Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          NnqMraSdOcxxy9LCu4qrAG7J06Ift/6hHAUzrYOcqcc=
Subject key identifier:   72:27:6C:73:B7:CF:5A:CF:79:4F:72:89:62:30:7B:D9:8F:7B:05:D3
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       019FA82B68B396E71682E3143A00E762295D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0F18
Signing time:             Tue 28 Jul 2026 10:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:44 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: njSvcqSMsFczK6uCcPxqThSJq8c2E5NoPTT4LW6d+ho=)
                          2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:68:b3:96:e7:16:82:e3:14:3a:00:e7:62:29:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Jul 28 10:00:44 2026 GMT
            Not After : Jul 29 10:00:44 2026 GMT
        Subject: CN=72276c73b7cf5acf794f728962307bd98f7b05d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:93:b1:77:23:59:24:3e:7c:81:b4:6b:1f:
                    59:39:0f:8b:b5:d4:c6:16:27:ed:16:4f:a2:5a:4c:
                    56:c8:4e:35:c6:ab:3c:37:67:55:61:4e:d9:0f:82:
                    f9:81:5b:a9:ff:68:90:c8:a7:ba:76:9a:3d:44:bb:
                    bf:9c:60:4e:7d:04:89:bc:2b:1f:ce:95:50:c4:cf:
                    d6:60:50:e0:05:08:b1:a4:83:29:83:f8:a5:15:11:
                    a6:f8:bb:04:e4:47:cd:6e:80:5d:70:7c:49:41:be:
                    23:05:93:4f:5f:59:78:c1:78:3f:79:00:ac:2d:a6:
                    99:a0:e5:3e:50:e6:ff:35:c9:d3:1f:36:15:09:3b:
                    68:ec:5c:8f:43:60:f3:dc:62:3f:57:4e:0f:d6:93:
                    7b:a5:43:65:6f:ff:f0:a2:5b:5d:37:e7:12:94:8f:
                    df:e8:77:6c:a9:97:b7:17:50:f4:b9:9e:0a:3d:48:
                    f0:43:1e:9a:5e:b8:b6:f3:35:5d:76:2a:4a:45:52:
                    42:fe:ad:aa:65:e9:28:9a:bc:6a:00:d3:f6:a3:c4:
                    2f:2d:6a:a5:7a:93:ab:b6:f6:87:87:3f:b1:4d:53:
                    94:be:79:73:4e:5b:6b:3a:0e:35:e9:7c:9b:46:44:
                    38:18:d9:60:0f:82:4a:7f:c0:94:0c:34:ed:09:69:
                    64:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:27:6C:73:B7:CF:5A:CF:79:4F:72:89:62:30:7B:D9:8F:7B:05:D3
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f0:be:da:27:58:9d:5d:41:12:48:cb:c3:c4:07:a4:23:cf:
         1c:9b:97:f2:b6:ba:a8:7d:8f:1b:f1:c7:68:80:44:2b:4b:24:
         39:0c:5b:b9:d4:fe:6d:c2:dd:dd:50:9d:7a:e0:41:c3:00:5b:
         f1:61:7e:87:7a:1e:f1:86:3e:d1:1e:45:a0:08:75:8d:65:a9:
         10:af:10:72:89:79:99:a5:17:18:0a:ee:40:e2:a8:f7:bd:fa:
         43:32:bb:76:b2:96:4d:b9:25:30:9c:4b:b7:dc:a2:63:39:a0:
         6d:6d:79:6d:e1:99:d2:0e:86:df:4d:c2:d0:90:d8:b6:41:5f:
         c7:25:b0:43:eb:d2:e1:55:bc:ee:99:37:9c:c8:6f:8b:ff:25:
         11:47:cf:81:5c:88:ae:15:ef:c5:72:cf:69:78:28:4e:23:5b:
         0a:ac:b2:06:6f:83:73:8d:ba:90:6c:d1:08:ec:66:ca:ad:98:
         ac:b9:b9:52:1a:c5:18:6e:11:43:f4:05:76:05:3a:ff:3c:cb:
         b7:c6:82:17:b5:f2:93:97:46:a4:48:22:2f:1d:c4:5d:41:8b:
         5b:2c:83:6b:56:6e:2c:de:8a:66:1e:8b:91:a3:6a:2c:87:40:
         1f:09:d7:35:bd:57:cb:08:54:ed:dd:45:f3:c1:90:64:1b:72:
         4f:9b:ff:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK2izlucWguMUOgDnYildMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDBiZjFhZDdmYzM2OWQ4ZmJmNDNlNjJkZTk3YTRmYWNm
ZWY2YjUwHhcNMjYwNzI4MTAwMDQ0WhcNMjYwNzI5MTAwMDQ0WjAzMTEwLwYDVQQD
Eyg3MjI3NmM3M2I3Y2Y1YWNmNzk0ZjcyODk2MjMwN2JkOThmN2IwNWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui+TsXcjWSQ+fIG0ax9ZOQ+LtdTG
FiftFk+iWkxWyE41xqs8N2dVYU7ZD4L5gVup/2iQyKe6dpo9RLu/nGBOfQSJvCsf
zpVQxM/WYFDgBQixpIMpg/ilFRGm+LsE5EfNboBdcHxJQb4jBZNPX1l4wXg/eQCs
LaaZoOU+UOb/NcnTHzYVCTto7FyPQ2Dz3GI/V04P1pN7pUNlb//woltdN+cSlI/f
6HdsqZe3F1D0uZ4KPUjwQx6aXri28zVddipKRVJC/q2qZekomrxqANP2o8QvLWql
epOrtvaHhz+xTVOUvnlzTltrOg416XybRkQ4GNlgD4JKf8CUDDTtCWlkwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHInbHO3z1rPeU9yiWIwe9mPewXTMB8GA1UdIwQY
MBaAFNXQvxrX/Dadj79D5i3pek+s/va1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2Ut
ZWI3ZTljMGQzNzQ3LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81NTM5ZTQtZDEwZC00OWM1LWJkY2UtZWI3ZTljMGQzNzQ3
LzEvMWRDX0d0ZjhOcDJQdjBQbUxlbDZUNnotOXJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfC+2idY
nV1BEkjLw8QHpCPPHJuX8ra6qH2PG/HHaIBEK0skOQxbudT+bcLd3VCdeuBBwwBb
8WF+h3oe8YY+0R5FoAh1jWWpEK8Qcol5maUXGAruQOKo9736QzK7drKWTbklMJxL
t9yiYzmgbW15beGZ0g6G303C0JDYtkFfxyWwQ+vS4VW87pk3nMhvi/8lEUfPgVyI
rhXvxXLPaXgoTiNbCqyyBm+Dc426kGzRCOxmyq2YrLm5UhrFGG4RQ/QFdgU6/zzL
t8aCF7Xyk5dGpEgiLx3EXUGLWyyDa1ZuLN6KZh6LkaNqLIdAHwnXNb1XywhU7d1F
88GQZBtyT5v/7A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:28:47 2026 by rpki-client