Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
File:                     0LYdHx2czatrbY4UUMLJNtOX5nA.mft (raw, json)
Hash identifier:          faegrNnvzuNHQCRiALeDpgKlhi+1g5hf/rAiOuWCzNA=
Subject key identifier:   C1:57:66:09:89:5E:4A:FB:46:D4:DB:C3:59:71:B4:51:10:22:5F:FA
Authority key identifier: D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70
Certificate issuer:       /CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
Certificate serial:       01A0D872A14A810D3634022811DB34809E4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
Manifest number:          0764
Signing time:             Fri 25 Sep 2026 12:03:05 +0000
Manifest this update:     Fri 25 Sep 2026 12:03:05 +0000
Manifest next update:     Sat 26 Sep 2026 12:03:05 +0000
Files and hashes:         1: 0LYdHx2czatrbY4UUMLJNtOX5nA.crl (hash: sQDYeHDx7rwpAAGJzlqxlD46hZubcZEq5SGa9HY38xk=)
                          2: zga9Hrw7zuD_QLdtCJpMRKMP3DQ.roa (hash: AOEGUef18XORevLws81X/8IWws1WokZExo2mQVZZKN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:a1:4a:81:0d:36:34:02:28:11:db:34:80:9e:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b61d1f1d9ccdab6b6d8e1450c2c936d397e670
        Validity
            Not Before: Sep 25 12:03:05 2026 GMT
            Not After : Sep 26 12:03:05 2026 GMT
        Subject: CN=c1576609895e4afb46d4dbc35971b45110225ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e5:bc:e5:fd:c4:c7:1c:06:75:46:a8:32:e4:
                    5d:c7:bb:e6:84:f8:65:f6:ae:dd:82:26:f2:ad:cf:
                    b0:80:c8:34:7a:16:dc:db:71:f5:28:35:7e:54:6e:
                    a4:28:a6:58:c9:df:d9:6f:16:e7:0a:0b:53:8a:1e:
                    be:4d:37:75:89:e5:83:69:ab:e0:7c:59:36:ea:eb:
                    40:cd:ee:7f:5d:4b:1b:07:e7:b1:45:61:29:61:21:
                    fd:03:b5:e8:62:17:32:36:55:57:fc:6a:6e:f8:02:
                    74:48:10:16:2e:dc:c5:64:42:2c:87:f9:90:83:b1:
                    34:a9:a8:ae:b8:b9:2f:a6:a7:dd:c9:5d:83:90:68:
                    49:89:2d:00:04:1f:c2:1d:1e:48:12:8b:73:fb:13:
                    22:bb:6f:24:d1:7c:3a:82:72:a1:82:d6:3c:c3:c0:
                    c4:dd:54:33:04:f4:1b:bf:ee:db:f2:14:db:0c:42:
                    71:f8:7c:bf:71:fc:f1:a2:b3:9e:ae:2d:c4:2b:19:
                    2e:4b:dd:b0:f0:aa:db:c5:cd:12:e5:c5:d3:50:65:
                    aa:df:4c:33:87:a1:3e:f6:6f:24:d1:83:5e:16:8e:
                    75:30:64:70:93:e7:f8:db:bd:f0:88:94:1e:71:cf:
                    f4:f8:8c:61:84:eb:32:9c:b1:ce:66:43:77:e6:9a:
                    83:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:57:66:09:89:5E:4A:FB:46:D4:DB:C3:59:71:B4:51:10:22:5F:FA
            X509v3 Authority Key Identifier:
                keyid:D0:B6:1D:1F:1D:9C:CD:AB:6B:6D:8E:14:50:C2:C9:36:D3:97:E6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0LYdHx2czatrbY4UUMLJNtOX5nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/317635-a90a-4704-9672-15f62c890af8/1/0LYdHx2czatrbY4UUMLJNtOX5nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b5:c4:45:d1:6f:5c:5a:73:c7:35:f5:3b:29:fe:d4:b6:ab:
         b8:8f:5c:be:fd:da:46:02:86:ea:4a:4e:d6:98:d4:9c:11:33:
         5b:88:f6:a5:9c:09:2b:d3:be:40:e6:91:47:d5:71:4a:42:73:
         30:e2:ce:92:e7:53:df:5f:a2:f7:71:9e:d5:4d:81:7a:b0:7a:
         84:db:27:5e:dc:14:ad:c9:68:ef:e3:d1:91:3d:18:b7:9f:e7:
         ed:fa:e3:e8:88:e5:77:06:7d:6e:5d:09:3c:57:3e:7f:f6:4a:
         8c:df:f8:63:39:dd:8f:3c:b2:14:fc:eb:cc:e6:67:da:4c:60:
         88:95:d6:8b:46:c2:dd:28:55:df:3d:50:2f:8c:2e:65:7a:37:
         92:2a:bf:c1:3d:8d:b6:32:86:58:74:df:3a:4e:ed:7e:b6:74:
         fe:17:60:75:4f:d5:6a:68:1a:21:e7:35:fa:af:34:76:4f:81:
         2c:c0:1c:ec:43:52:4d:20:f1:01:f8:b3:76:b6:5a:89:59:20:
         d0:91:9e:f0:f6:5a:4d:48:ee:a1:d8:a9:e1:14:33:a3:9e:47:
         06:b7:c1:81:82:d7:ac:61:45:83:c5:7b:20:5b:94:ca:9d:74:
         b4:9a:da:6a:dc:00:14:9d:78:ff:81:c4:fc:e9:67:ee:53:ea:
         8e:12:0a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcqFKgQ02NAIoEds0gJ5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYjYxZDFmMWQ5Y2NkYWI2YjZkOGUxNDUwYzJjOTM2ZDM5
N2U2NzAwHhcNMjYwOTI1MTIwMzA1WhcNMjYwOTI2MTIwMzA1WjAzMTEwLwYDVQQD
EyhjMTU3NjYwOTg5NWU0YWZiNDZkNGRiYzM1OTcxYjQ1MTEwMjI1ZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreW85f3ExxwGdUaoMuRdx7vmhPhl
9q7dgibyrc+wgMg0ehbc23H1KDV+VG6kKKZYyd/ZbxbnCgtTih6+TTd1ieWDaavg
fFk26utAze5/XUsbB+exRWEpYSH9A7XoYhcyNlVX/Gpu+AJ0SBAWLtzFZEIsh/mQ
g7E0qaiuuLkvpqfdyV2DkGhJiS0ABB/CHR5IEotz+xMiu28k0Xw6gnKhgtY8w8DE
3VQzBPQbv+7b8hTbDEJx+Hy/cfzxorOeri3EKxkuS92w8Krbxc0S5cXTUGWq30wz
h6E+9m8k0YNeFo51MGRwk+f4273wiJQecc/0+IxhhOsynLHOZkN35pqDDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFXZgmJXkr7RtTbw1lxtFEQIl/6MB8GA1UdIwQY
MBaAFNC2HR8dnM2ra22OFFDCyTbTl+ZwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMExZZEh4MmN6YXRyYlk0VVVNTEpOdE9YNW5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zMTc2MzUtYTkwYS00NzA0LTk2NzIt
MTVmNjJjODkwYWY4LzEvMExZZEh4MmN6YXRyYlk0VVVNTEpOdE9YNW5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8zMTc2MzUtYTkwYS00NzA0LTk2NzItMTVmNjJjODkwYWY4
LzEvMExZZEh4MmN6YXRyYlk0VVVNTEpOdE9YNW5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGrXERdFv
XFpzxzX1Oyn+1LaruI9cvv3aRgKG6kpO1pjUnBEzW4j2pZwJK9O+QOaRR9VxSkJz
MOLOkudT31+i93Ge1U2BerB6hNsnXtwUrclo7+PRkT0Yt5/n7frj6IjldwZ9bl0J
PFc+f/ZKjN/4YzndjzyyFPzrzOZn2kxgiJXWi0bC3ShV3z1QL4wuZXo3kiq/wT2N
tjKGWHTfOk7tfrZ0/hdgdU/VamgaIec1+q80dk+BLMAc7ENSTSDxAfizdrZaiVkg
0JGe8PZaTUjuodip4RQzo55HBrfBgYLXrGFFg8V7IFuUyp10tJraatwAFJ14/4HE
/Oln7lPqjhIKTw==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:48:35 2026 by rpki-client