Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
File:                     dr24CfTd5EyCqeW9i3cS1tdjvws.mft (raw, json)
Hash identifier:          Drc6+yBDLoQT6V6kwZKE5WBrR61DjqTRzHQJ+al5GQs=
Subject key identifier:   C4:CF:2B:95:27:CD:38:94:FB:16:C6:43:10:CD:BD:D4:4F:6E:E2:63
Authority key identifier: 76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B
Certificate issuer:       /CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
Certificate serial:       01A0208C751B30BEFAA921B082C3CAB6C2B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
Manifest number:          0210
Signing time:             Thu 20 Aug 2026 19:01:10 +0000
Manifest this update:     Thu 20 Aug 2026 19:01:10 +0000
Manifest next update:     Fri 21 Aug 2026 19:01:10 +0000
Files and hashes:         1: DElIG2I4poXxTLyxmk8qHhToIrc.roa (hash: EymYSA7xmGhavoS2+cvnhWPb/p1asE537I39DsH2QsI=)
                          2: dr24CfTd5EyCqeW9i3cS1tdjvws.crl (hash: bRh23YGHXIzzbX8xcMlipmiN1KZ98iZbi4EAp2w3KqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:8c:75:1b:30:be:fa:a9:21:b0:82:c3:ca:b6:c2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
        Validity
            Not Before: Aug 20 19:01:10 2026 GMT
            Not After : Aug 21 19:01:10 2026 GMT
        Subject: CN=c4cf2b9527cd3894fb16c64310cdbdd44f6ee263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c4:06:74:23:82:1d:45:08:56:a9:71:2d:a0:
                    15:cb:d5:33:3f:60:10:9d:80:37:98:b3:6b:4a:8f:
                    0d:f1:80:9a:42:a7:0e:3c:0e:e6:3f:ed:9a:91:34:
                    a9:f4:8a:d6:7f:68:3f:e8:fc:5a:1f:0d:8e:60:f7:
                    d2:b5:a0:41:99:16:9e:63:3b:78:cf:03:71:79:bb:
                    75:5b:f5:ec:8e:1e:2e:0d:b1:e7:55:0c:ba:68:07:
                    84:70:8f:19:ee:dd:f0:6b:98:2d:55:84:19:99:f7:
                    c7:7a:4d:11:ea:03:ad:61:3e:d0:62:18:ad:6f:e2:
                    e2:38:16:39:a6:c9:d2:f5:73:d6:6e:a1:d8:72:fb:
                    6f:6a:5e:74:4f:5a:87:d8:80:d0:24:56:bc:6b:54:
                    2a:27:f4:e5:c9:9c:90:db:9b:1c:fd:a2:15:38:89:
                    1c:33:95:b5:5a:72:00:75:22:70:f7:8f:81:23:39:
                    85:be:ae:ce:ca:b4:54:70:d1:68:bd:0a:ba:d5:a6:
                    02:bf:8d:0a:32:2b:a2:be:35:c9:28:c8:9a:c9:34:
                    67:bc:56:d9:49:7c:a1:2a:ec:e9:45:28:0e:b9:ea:
                    fc:de:22:4f:6c:25:63:eb:0b:cc:30:96:68:ff:1e:
                    6b:e8:ad:bb:23:7a:0d:9b:69:45:25:e3:da:07:05:
                    f2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CF:2B:95:27:CD:38:94:FB:16:C6:43:10:CD:BD:D4:4F:6E:E2:63
            X509v3 Authority Key Identifier:
                keyid:76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:cc:b2:98:e3:06:5a:51:11:4d:d0:8f:fd:0d:d3:68:12:ce:
         53:dc:60:60:3a:20:84:67:c3:82:6b:6f:73:f1:00:44:9d:76:
         90:ee:99:ff:55:24:05:ee:48:8b:01:ff:11:63:15:6e:60:9c:
         5f:7d:cd:ea:de:dc:39:8e:03:4d:af:8a:98:af:61:06:a3:ce:
         a1:e0:4b:ea:6d:71:58:1a:08:a6:ac:ff:ee:c6:f7:e3:1e:b0:
         bd:a3:5e:e7:f2:3c:00:bd:be:37:89:8d:65:07:5f:4d:b0:a5:
         3d:b3:f6:a1:e9:97:12:55:d3:1b:2a:d9:8f:b4:1d:f3:67:a6:
         0b:4b:c7:52:20:a7:93:21:29:2a:05:71:a7:f3:f8:7a:2d:20:
         83:e8:d9:5a:29:cc:b2:35:21:dc:5a:02:7b:35:ed:f0:16:c5:
         15:57:7a:03:b9:92:05:9d:ac:a6:2c:d5:2d:56:70:2c:a0:72:
         79:25:cc:2f:ac:d2:b1:dd:50:d4:b4:40:ac:21:24:0f:51:9e:
         5b:6d:c8:32:d3:af:33:b3:8c:a1:75:7c:d3:e1:ce:69:df:a6:
         4b:ac:7e:7f:0c:df:2d:ad:9d:32:c1:b1:42:85:df:63:e8:cc:
         4b:0b:15:0d:ca:6b:c7:8c:f6:08:41:8f:9f:d2:8e:57:ea:b4:
         aa:c5:8d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:35:11 2026 by rpki-client