Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
File:                     Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft (raw, json)
Hash identifier:          jh6hHxz9gBFOEnoeLlh8S8BEeN/OgOoF6z0mJui1W/g=
Subject key identifier:   E3:5E:6E:4C:05:2E:26:17:CC:13:82:1D:2D:B4:83:B4:87:68:9A:C7
Authority key identifier: 0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40
Certificate issuer:       /CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
Certificate serial:       01A00101136E9B05DDDF6DF6548234621F5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
Manifest number:          183D
Signing time:             Fri 14 Aug 2026 16:00:42 +0000
Manifest this update:     Fri 14 Aug 2026 16:00:42 +0000
Manifest next update:     Sat 15 Aug 2026 16:00:42 +0000
Files and hashes:         1: Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl (hash: tZUYnLkVnst2fjGW9jbFKdFmiHDAnh+xIYRhoJO/kW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:13:6e:9b:05:dd:df:6d:f6:54:82:34:62:1f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e8ce0a6abb8ee50d44b3bae42d4a2549ffb8240
        Validity
            Not Before: Aug 14 16:00:42 2026 GMT
            Not After : Aug 15 16:00:42 2026 GMT
        Subject: CN=e35e6e4c052e2617cc13821d2db483b487689ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:32:5d:7a:d6:5d:b8:8a:7b:0e:49:fa:9b:e3:
                    b3:36:07:49:cc:0e:cf:00:8c:ff:15:d9:eb:43:a9:
                    74:92:48:d0:80:ac:99:b5:95:ea:03:05:b9:08:d7:
                    fb:e8:47:a7:64:4b:ae:87:26:1d:7b:1c:86:3b:83:
                    78:e7:9f:7a:72:25:f9:aa:a6:96:94:9a:50:c7:a5:
                    8d:fa:82:37:e4:a7:12:b9:c5:7d:c1:c7:0b:12:b8:
                    35:c2:37:5f:c3:7f:34:a3:8c:66:b5:5f:11:7d:74:
                    4a:6b:2d:5e:1f:be:67:08:c9:29:8d:fa:20:51:83:
                    2a:f0:03:d3:4c:0c:b2:27:f8:2f:44:3e:78:56:e7:
                    6c:d4:38:00:2d:da:e3:19:37:5f:90:ca:25:72:91:
                    12:f0:ad:cd:1c:cc:93:f4:16:23:e6:17:25:ef:9b:
                    a3:cf:0b:6c:91:81:9b:5b:38:3d:d4:c7:20:8d:a6:
                    87:7f:de:2d:5b:7b:c0:18:dc:a9:20:13:d8:b9:a5:
                    69:4a:17:af:2c:d8:8b:d6:d4:e8:a7:21:7d:54:63:
                    4c:dd:94:dd:6a:16:50:50:9d:e5:60:b9:c8:42:6d:
                    f9:5d:45:e1:2d:a5:44:76:64:34:c1:7a:0c:9d:de:
                    b9:ee:0a:fa:c1:8e:71:df:30:63:67:2d:dc:db:5a:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5E:6E:4C:05:2E:26:17:CC:13:82:1D:2D:B4:83:B4:87:68:9A:C7
            X509v3 Authority Key Identifier:
