Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
File:                     d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft (raw, json)
Hash identifier:          I8ktf/92d0fMikRnYwoxrOXNHE0MQ7HBitZbLUD/UCw=
Subject key identifier:   1F:2D:73:31:4F:92:A7:2B:9E:5F:99:EF:91:27:86:78:E1:C1:EB:29
Authority key identifier: 77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1
Certificate issuer:       /CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
Certificate serial:       01A0B764D138B33253F81377C2E8E742395F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
Manifest number:          1144
Signing time:             Sat 19 Sep 2026 02:00:32 +0000
Manifest this update:     Sat 19 Sep 2026 02:00:32 +0000
Manifest next update:     Sun 20 Sep 2026 02:00:32 +0000
Files and hashes:         1: 1-x1SQoCge1oAxdF8NH1g432c8v4.roa (hash: gGNG1VzQDUnu5gmTgkEbwFhdDKx8kxbSdmHR7f+ftE8=)
                          2: d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl (hash: 5I01o9uPWFZWIHgubJlrYpXMb5Bvx6zGRRJJ/qerVls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 01:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b7:64:d1:38:b3:32:53:f8:13:77:c2:e8:e7:42:39:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77a350d9fe4e9f90ff3e84e2f960cb5dc3d6cee1
        Validity
            Not Before: Sep 19 02:00:32 2026 GMT
            Not After : Sep 20 02:00:32 2026 GMT
        Subject: CN=1f2d73314f92a72b9e5f99ef91278678e1c1eb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:0b:93:33:cb:06:df:dd:de:b1:5b:d9:5e:c8:
                    98:81:65:51:40:5e:e0:30:e2:a8:19:89:88:47:4c:
                    d1:0e:0a:c4:85:ec:b9:f8:37:d2:4b:db:ef:76:30:
                    a3:ca:a7:dc:b5:8e:3b:e2:34:4d:00:2c:e7:34:8a:
                    dd:eb:5e:77:c5:f7:a6:b3:7b:04:cf:03:fd:eb:27:
                    16:a3:66:48:38:5b:4a:0a:29:3a:09:af:4b:5f:a3:
                    f4:b9:0a:ca:04:70:e2:ea:7a:75:10:bf:87:3f:c2:
                    20:98:97:12:17:73:60:7a:33:be:15:60:c0:67:7e:
                    44:96:25:c0:fb:61:97:d9:c5:6d:38:b3:8b:f6:34:
                    fa:07:19:50:0a:db:ff:64:3a:b8:b0:a2:db:b3:73:
                    46:8c:a2:b2:15:11:20:49:07:f2:1f:a3:ce:38:2c:
                    aa:8b:3d:0f:ec:4b:c4:ea:91:1e:85:1e:8b:ed:30:
                    8a:8c:b9:77:c5:a7:16:27:12:c5:3a:a4:68:d7:a3:
                    08:92:0d:76:c0:8d:1e:fa:1a:84:a6:0e:cc:54:10:
                    1e:28:30:82:a8:6b:e2:a4:6b:ed:53:7d:69:fc:c3:
                    e6:be:db:f4:97:65:65:3e:ba:03:72:4c:1b:60:52:
                    78:ae:fb:0c:c8:06:05:69:b2:9d:e0:04:75:74:d1:
                    e6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2D:73:31:4F:92:A7:2B:9E:5F:99:EF:91:27:86:78:E1:C1:EB:29
