:F0:69:93:8F:B2:01:EC:CC:A8:49
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Certificate issuer:       /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial:       01A0D87227D52FAB7AFC33AFFEED2DD4A255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
Manifest number:          1884
Signing time:             Fri 25 Sep 2026 12:02:34 +0000
Manifest this update:     Fri 25 Sep 2026 12:02:34 +0000
Manifest next update:     Sat 26 Sep 2026 12:02:34 +0000
Files and hashes:         1: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: 36oxEqiBLKWXh8qmNL3BCGUKjC7JY2HX44zIfK66pwU=)
                          2: BcbpeOE1UIMLYcx9_xoYiBz5cII.roa (hash: C/EPAsh6T699gB8fYjC4QQRKH8QFpe67E9wrm8R7nkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:27:d5:2f:ab:7a:fc:33:af:fe:ed:2d:d4:a2:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
        Validity
            Not Before: Sep 25 12:02:34 2026 GMT
            Not After : Sep 26 12:02:34 2026 GMT
        Subject: CN=5920d9a61019a054d55bf069938fb201eccca849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:e1:c3:7a:04:92:18:88:93:a8:ea:78:ce:
                    b2:7d:65:b7:07:7f:eb:82:e5:2a:74:dd:00:b3:76:
                    63:11:3c:34:53:26:e5:2b:9a:5f:af:72:fe:ae:8a:
                    e6:59:65:a7:73:f1:a0:05:35:7c:48:42:c4:74:23:
                    ee:12:06:82:b1:37:95:d0:d8:3e:46:2a:91:42:8c:
                    74:46:9d:57:05:e8:83:23:47:df:16:6b:cd:cb:7e:
                    11:fb:f0:a6:dc:13:8e:75:95:4c:15:c3:35:b3:1b:
                    1e:65:9d:a7:01:29:30:d8:ac:58:e9:77:2d:7e:71:
                    c9:f1:9b:89:a3:6f:5d:18:6c:15:18:2e:1b:fe:b9:
                    ec:9f:08:e2:0e:c3:1b:f1:ea:10:e5:7d:49:13:cd:
                    12:6a:de:bd:9c:c5:f1:a2:03:14:e8:15:b9:92:95:
                    50:92:ae:bc:f4:a6:3c:3b:50:3b:e5:cc:dc:03:1b:
                    db:d6:8f:d9:e2:ad:40:88:a9:8b:fc:5f:da:39:e4:
                    8e:d6:15:2e:a9:ed:fa:a5:71:6d:b6:f0:39:34:a6:
                    c9:ed:b5:03:d2:c8:6f:29:30:bb:6e:87:26:dc:f8:
                    ee:2c:e1:da:fe:67:6c:ce:95:45:5e:50:19:6e:2e:
                    bb:0b:6e:e4:96:37:f7:63:49:61:67:b1:20:45:94:
                    84:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:20:D9:A6:10:19:A0:54:D5:5B:F0:69:93:8F:B2:01:EC:CC:A8:49
            X509v3 Authority Key Identifier:
                keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:32:bd:65:62:88:76:1d:c8:f3:8b:3f:1e:1f:91:9c:d7:46:
         c4:62:cd:4c:5f:f6:4e:65:46:3b:74:02:97:02:c8:8d:9f:9b:
         54:3e:3a:0f:e0:06:a6:70:51:b9:ec:dd:47:31:37:24:44:b0:
         c6:4c:97:77:7f:0e:bf:15:cc:24:ff:2a:af:c6:cd:b9:5c:3e:
         76:81:cc:54:d4:63:ea:42:6d:d5:57:1a:e7:a2:6a:48:8c:54:
         bf:25:21:05:c5:c4:49:b2:5c:a0:6d:c8:58:af:cf:bf:7a:02:
         60:47:72:11:b3:f8:1d:36:d8:22:3e:8d:84:e0:01:af:77:b9:
         15:c7:59:a6:ba:52:cc:f4:3c:1a:c5:5b:b2:23:f5:f4:e7:6f:
         d0:5d:85:84:1e:84:dd:7a:ef:17:b5:4e:01:2d:29:e9:53:80:
         b6:70:d9:54:7a:29:1e:af:d3:46:93:94:a8:7e:0e:27:1a:c9:
         be:fc:88:e9:e6:c1:21:9e:2a:7f:ad:8b:68:93:74:37:ff:5b:
         d9:16:5d:bd:06:d6:07:f1:16:af:4e:2b:8e:eb:b4:8d:43:65:
         1b:94:20:8c:b7:cf:be:e0:de:e9:35:39:12:c4:ea:ae:ed:82:
         1c:06:95:04:2d:1d:82:f9:01:d9:e6:10:b1:c7:39:02:7b:57:
         d7:08:4a:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcifVL6t6/DOv/u0t1KJVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOGMzM2E4YTYyMDFkNDBhNjAyMjBiZDYzOWI1ZDM1MjIx
MjY3M2UwHhcNMjYwOTI1MTIwMjM0WhcNMjYwOTI2MTIwMjM0WjAzMTEwLwYDVQQD
Eyg1OTIwZDlhNjEwMTlhMDU0ZDU1YmYwNjk5MzhmYjIwMWVjY2NhODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01Thw3oEkhiIk6jqeM6yfWW3B3/r
guUqdN0As3ZjETw0UyblK5pfr3L+rormWWWnc/GgBTV8SELEdCPuEgaCsTeV0Ng+
RiqRQox0Rp1XBeiDI0ffFmvNy34R+/Cm3BOOdZVMFcM1sxseZZ2nASkw2KxY6Xct
fnHJ8ZuJo29dGGwVGC4b/rnsnwjiDsMb8eoQ5X1JE80Sat69nMXxogMU6BW5kpVQ
kq689KY8O1A75czcAxvb1o/Z4q1AiKmL/F/aOeSO1hUuqe36pXFttvA5NKbJ7bUD
0shvKTC7bocm3PjuLOHa/mdszpVFXlAZbi67C27kljf3Y0lhZ7EgRZSEEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkg2aYQGaBU1VvwaZOPsgHszKhJMB8GA1UdIwQY
MBaAFO+MM6imIB1ApgIgvWObXTUiEmc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMt
ZTAxYmI0ODg2M2E5LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMtZTAxYmI0ODg2M2E5
LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATjK9ZWKI
dh3I84s/Hh+RnNdGxGLNTF/2TmVGO3QClwLIjZ+bVD46D+AGpnBRuezdRzE3JESw
xkyXd38OvxXMJP8qr8bNuVw+doHMVNRj6kJt1Vca56JqSIxUvyUhBcXESbJcoG3I
WK/Pv3oCYEdyEbP4HTbYIj6NhOABr3e5FcdZprpSzPQ8GsVbsiP19Odv0F2FhB6E
3XrvF7VOAS0p6VOAtnDZVHopHq/TRpOUqH4OJxrJvvyI6ebBIZ4qf62LaJN0N/9b
2RZdvQbWB/EWr04rjuu0jUNlG5QgjLfPvuDe6TU5EsTqru2CHAaVBC0dgvkB2eYQ
scc5AntX1whK7Q==
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:42:42 2026 by rpki-client