                keyid:0E:8C:E0:A6:AB:B8:EE:50:D4:4B:3B:AE:42:D4:A2:54:9F:FB:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dozgpqu47lDUSzuuQtSiVJ_7gkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9f2077-df4f-497e-8e90-c499755a2689/1/Dozgpqu47lDUSzuuQtSiVJ_7gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d0:1d:7f:57:2f:87:5c:54:f2:73:3a:39:c4:10:a3:d3:61:
         16:4b:11:50:a1:d2:42:a3:76:40:ad:f8:75:81:1e:fd:84:75:
         bf:39:d5:18:71:36:10:43:ef:8d:87:6d:9f:ad:30:4a:94:c8:
         f1:f5:96:a6:ea:97:c8:e0:48:3b:4e:0c:8b:8e:38:5a:01:e1:
         c8:b1:44:e1:07:2d:61:15:c3:ab:21:f0:0c:bc:7b:55:3c:0e:
         9c:26:85:6b:89:7d:5a:31:92:1c:ba:28:dd:4b:ef:15:f5:cb:
         9e:30:e5:f8:c3:9e:73:f8:81:6e:11:96:83:bb:fc:b4:96:63:
         45:cd:cc:36:41:8a:80:07:f9:13:a2:2a:ca:9c:86:b9:5c:61:
         c6:59:9b:f4:ae:70:53:24:0c:5f:ce:af:e1:f9:11:5c:10:f2:
         27:3a:11:e3:6d:48:ab:b1:03:f4:4f:c9:bc:07:3d:42:47:ce:
         ed:5c:d5:82:1c:49:b2:17:78:e5:34:f5:36:23:3b:49:c0:c7:
         e8:c3:6d:4f:4e:55:1a:b5:6d:70:cd:ee:57:f5:6c:34:6f:72:
         60:1a:45:52:de:c7:d5:2d:79:c1:42:07:5a:12:53:b7:e1:29:
         f0:29:33:ff:8b:7d:bd:ee:4f:bb:0e:d0:03:ba:5b:97:41:f5:
         05:39:5d:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABARNumwXd3232VII0Yh9cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOGNlMGE2YWJiOGVlNTBkNDRiM2JhZTQyZDRhMjU0OWZm
YjgyNDAwHhcNMjYwODE0MTYwMDQyWhcNMjYwODE1MTYwMDQyWjAzMTEwLwYDVQQD
EyhlMzVlNmU0YzA1MmUyNjE3Y2MxMzgyMWQyZGI0ODNiNDg3Njg5YWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzJdetZduIp7Dkn6m+OzNgdJzA7P
AIz/FdnrQ6l0kkjQgKyZtZXqAwW5CNf76EenZEuuhyYdexyGO4N45596ciX5qqaW
lJpQx6WN+oI35KcSucV9wccLErg1wjdfw380o4xmtV8RfXRKay1eH75nCMkpjfog
UYMq8APTTAyyJ/gvRD54Vuds1DgALdrjGTdfkMolcpES8K3NHMyT9BYj5hcl75uj
zwtskYGbWzg91McgjaaHf94tW3vAGNypIBPYuaVpShevLNiL1tTopyF9VGNM3ZTd
ahZQUJ3lYLnIQm35XUXhLaVEdmQ0wXoMnd657gr6wY5x3zBjZy3c21qKGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONebkwFLiYXzBOCHS20g7SHaJrHMB8GA1UdIwQY
MBaAFA6M4KaruO5Q1Es7rkLUolSf+4JAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAt
YzQ5OTc1NWEyNjg5LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85ZjIwNzctZGY0Zi00OTdlLThlOTAtYzQ5OTc1NWEyNjg5
LzEvRG96Z3BxdTQ3bERVU3p1dVF0U2lWSl83Z2tBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedAdf1cv
h1xU8nM6OcQQo9NhFksRUKHSQqN2QK34dYEe/YR1vznVGHE2EEPvjYdtn60wSpTI
8fWWpuqXyOBIO04Mi444WgHhyLFE4QctYRXDqyHwDLx7VTwOnCaFa4l9WjGSHLoo
3UvvFfXLnjDl+MOec/iBbhGWg7v8tJZjRc3MNkGKgAf5E6IqypyGuVxhxlmb9K5w
UyQMX86v4fkRXBDyJzoR421Iq7ED9E/JvAc9QkfO7VzVghxJshd45TT1NiM7ScDH
6MNtT05VGrVtcM3uV/VsNG9yYBpFUt7H1S15wUIHWhJTt+Ep8Ckz/4t9ve5Puw7Q
A7pbl0H1BTldRQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:45:09 2026 by rpki-client