Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
File:                     0d4HoaH2W9EW4R-fEQhgS26VzP0.mft (raw, json)
Hash identifier:          PvnffC47Ow3y+sjD4E6wc+oPb6JU+7/eQ6oESBapxvw=
Subject key identifier:   0A:24:82:66:84:19:37:0A:3B:ED:35:C1:C7:ED:A6:F7:25:81:FB:EA
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Certificate issuer:       /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial:       019FABD192FFFABB099D8AE19AF9D8938AF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
Manifest number:          156A
Signing time:             Wed 29 Jul 2026 03:01:06 +0000
Manifest this update:     Wed 29 Jul 2026 03:01:06 +0000
Manifest next update:     Thu 30 Jul 2026 03:01:06 +0000
Files and hashes:         1: 0d4HoaH2W9EW4R-fEQhgS26VzP0.crl (hash: /VNarrxniY3VZuuTaWkuKA+NGhLzvyJaJzQgvHeQbs4=)
                          2: 6AcW6a22cinoLIymW2byGAd7uWo.roa (hash: RoxEP6kBPzD8q8xHwCRknSTvIS7/SOyyVCFWMK8wKF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:92:ff:fa:bb:09:9d:8a:e1:9a:f9:d8:93:8a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
        Validity
            Not Before: Jul 29 03:01:06 2026 GMT
            Not After : Jul 30 03:01:06 2026 GMT
        Subject: CN=0a2482668419370a3bed35c1c7eda6f72581fbea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bd:6a:55:f3:be:cb:27:5f:26:15:30:64:4f:
                    2b:69:45:c0:8a:43:6b:16:45:67:94:03:6c:55:5e:
                    86:1b:c6:85:f9:c4:78:02:24:07:9c:d0:a7:83:6f:
                    ad:bf:d8:6d:96:c1:7f:7a:61:97:e6:cd:dc:0d:d5:
                    8a:0d:83:05:fa:1b:ea:24:a7:32:df:53:25:d4:f3:
                    1b:75:2e:b1:c7:e4:5b:12:d0:c1:a9:d0:6b:ee:bb:
                    ec:ff:56:43:1d:7c:5f:59:e4:87:74:2a:02:ff:42:
                    d6:84:49:30:35:9a:f2:2c:cb:30:40:a2:43:5c:00:
                    be:c3:32:47:9b:ef:02:81:de:5a:c6:74:5f:fa:c8:
                    c4:52:f1:18:6c:62:ee:a7:36:49:83:eb:4e:ba:52:
                    f0:94:7f:90:bf:6e:45:cd:a8:7d:88:a6:11:ce:6e:
                    5c:e1:c1:a5:54:28:0e:5f:52:51:4e:00:04:48:3e:
                    22:96:c5:8d:f7:64:4e:f3:d4:4e:e4:3b:82:8f:10:
                    47:55:c1:e9:f1:94:fd:8b:d2:42:2f:9a:fe:b2:0b:
                    a0:be:86:ec:e0:43:ac:e1:9a:e3:ed:ac:4e:50:cc:
                    60:7f:1d:c0:58:0e:14:9a:15:78:9c:ed:97:2d:dd:
                    47:f0:c0:90:77:c6:f4:75:0e:36:fc:d8:2e:65:96:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:24:82:66:84:19:37:0A:3B:ED:35:C1:C7:ED:A6:F7:25:81:FB:EA
            X509v3 Authority Key Identifier:
                keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7c:7a:15:0f:ec:4b:2a:f6:b6:a3:5c:a5:ac:fa:37:fd:e9:
         ce:77:83:ae:64:99:52:8a:2c:3f:86:9e:00:4e:99:b3:25:c0:
         5a:3b:f9:62:08:41:24:71:c7:ea:27:c3:55:d9:23:17:38:b0:
         f6:72:b1:5b:d4:39:7a:ae:2e:06:dc:ce:d7:e6:d5:83:64:2b:
         a0:54:f2:90:32:24:bf:31:b4:dc:39:95:80:30:41:a3:56:a9:
         4f:9b:87:6e:3d:40:34:60:54:13:08:b2:bf:93:92:24:eb:e5:
         64:be:4d:c1:25:1b:66:aa:dc:7d:a6:80:ac:c4:93:5c:d7:65:
         dc:90:e9:c2:4e:e4:eb:a0:d0:ef:65:c0:71:e4:a6:ad:00:3b:
         5e:14:b4:8f:ba:66:4c:0c:40:e2:6f:68:6d:74:a4:94:ef:74:
         86:c2:d0:fd:bf:5e:f7:c7:0b:e2:ff:e4:f4:91:a7:c4:2c:38:
         87:1a:39:76:ac:61:5a:44:95:6f:5b:0c:0e:97:c9:a0:e2:a4:
         36:93:5a:c3:df:66:96:5a:b2:30:be:2c:63:a4:2d:8e:6d:a1:
         28:6f:89:87:8c:a0:2f:29:99:27:ea:e8:2f:e2:59:6f:a3:98:
         54:4c:5c:60:12:a5:31:d1:06:2a:47:aa:88:c2:a9:80:36:20:
         91:2a:08:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0ZL/+rsJnYrhmvnYk4rzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUwN2ExYTFmNjViZDExNmUxMWY5ZjExMDg2MDRiNmU5
NWNjZmQwHhcNMjYwNzI5MDMwMTA2WhcNMjYwNzMwMDMwMTA2WjAzMTEwLwYDVQQD
EygwYTI0ODI2Njg0MTkzNzBhM2JlZDM1YzFjN2VkYTZmNzI1ODFmYmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL1qVfO+yydfJhUwZE8raUXAikNr
FkVnlANsVV6GG8aF+cR4AiQHnNCng2+tv9htlsF/emGX5s3cDdWKDYMF+hvqJKcy
31Ml1PMbdS6xx+RbEtDBqdBr7rvs/1ZDHXxfWeSHdCoC/0LWhEkwNZryLMswQKJD
XAC+wzJHm+8Cgd5axnRf+sjEUvEYbGLupzZJg+tOulLwlH+Qv25Fzah9iKYRzm5c
4cGlVCgOX1JRTgAESD4ilsWN92RO89RO5DuCjxBHVcHp8ZT9i9JCL5r+sgugvobs
4EOs4Zrj7axOUMxgfx3AWA4UmhV4nO2XLd1H8MCQd8b0dQ42/NguZZZXDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAokgmaEGTcKO+01wcftpvclgfvqMB8GA1UdIwQY
MBaAFNHeB6Gh9lvRFuEfnxEIYEtulcz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2Mt
OTlmMTgyMjEzZDRmLzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2MtOTlmMTgyMjEzZDRm
LzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3x6FQ/s
Syr2tqNcpaz6N/3pzneDrmSZUoosP4aeAE6ZsyXAWjv5YghBJHHH6ifDVdkjFziw
9nKxW9Q5eq4uBtzO1+bVg2QroFTykDIkvzG03DmVgDBBo1apT5uHbj1ANGBUEwiy
v5OSJOvlZL5NwSUbZqrcfaaArMSTXNdl3JDpwk7k66DQ72XAceSmrQA7XhS0j7pm
TAxA4m9obXSklO90hsLQ/b9e98cL4v/k9JGnxCw4hxo5dqxhWkSVb1sMDpfJoOKk
NpNaw99mllqyML4sY6Qtjm2hKG+Jh4ygLymZJ+roL+JZb6OYVExcYBKlMdEGKkeq
iMKpgDYgkSoItg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:49:58 2026 by rpki-client