Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
File:                     DJvBsU8NllP1FOwWd3G3dVmsY8w.mft (raw, json)
Hash identifier:          WoTHgNKS1BHEAnMFBxPAYAdZUBR3D73pBma7fZx9nmo=
Subject key identifier:   9D:3B:25:71:0A:D3:74:D9:C1:C1:B9:E3:7A:C9:27:C2:A4:50:76:D1
Authority key identifier: 0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC
Certificate issuer:       /CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
Certificate serial:       019E307210CE03802F7B378DBA0A887C92D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
Manifest number:          1911
Signing time:             Sat 16 May 2026 11:00:42 +0000
Manifest this update:     Sat 16 May 2026 11:00:42 +0000
Manifest next update:     Sun 17 May 2026 11:00:42 +0000
Files and hashes:         1: DJvBsU8NllP1FOwWd3G3dVmsY8w.crl (hash: TnCltUTqE8UQwHFyW8WHCDoCfK1Sm8nkVnPMIgYDMm8=)
                          2: USkUk1O_55dbtUL8NgX3D9MuJlk.roa (hash: l0RD4Yub4vls7PSxviu1JxH4TvO1gXOCiQ61YNO4X7c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:10:ce:03:80:2f:7b:37:8d:ba:0a:88:7c:92:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9bc1b14f0d9653f514ec167771b77559ac63cc
        Validity
            Not Before: May 16 11:00:42 2026 GMT
            Not After : May 17 11:00:42 2026 GMT
        Subject: CN=9d3b25710ad374d9c1c1b9e37ac927c2a45076d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8f:de:f0:08:7d:e2:89:e5:52:5b:b5:4d:a4:
                    74:68:c5:7a:46:43:78:4c:76:8d:7b:09:a9:ee:29:
                    b5:cf:2e:f2:ce:df:49:c0:bb:6d:26:ab:b8:6f:4e:
                    a2:cd:12:fa:db:7f:f7:1d:bc:22:c6:38:8f:ad:e3:
                    a2:0c:5e:4b:6c:bb:d2:f1:ad:22:23:a6:1e:9e:38:
                    7c:2b:81:68:bb:73:8c:7e:ac:fc:bf:80:f2:b0:ac:
                    85:21:bc:b4:0b:6d:32:81:78:2b:2a:57:dd:54:77:
                    99:95:c5:8b:9e:af:bb:11:b2:1c:67:6c:1a:91:68:
                    46:ff:ae:5d:0c:6b:4c:18:53:13:b4:35:5d:0f:cf:
                    27:0e:bb:15:62:a7:da:0c:0b:7b:f5:be:3b:ae:c8:
                    17:7b:07:90:1c:4f:2e:01:63:95:96:19:cd:a4:b8:
                    65:46:0a:12:b7:fe:77:10:a8:b2:b6:88:67:4d:5c:
                    d3:c4:b3:12:25:05:44:85:da:a7:96:66:71:cf:74:
                    f9:69:c6:83:60:9c:26:37:77:4e:7a:4c:95:39:08:
                    90:db:ae:e7:23:c1:5f:2d:1d:43:5f:c0:5c:0c:11:
                    40:1d:45:77:12:77:62:12:e7:49:d4:42:dc:4c:f6:
                    04:93:bb:08:6f:71:87:3f:7f:ab:99:32:4e:3e:09:
                    31:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3B:25:71:0A:D3:74:D9:C1:C1:B9:E3:7A:C9:27:C2:A4:50:76:D1
            X509v3 Authority Key Identifier:
                keyid:0C:9B:C1:B1:4F:0D:96:53:F5:14:EC:16:77:71:B7:75:59:AC:63:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJvBsU8NllP1FOwWd3G3dVmsY8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7c38f4-5dae-4d2c-8208-1d19499d098f/1/DJvBsU8NllP1FOwWd3G3dVmsY8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e7:30:f6:68:04:3e:5a:61:7a:b1:52:65:b8:34:1a:e8:88:
         c2:e0:e6:be:3a:56:59:dd:0e:87:c2:c3:82:7e:d2:e0:1f:25:
         f3:6d:63:ee:e8:a3:02:77:22:c3:25:8a:7e:eb:2c:c0:b3:28:
         f9:a9:1e:41:2b:17:a2:b4:d9:a1:25:7d:3b:51:77:ae:4a:bc:
         18:4e:d7:66:b9:51:cb:73:d9:e8:cb:79:27:54:0d:99:be:f5:
         72:5e:69:4b:69:18:29:7b:27:1e:03:cc:2b:c6:d2:e2:1c:de:
         8b:62:a7:ef:1d:a5:02:68:ef:a3:43:04:09:2e:3d:c9:22:b1:
         34:50:06:da:52:70:5d:d4:bb:ad:5b:1a:b1:b7:25:23:f6:20:
         e1:d3:6d:70:4e:dc:0c:05:2e:4a:4a:6d:bc:bc:c3:1c:2f:f0:
         bd:a1:55:79:5c:05:56:7c:fb:0b:17:a8:31:b6:03:ee:7f:61:
         5b:48:30:c4:da:0b:a3:67:db:50:95:c8:5f:04:c1:75:d2:31:
         f6:5e:71:aa:b8:98:f5:1c:ea:38:a7:9b:37:f6:ac:22:71:92:
         5a:bf:ad:54:a3:16:87:5c:bd:0d:ed:66:c8:ae:08:85:94:72:
         ec:7a:30:b5:4f:78:e4:74:12:fc:ad:15:1b:80:d1:ad:36:46:
         ff:68:07:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wchDOA4AvezeNugqIfJLWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWJjMWIxNGYwZDk2NTNmNTE0ZWMxNjc3NzFiNzc1NTlh
YzYzY2MwHhcNMjYwNTE2MTEwMDQyWhcNMjYwNTE3MTEwMDQyWjAzMTEwLwYDVQQD
Eyg5ZDNiMjU3MTBhZDM3NGQ5YzFjMWI5ZTM3YWM5MjdjMmE0NTA3NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo/e8Ah94onlUlu1TaR0aMV6RkN4
THaNewmp7im1zy7yzt9JwLttJqu4b06izRL623/3HbwixjiPreOiDF5LbLvS8a0i
I6Yenjh8K4Fou3OMfqz8v4DysKyFIby0C20ygXgrKlfdVHeZlcWLnq+7EbIcZ2wa
kWhG/65dDGtMGFMTtDVdD88nDrsVYqfaDAt79b47rsgXeweQHE8uAWOVlhnNpLhl
RgoSt/53EKiytohnTVzTxLMSJQVEhdqnlmZxz3T5acaDYJwmN3dOekyVOQiQ267n
I8FfLR1DX8BcDBFAHUV3EndiEudJ1ELcTPYEk7sIb3GHP3+rmTJOPgkxawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ07JXEK03TZwcG543rJJ8KkUHbRMB8GA1UdIwQY
MBaAFAybwbFPDZZT9RTsFndxt3VZrGPMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgt
MWQxOTQ5OWQwOThmLzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YzM4ZjQtNWRhZS00ZDJjLTgyMDgtMWQxOTQ5OWQwOThm
LzEvREp2QnNVOE5sbFAxRk93V2QzRzNkVm1zWTh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOcw9mgE
PlpherFSZbg0GuiIwuDmvjpWWd0Oh8LDgn7S4B8l821j7uijAnciwyWKfusswLMo
+akeQSsXorTZoSV9O1F3rkq8GE7XZrlRy3PZ6Mt5J1QNmb71cl5pS2kYKXsnHgPM
K8bS4hzei2Kn7x2lAmjvo0MECS49ySKxNFAG2lJwXdS7rVsasbclI/Yg4dNtcE7c
DAUuSkptvLzDHC/wvaFVeVwFVnz7CxeoMbYD7n9hW0gwxNoLo2fbUJXIXwTBddIx
9l5xqriY9RzqOKebN/asInGSWr+tVKMWh1y9De1myK4IhZRy7HowtU945HQS/K0V
G4DRrTZG/2gHNA==
-----END CERTIFICATE-----
Generated at Sat May 16 17:55:32 2026 by rpki-client