Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File:                     drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier:          BRxbDKiVC6DD9Vcv9D9OUi5FDiAUkKhPPfADd0v/Xvg=
Subject key identifier:   F0:5C:6B:33:5B:75:36:DC:15:D2:36:4D:D9:C4:A8:16:C7:EA:48:F1
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer:       /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial:       019D9BBE5F66B13F30A73E457934930DE2C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number:          0377
Signing time:             Fri 17 Apr 2026 14:00:37 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:37 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:37 +0000
Files and hashes:         1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: 4bmWNjm6zblpZm2VUui2ubUcYXcshRhlKoNYb5ms6m0=)
                          2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:5f:66:b1:3f:30:a7:3e:45:79:34:93:0d:e2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
        Validity
            Not Before: Apr 17 14:00:37 2026 GMT
            Not After : Apr 18 14:00:37 2026 GMT
        Subject: CN=f05c6b335b7536dc15d2364dd9c4a816c7ea48f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3c:48:75:b0:11:08:d1:cc:cc:ed:db:8e:68:
                    2e:8b:cd:8b:1e:d8:58:a4:fe:db:8f:fa:b5:12:37:
                    62:75:41:23:cb:a5:76:4b:d1:d4:79:97:ac:cd:3c:
                    f7:34:36:dc:6c:e5:bf:a5:99:ef:43:d6:18:61:99:
                    c1:80:02:4d:48:3c:3c:94:f4:c8:64:6e:0e:6b:72:
                    20:41:68:80:f1:28:46:2a:e3:94:bb:1a:3d:4d:7a:
                    49:26:b6:0d:e1:7c:5c:c7:d9:71:2c:c2:8e:05:92:
                    cb:76:3e:f3:5f:59:29:bd:34:f5:14:84:a6:2c:c1:
                    11:f0:dc:ee:f6:85:17:74:de:21:e8:52:fb:ec:8e:
                    7b:02:30:1c:89:c3:98:d0:0f:14:78:7d:7a:e6:d6:
                    cc:54:13:21:95:94:2c:c7:14:58:26:c8:d8:a5:d8:
                    cd:db:b1:43:be:cb:af:06:3a:ff:0c:06:1d:3f:cc:
                    25:9a:2e:b9:d6:0e:b5:60:8c:3a:68:52:1d:83:5a:
                    ab:43:af:86:15:dd:e8:79:bc:ae:50:e6:49:52:fe:
                    7e:0e:8b:59:fd:93:ff:b7:9d:ce:4e:12:58:0c:f8:
                    b2:39:ec:d3:42:63:bb:8d:3e:70:15:68:ce:4e:07:
                    36:52:70:e5:3b:1b:83:95:f7:be:b3:74:5c:4b:77:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5C:6B:33:5B:75:36:DC:15:D2:36:4D:D9:C4:A8:16:C7:EA:48:F1
            X509v3 Authority Key Identifier:
                keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:24:85:91:a4:61:c0:67:1f:04:38:48:87:68:55:8e:25:
         ef:6b:d7:2d:43:43:21:8a:fc:12:fc:a1:5e:c2:fc:89:82:5b:
         5b:d7:cc:3a:df:3e:3f:85:bf:e3:de:75:ec:fe:a5:9d:17:f0:
         8f:5e:70:cd:4a:13:07:6b:d8:d4:60:87:01:2c:a1:17:d6:d2:
         6b:17:3f:77:2a:6d:da:6e:fb:7f:7b:91:d7:cd:02:c6:d2:95:
         86:3d:92:1e:bb:e8:7b:b0:c1:c4:2a:e1:7c:e7:a4:39:39:4b:
         79:37:78:0e:27:98:b7:e2:1b:b0:13:21:82:15:ce:5b:73:1e:
         c6:41:1e:55:d0:8a:a0:58:fb:0e:7e:40:ae:0d:74:c3:02:e0:
         13:80:b1:6d:7b:22:25:55:6b:59:2b:3e:2c:06:65:1d:75:db:
         f7:7c:90:8a:ed:8d:14:20:f2:8e:63:dc:1c:a7:e8:a7:99:9c:
         5b:c1:c6:f9:c7:4e:1d:b9:b8:77:aa:ae:3c:dd:c0:0e:e6:fa:
         22:ba:cd:c8:2a:1b:f5:54:06:5d:5e:bf:7b:0f:da:4e:1b:0d:
         2e:2c:27:6f:ac:20:da:b5:54:7b:f3:58:06:81:c0:ea:a1:07:
         99:97:64:96:50:55:45:9f:1b:45:87:3d:0c:03:bc:19:90:d4:
         ff:80:49:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bvl9msT8wpz5FeTSTDeLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YmI1OWQ4YWI0YWI1Mjc3Y2VlZTVmZjA5ODIwODQzMzA2
MjdiMWYwHhcNMjYwNDE3MTQwMDM3WhcNMjYwNDE4MTQwMDM3WjAzMTEwLwYDVQQD
EyhmMDVjNmIzMzViNzUzNmRjMTVkMjM2NGRkOWM0YTgxNmM3ZWE0OGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DxIdbARCNHMzO3bjmgui82LHthY
pP7bj/q1EjdidUEjy6V2S9HUeZeszTz3NDbcbOW/pZnvQ9YYYZnBgAJNSDw8lPTI
ZG4Oa3IgQWiA8ShGKuOUuxo9TXpJJrYN4Xxcx9lxLMKOBZLLdj7zX1kpvTT1FISm
LMER8Nzu9oUXdN4h6FL77I57AjAcicOY0A8UeH165tbMVBMhlZQsxxRYJsjYpdjN
27FDvsuvBjr/DAYdP8wlmi651g61YIw6aFIdg1qrQ6+GFd3oebyuUOZJUv5+DotZ
/ZP/t53OThJYDPiyOezTQmO7jT5wFWjOTgc2UnDlOxuDlfe+s3RcS3ctLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBcazNbdTbcFdI2TdnEqBbH6kjxMB8GA1UdIwQY
MBaAFHa7WdirSrUnfO7l/wmCCEMwYnsfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS84MmQ2NWUtZTBkOS00ZmNkLWIzYWUt
NGQzYTVjMDQyZTYxLzEvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS84MmQ2NWUtZTBkOS00ZmNkLWIzYWUtNGQzYTVjMDQyZTYx
LzEvZHJ0WjJLdEt0U2Q4N3VYX0NZSUlRekJpZXg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANi8khZGk
YcBnHwQ4SIdoVY4l72vXLUNDIYr8EvyhXsL8iYJbW9fMOt8+P4W/49517P6lnRfw
j15wzUoTB2vY1GCHASyhF9bSaxc/dypt2m77f3uR180CxtKVhj2SHrvoe7DBxCrh
fOekOTlLeTd4DieYt+IbsBMhghXOW3MexkEeVdCKoFj7Dn5Arg10wwLgE4CxbXsi
JVVrWSs+LAZlHXXb93yQiu2NFCDyjmPcHKfop5mcW8HG+cdOHbm4d6quPN3ADub6
IrrNyCob9VQGXV6/ew/aThsNLiwnb6wg2rVUe/NYBoHA6qEHmZdkllBVRZ8bRYc9
DAO8GZDU/4BJjg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:23:12 2026 by rpki-client