Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
File:                     dp1cUsMVfllF5mO5LtRALGBhbjs.mft (raw, json)
Hash identifier:          QoFejsF308Ibck8OJevWZkDt+YaOkTlalC3VfUxhQ60=
Subject key identifier:   5D:C9:8C:FD:65:1B:4F:1C:15:11:EC:28:EB:B4:56:EF:A3:F9:44:A4
Authority key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Certificate issuer:       /CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Certificate serial:       01A08AC3BC555DBBC2F78121BBC398AC8E17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
Manifest number:          072C
Signing time:             Thu 10 Sep 2026 10:01:18 +0000
Manifest this update:     Thu 10 Sep 2026 10:01:18 +0000
Manifest next update:     Fri 11 Sep 2026 10:01:18 +0000
Files and hashes:         1: 3lauIf0YpbUjYSTnhhTVxklgLKk.roa (hash: yggx4J03w1luy3uhGhFmtwjE58TFme6YVBEKV6qwxTo=)
                          2: dp1cUsMVfllF5mO5LtRALGBhbjs.crl (hash: kITqOmWapSy2D4uBdUc8aXqIbltyBNg5SB5EyBMMd/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:bc:55:5d:bb:c2:f7:81:21:bb:c3:98:ac:8e:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
        Validity
            Not Before: Sep 10 10:01:18 2026 GMT
            Not After : Sep 11 10:01:18 2026 GMT
        Subject: CN=5dc98cfd651b4f1c1511ec28ebb456efa3f944a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5d:38:8d:19:4d:19:1b:ce:65:51:70:a6:5e:
                    84:64:03:39:8a:54:16:8e:97:31:ce:3e:d2:9d:5c:
                    21:9f:41:5b:cf:23:1e:2f:08:41:34:cb:3a:a9:4d:
                    38:ee:be:2e:80:34:44:9d:4f:33:d9:a2:7b:51:fa:
                    fa:ec:d8:bc:2c:0a:71:75:18:6f:94:f2:84:bd:7f:
                    01:82:94:88:a4:8f:c5:4d:a4:a0:f6:82:c2:92:55:
                    40:33:8f:23:90:cf:40:2f:84:34:e4:49:98:52:97:
                    a6:d6:cb:32:10:6f:5d:a9:d7:d1:c4:bb:c3:df:03:
                    11:67:42:8b:c2:cf:ca:38:2d:17:42:78:b5:78:06:
                    ee:3e:84:54:6d:53:82:5c:68:bd:1c:33:22:a3:81:
                    fc:da:00:52:9d:7c:c5:f8:43:32:0e:3a:b8:1a:fb:
                    af:1e:d6:b7:35:7b:17:24:2d:f7:09:36:fa:f1:32:
                    c9:0e:3c:22:ed:bb:89:f5:72:58:6c:9c:60:15:57:
                    17:0c:59:09:3b:13:f7:51:bc:24:c1:5c:dd:96:78:
                    8a:0a:1a:1c:2b:e7:c0:1f:75:e2:42:56:c5:91:8c:
                    5d:89:40:47:f9:ee:5d:ab:ee:7e:0a:91:c9:1e:6e:
                    f7:60:14:bf:e7:ce:ae:03:3c:d8:70:6e:b4:6f:65:
                    20:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C9:8C:FD:65:1B:4F:1C:15:11:EC:28:EB:B4:56:EF:A3:F9:44:A4
            X509v3 Authority Key Identifier:
                keyid:76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b2:24:5a:8a:af:b2:88:d5:a3:ba:6f:7b:49:cb:24:8f:78:
         f2:b7:d8:e3:af:95:20:ea:fa:1a:47:db:d8:7f:8c:26:e9:19:
         71:aa:8c:75:1d:5f:be:74:b0:f9:44:16:1d:1c:c7:e9:6b:06:
         b7:8c:94:db:ac:14:51:02:91:ce:d5:cf:e9:4a:f4:71:3b:18:
         87:66:f0:aa:86:45:ff:ef:12:34:b0:30:6f:d8:55:5a:22:b1:
         cc:30:0a:f7:b9:fd:24:04:8f:b5:66:62:e8:57:39:f6:3c:40:
         7a:9e:b2:09:18:95:32:ba:0d:6e:7c:ee:c7:7e:25:b6:64:e2:
         74:92:70:09:8f:a5:be:be:26:72:63:93:31:80:58:90:26:66:
         61:34:b9:87:73:a3:18:10:38:cc:40:c8:71:ff:6b:3b:5c:a3:
         85:7d:69:d5:98:c2:95:6c:ea:29:1f:d0:c2:21:2a:e5:c4:14:
         03:06:f5:23:25:fa:1e:e0:8b:7a:49:d7:74:b8:2f:3d:c1:6a:
         c7:fb:4f:c4:5a:1f:74:aa:bf:b0:fa:3a:3c:c8:24:b3:aa:5e:
         15:bc:ab:f4:3d:db:72:6e:de:2a:68:d2:0c:17:2a:fd:d9:ec:
         30:b9:d9:8f:c7:68:d4:f0:a3:65:66:d2:fe:f2:f8:da:df:27:
         ca:27:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:40:41 2026 by rpki-client