Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
File:                     drtZ2KtKtSd87uX_CYIIQzBiex8.mft (raw, json)
Hash identifier:          S0/QawKk3FYReJi+EDGxADvO/7Hdmiz7/37knWw6nwo=
Subject key identifier:   33:4D:D3:E9:71:F8:4F:B9:40:44:93:1C:6B:F4:40:A5:0E:9B:A9:F6
Authority key identifier: 76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F
Certificate issuer:       /CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
Certificate serial:       019FA14D80F4968252C828A95A7C76F00546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
Manifest number:          0483
Signing time:             Mon 27 Jul 2026 02:00:38 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:38 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:38 +0000
Files and hashes:         1: drtZ2KtKtSd87uX_CYIIQzBiex8.crl (hash: sbt90SkbtMA8Ialfx/NZWNsUvIZidhcoEoWHEw2Vi9g=)
                          2: lYVVRT8ck9hIF_wE0rPLM9h8sl4.roa (hash: nOQ76WC5KxHith3R9t77yLyg4sKQCt1T2XSdiC50P2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:80:f4:96:82:52:c8:28:a9:5a:7c:76:f0:05:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bb59d8ab4ab5277ceee5ff0982084330627b1f
        Validity
            Not Before: Jul 27 02:00:38 2026 GMT
            Not After : Jul 28 02:00:38 2026 GMT
        Subject: CN=334dd3e971f84fb94044931c6bf440a50e9ba9f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:03:47:60:5b:ba:6b:17:e8:39:63:74:5e:
                    c9:2f:6e:19:1e:95:3f:f3:30:bc:b4:f1:59:73:40:
                    bd:9e:39:73:15:8a:2a:f0:f4:98:bc:57:56:ba:95:
                    b2:64:b3:10:7b:d0:44:20:28:08:23:a2:a8:fc:a1:
                    db:6a:4b:ce:73:7c:bf:13:8f:33:e7:8d:81:18:61:
                    59:a5:15:75:51:c3:4d:ef:a4:54:31:35:a4:43:d4:
                    17:1e:74:b5:32:94:2b:d5:fa:98:44:ea:74:11:5a:
                    37:ab:37:c5:76:2c:d5:b2:d6:ee:82:66:88:c1:27:
                    ce:15:e6:e7:14:a2:a7:9f:ca:e1:53:ea:ae:32:46:
                    3b:22:b8:60:bd:ea:c9:07:8c:20:fc:ab:33:8e:bc:
                    a6:ce:de:cf:d3:f9:6a:60:e2:62:f5:be:a1:4d:6b:
                    6c:87:a0:d6:97:0d:e5:98:78:9d:06:d9:c9:52:62:
                    1f:f0:76:bb:b9:35:99:79:25:ae:fc:46:81:0d:fe:
                    ec:63:bf:ae:e5:c4:b8:dd:8a:45:ce:a2:4b:49:1f:
                    ff:a4:2c:bf:ad:47:3f:b6:52:ba:e6:0c:31:80:4a:
                    45:50:f0:81:a9:d0:54:29:78:e6:09:e2:9e:04:71:
                    b5:95:66:a1:1b:1d:79:0a:a7:da:4c:6a:2b:94:ca:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4D:D3:E9:71:F8:4F:B9:40:44:93:1C:6B:F4:40:A5:0E:9B:A9:F6
            X509v3 Authority Key Identifier:
                keyid:76:BB:59:D8:AB:4A:B5:27:7C:EE:E5:FF:09:82:08:43:30:62:7B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drtZ2KtKtSd87uX_CYIIQzBiex8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/82d65e-e0d9-4fcd-b3ae-4d3a5c042e61/1/drtZ2KtKtSd87uX_CYIIQzBiex8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:60:66:4b:1d:20:8c:8d:25:e1:c6:15:20:73:6a:6b:c0:8d:
         58:34:ff:ec:9e:e6:c7:eb:f7:50:62:dd:85:b1:6f:33:76:4b:
         f7:0b:c4:57:a1:d8:45:6a:61:39:9f:97:19:17:54:25:fd:b8:
         68:49:92:33:b5:ec:1c:88:38:de:72:41:21:3a:1e:ae:53:f3:
         a5:d5:f3:65:78:5c:d2:08:c4:62:46:2e:dc:6a:eb:1f:1c:14:
         88:be:b3:f3:e3:53:48:16:b2:f4:81:e9:63:df:a0:fc:55:9c:
         39:70:31:51:e1:eb:03:b3:55:75:58:67:b0:60:df:37:42:22:
         97:00:ce:2b:d2:ad:e0:06:a5:d0:5b:7a:69:2d:ce:b0:36:80:
         e8:dd:d5:48:c7:a1:30:db:6a:de:79:52:6c:8c:d2:f2:99:3b:
         c7:7f:f6:1b:a1:01:92:04:45:c1:c6:73:99:9b:1f:19:67:a2:
         8f:15:85:7a:46:cb:ea:8f:b8:d9:ec:ec:41:57:d2:43:cc:5f:
         ab:ef:0e:09:d8:51:87:86:69:09:22:6f:51:e7:11:57:6d:ec:
         a6:02:03:12:c7:c9:2f:ff:d0:ed:cf:83:31:fd:38:f7:dc:00:
         84:28:b2:46:cd:c2:c6:ff:a0:00:6b:ae:88:b7:fc:4f:81:cb:
         a5:65:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:38:48 2026 by rpki-client