            X509v3 Authority Key Identifier:
                keyid:77:A3:50:D9:FE:4E:9F:90:FF:3E:84:E2:F9:60:CB:5D:C3:D6:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6NQ2f5On5D_PoTi-WDLXcPWzuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8bc44b-5d5a-4b54-ab91-da1c515e5b29/1/d6NQ2f5On5D_PoTi-WDLXcPWzuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:0b:98:ee:a0:95:2c:ec:8e:65:97:e0:c5:9e:1b:16:18:0c:
         a1:9d:82:f6:7f:78:8a:3d:5e:37:f9:ea:cb:46:87:6f:b0:0a:
         a2:41:df:5e:11:af:50:f7:d4:f0:1d:cc:a2:36:ae:81:d2:ef:
         7f:7c:4a:13:04:0d:e7:46:cd:e1:f9:70:b5:dd:9e:19:9f:76:
         fd:29:3e:e4:d0:29:0b:6b:c2:64:3c:5d:ce:fe:25:7e:ab:f8:
         e7:e1:b1:9e:2f:16:ec:d3:2d:66:91:a8:8c:66:73:5a:2d:ce:
         eb:75:ab:86:62:d5:1f:a9:62:40:86:21:4e:3d:6a:85:59:d8:
         d6:33:ec:0a:bb:76:b9:53:40:e7:47:e3:0f:2c:cc:fa:f9:00:
         af:84:46:2a:bc:59:83:01:3d:36:83:36:42:da:eb:ca:b9:2f:
         6f:e6:40:17:f4:f3:db:93:2c:34:07:19:25:3a:79:e0:cd:be:
         62:67:f6:26:ba:79:59:88:01:4b:84:c6:82:0c:42:e5:a7:e0:
         9c:cd:23:06:6d:02:07:62:3c:46:bc:b4:9d:76:94:de:ac:11:
         6c:2a:55:00:5f:35:81:3a:16:10:5c:b3:7a:4e:81:8a:72:f0:
         f8:57:0a:9e:45:7b:0b:6d:a5:50:aa:8d:25:bd:4b:cf:18:0c:
         af:16:52:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC3ZNE4szJT+BN3wujnQjlfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YTM1MGQ5ZmU0ZTlmOTBmZjNlODRlMmY5NjBjYjVkYzNk
NmNlZTEwHhcNMjYwOTE5MDIwMDMyWhcNMjYwOTIwMDIwMDMyWjAzMTEwLwYDVQQD
EygxZjJkNzMzMTRmOTJhNzJiOWU1Zjk5ZWY5MTI3ODY3OGUxYzFlYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+QuTM8sG393esVvZXsiYgWVRQF7g
MOKoGYmIR0zRDgrEhey5+DfSS9vvdjCjyqfctY474jRNACznNIrd6153xfems3sE
zwP96ycWo2ZIOFtKCik6Ca9LX6P0uQrKBHDi6np1EL+HP8IgmJcSF3NgejO+FWDA
Z35EliXA+2GX2cVtOLOL9jT6BxlQCtv/ZDq4sKLbs3NGjKKyFREgSQfyH6POOCyq
iz0P7EvE6pEehR6L7TCKjLl3xacWJxLFOqRo16MIkg12wI0e+hqEpg7MVBAeKDCC
qGvipGvtU31p/MPmvtv0l2VlProDckwbYFJ4rvsMyAYFabKd4AR1dNHmeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8tczFPkqcrnl+Z75EnhnjhwespMB8GA1UdIwQY
MBaAFHejUNn+Tp+Q/z6E4vlgy13D1s7hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEt
ZGExYzUxNWU1YjI5LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS84YmM0NGItNWQ1YS00YjU0LWFiOTEtZGExYzUxNWU1YjI5
LzEvZDZOUTJmNU9uNURfUG9UaS1XRExYY1BXenVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQuY7qCV
LOyOZZfgxZ4bFhgMoZ2C9n94ij1eN/nqy0aHb7AKokHfXhGvUPfU8B3MojaugdLv
f3xKEwQN50bN4flwtd2eGZ92/Sk+5NApC2vCZDxdzv4lfqv45+Gxni8W7NMtZpGo
jGZzWi3O63WrhmLVH6liQIYhTj1qhVnY1jPsCrt2uVNA50fjDyzM+vkAr4RGKrxZ
gwE9NoM2Qtrryrkvb+ZAF/Tz25MsNAcZJTp54M2+Ymf2Jrp5WYgBS4TGggxC5afg
nM0jBm0CB2I8Rry0nXaU3qwRbCpVAF81gToWEFyzek6BinLw+FcKnkV7C22lUKqN
Jb1LzxgMrxZSjA==
-----END CERTIFICATE-----
Generated at Sat Sep 19 06:03:51 2026 by rpki-client