Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File:                     dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier:          xWLDV8Pc5qiG3Eu7cfOHW3c7kUubwnWJy2BFkYptq/8=
Subject key identifier:   9D:61:AC:EE:CB:67:CC:D8:B3:E4:F5:D7:4A:47:DD:20:7F:6F:AA:34
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer:       /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial:       019DCF75F23C9400A0A7D408222CF39C1E59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number:          0CC4
Signing time:             Mon 27 Apr 2026 15:01:46 +0000
Manifest this update:     Mon 27 Apr 2026 15:01:46 +0000
Manifest next update:     Tue 28 Apr 2026 15:01:46 +0000
Files and hashes:         1: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (hash: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0=)
                          2: FLA5zAJXuRYhVvLbMvHegLVx03k.roa (hash: ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=)
                          3: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (hash: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs=)
                          4: TSfqyIUxAgfu2d6E5vUEde-a71w.roa (hash: m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=)
                          5: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: oKtqvXJSgJrTKUhbSN8pkJzCfGkk+sIrGyb5T9jXvKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 15:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:75:f2:3c:94:00:a0:a7:d4:08:22:2c:f3:9c:1e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
        Validity
            Not Before: Apr 27 15:01:46 2026 GMT
            Not After : Apr 28 15:01:46 2026 GMT
        Subject: CN=9d61aceecb67ccd8b3e4f5d74a47dd207f6faa34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:51:d5:da:8a:c2:1a:41:05:a7:04:0b:e9:fb:
                    ed:1a:ff:34:b3:d1:90:fb:c7:99:9c:60:49:1e:5e:
                    90:84:af:4d:9b:ca:a1:92:44:62:47:97:af:02:2f:
                    2d:5e:97:0f:aa:30:6f:a0:69:d6:08:bc:f7:22:32:
                    a2:dd:97:c0:a1:10:04:b7:5b:f1:f8:e8:8e:6f:5f:
                    0d:4c:2d:50:97:fe:1d:b2:7f:36:f2:f6:84:af:8d:
                    7b:92:a7:8e:36:55:e0:f9:66:c2:3d:25:e1:36:d6:
                    8f:8d:25:dd:35:6a:82:77:3f:07:8d:8c:e2:fe:35:
                    fb:f8:23:86:a1:9b:ac:6c:7e:e8:2c:5d:ff:88:17:
                    78:28:a8:5b:ce:31:5e:ef:bd:42:cb:b3:0b:ff:44:
                    f7:ac:a4:9d:b8:02:57:11:1c:d6:76:5e:62:f3:8f:
                    b8:33:88:de:11:49:aa:27:43:69:4f:1f:c5:c2:19:
                    dc:e9:2a:04:49:de:0c:92:da:0e:21:25:42:41:32:
                    a2:f1:e8:01:68:e9:46:f4:f1:e2:d4:07:f4:58:fd:
                    97:e1:2a:8b:d4:2c:0c:0e:4e:7f:ab:44:a1:6e:65:
                    63:b3:b4:30:f7:c1:ea:8a:64:e6:30:72:28:e9:67:
                    5c:e0:27:1a:80:f8:89:e9:5e:a8:02:40:f4:b1:31:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:61:AC:EE:CB:67:CC:D8:B3:E4:F5:D7:4A:47:DD:20:7F:6F:AA:34
            X509v3 Authority Key Identifier:
                keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:5a:f9:67:35:c5:56:ed:f1:e6:b5:50:dc:8e:4c:43:7d:6c:
         76:8c:80:3b:4d:f0:7a:66:26:5a:ee:33:cd:8d:f9:60:f6:c3:
         15:10:30:a0:4c:be:4a:2c:eb:b7:06:d0:1a:87:07:26:da:8e:
         b1:84:dc:d2:38:2a:3b:3b:46:21:93:cd:43:bf:35:1c:a6:c9:
         b0:5c:9d:5a:83:76:2c:36:3e:b8:5b:26:52:70:8b:8b:9b:d9:
         bb:ab:b3:a4:f6:a1:7f:03:57:88:6a:71:b7:41:c9:51:cb:c0:
         18:1c:ee:ac:7d:18:54:19:ad:06:66:ee:7d:43:ff:1f:f9:3a:
         89:fd:eb:c6:ef:d1:58:c9:c2:21:ac:0c:f8:ed:ac:23:51:c5:
         24:80:0b:26:8c:cf:e5:14:5d:62:40:2f:26:06:38:93:f2:f8:
         a6:31:10:f7:31:74:af:f6:16:d0:de:8c:67:39:79:89:ae:73:
         c7:02:73:f5:b7:be:47:e0:cf:84:d9:0a:ee:e5:ad:ca:fc:cd:
         4d:84:3c:6f:bc:61:59:ac:60:8e:b1:87:3d:39:3b:e4:ff:2e:
         ea:a3:32:5d:05:eb:80:80:41:5f:c1:bd:1d:5d:e2:f3:38:88:
         34:02:ab:ee:87:6f:3c:38:6e:5b:1f:4c:ed:e4:1f:81:e8:fc:
         e1:20:9b:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3PdfI8lACgp9QIIizznB5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Yjc5NTA2NjE1MGExYzM2N2RhYmNjZjY5Yzk3MGFiMGM3
MjMyMTUwHhcNMjYwNDI3MTUwMTQ2WhcNMjYwNDI4MTUwMTQ2WjAzMTEwLwYDVQQD
Eyg5ZDYxYWNlZWNiNjdjY2Q4YjNlNGY1ZDc0YTQ3ZGQyMDdmNmZhYTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVHV2orCGkEFpwQL6fvtGv80s9GQ
+8eZnGBJHl6QhK9Nm8qhkkRiR5evAi8tXpcPqjBvoGnWCLz3IjKi3ZfAoRAEt1vx
+OiOb18NTC1Ql/4dsn828vaEr417kqeONlXg+WbCPSXhNtaPjSXdNWqCdz8HjYzi
/jX7+COGoZusbH7oLF3/iBd4KKhbzjFe771Cy7ML/0T3rKSduAJXERzWdl5i84+4
M4jeEUmqJ0NpTx/Fwhnc6SoESd4MktoOISVCQTKi8egBaOlG9PHi1Af0WP2X4SqL
1CwMDk5/q0ShbmVjs7Qw98HqimTmMHIo6Wdc4CcagPiJ6V6oAkD0sTE/fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1hrO7LZ8zYs+T110pH3SB/b6o0MB8GA1UdIwQY
MBaAFHW3lQZhUKHDZ9q8z2nJcKsMcjIVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjct
NTQ3YmU0Y2ZhNDU3LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS80NjZhYWItYTQ3MC00MzQ0LWEzNjctNTQ3YmU0Y2ZhNDU3
LzEvZGJlVkJtRlFvY05uMnJ6UGFjbHdxd3h5TWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFr5ZzXF
Vu3x5rVQ3I5MQ31sdoyAO03wemYmWu4zzY35YPbDFRAwoEy+SizrtwbQGocHJtqO
sYTc0jgqOztGIZPNQ781HKbJsFydWoN2LDY+uFsmUnCLi5vZu6uzpPahfwNXiGpx
t0HJUcvAGBzurH0YVBmtBmbufUP/H/k6if3rxu/RWMnCIawM+O2sI1HFJIALJozP
5RRdYkAvJgY4k/L4pjEQ9zF0r/YW0N6MZzl5ia5zxwJz9be+R+DPhNkK7uWtyvzN
TYQ8b7xhWaxgjrGHPTk75P8u6qMyXQXrgIBBX8G9HV3i8ziINAKr7odvPDhuWx9M
7eQfgej84SCb+Q==
-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:23 2026 by rpki-client