Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
File:                     1dhc7fCdgveSwYDZClqaI21qcFw.mft (raw, json)
Hash identifier:          Xk7J2B7+4BkOAb+7C/Gm0pmfx4FmkqNV68+dpztHHTI=
Subject key identifier:   EC:A2:55:B1:9C:9C:47:06:8B:CB:97:F0:76:34:BE:05:28:7F:4C:FE
Authority key identifier: D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C
Certificate issuer:       /CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
Certificate serial:       01A001DD58AB3F1B0D1BC490B9DA722D984C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 20:01:18 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:18 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:18 +0000
Files and hashes:         1: 1dhc7fCdgveSwYDZClqaI21qcFw.crl (hash: f1ROam4hGc5Nq2dt9RkgmJEAq4gQKrfBAATY7ew3L9g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:58:ab:3f:1b:0d:1b:c4:90:b9:da:72:2d:98:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d85cedf09d82f792c180d90a5a9a236d6a705c
        Validity
            Not Before: Aug 14 20:01:18 2026 GMT
            Not After : Aug 15 20:01:18 2026 GMT
        Subject: CN=eca255b19c9c47068bcb97f07634be05287f4cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:3f:21:19:5f:92:9d:fb:5e:b7:38:c7:4e:
                    2c:57:60:a0:0c:88:67:e2:14:e0:de:03:bb:30:0f:
                    63:3f:3e:1f:b6:3f:de:c7:4a:a1:88:38:f0:74:e8:
                    a1:99:f1:d1:09:3c:47:a2:e9:3d:9a:c3:f1:d7:cd:
                    06:55:48:be:63:59:6f:92:2c:08:d2:d2:65:f3:21:
                    e6:87:be:af:c7:9c:b5:f8:3e:c0:b9:f1:85:ad:dd:
                    8b:c6:3f:c8:a3:18:58:26:44:84:90:64:d3:5f:6b:
                    27:c3:78:bc:a8:7e:09:bf:55:c5:f7:12:de:47:94:
                    aa:f8:1a:a2:ba:4d:aa:b9:6c:c3:5c:e0:44:9f:30:
                    05:1b:48:86:f1:24:ce:59:e5:b7:48:e8:b9:3c:65:
                    7d:2e:e0:23:d7:90:52:fa:82:56:06:c1:a9:44:c4:
                    5c:f9:9d:26:50:23:52:9f:fc:5c:9c:ca:19:47:16:
                    c8:3e:80:14:69:b0:3f:0a:f8:9b:e9:93:25:62:a2:
                    3c:c2:80:91:bb:0b:ca:2c:69:d8:31:44:43:b4:41:
                    fc:1f:d1:13:ab:4f:44:19:56:6f:6e:8a:74:c4:81:
                    53:6b:91:6b:8c:e9:db:52:77:6d:f9:03:6c:fb:68:
                    ca:63:dd:cb:0c:29:ac:40:fa:6f:b9:80:3d:c8:79:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A2:55:B1:9C:9C:47:06:8B:CB:97:F0:76:34:BE:05:28:7F:4C:FE
            X509v3 Authority Key Identifier:
                keyid:D5:D8:5C:ED:F0:9D:82:F7:92:C1:80:D9:0A:5A:9A:23:6D:6A:70:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dhc7fCdgveSwYDZClqaI21qcFw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a566c-f99d-4e71-a270-b1f7c71b201b/1/1dhc7fCdgveSwYDZClqaI21qcFw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:a5:00:89:f9:35:61:72:97:cb:a7:9b:19:da:db:30:a7:
         2f:b7:b7:5a:6f:13:00:01:ab:9d:33:11:1d:41:bd:b9:21:2d:
         bc:9f:ae:9b:31:b7:2a:9d:1a:e0:e9:e8:69:70:02:91:d2:62:
         b8:c4:6a:98:95:1a:24:11:a9:c0:01:49:68:9a:d9:44:38:34:
         0c:09:25:a2:d1:33:3d:75:dd:bd:5b:98:b8:04:9d:a1:75:5e:
         95:31:83:68:d0:52:27:de:df:26:bc:ae:3a:d3:1c:0a:51:59:
         c7:5d:45:d6:e7:fb:f0:3e:f8:f6:92:65:24:ce:45:ed:6e:2d:
         fb:9a:99:2a:06:b3:43:3b:54:34:9c:13:7b:ef:5a:cc:9c:b4:
         a0:19:60:60:e9:58:76:da:1a:26:db:a8:06:ee:83:9c:06:6a:
         62:d1:9c:d7:d8:c0:df:2f:6d:0d:73:c3:ea:bc:14:09:2b:40:
         55:cb:c7:5d:f4:c2:05:82:6a:02:2c:e9:e7:a1:a8:0b:81:48:
         8b:8e:43:1f:0e:70:3a:e1:28:fa:57:39:af:ac:d7:ff:0f:4f:
         6c:81:e2:d4:df:44:93:03:4a:8e:0a:0e:41:20:a6:e8:25:86:
         fb:ad:2f:2b:f9:6e:82:67:c0:9e:01:5d:15:33:62:ec:63:15:
         3f:11:23:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAB3VirPxsNG8SQudpyLZhMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDg1Y2VkZjA5ZDgyZjc5MmMxODBkOTBhNWE5YTIzNmQ2
YTcwNWMwHhcNMjYwODE0MjAwMTE4WhcNMjYwODE1MjAwMTE4WjAzMTEwLwYDVQQD
EyhlY2EyNTViMTljOWM0NzA2OGJjYjk3ZjA3NjM0YmUwNTI4N2Y0Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKo/IRlfkp37Xrc4x04sV2CgDIhn
4hTg3gO7MA9jPz4ftj/ex0qhiDjwdOihmfHRCTxHouk9msPx180GVUi+Y1lvkiwI
0tJl8yHmh76vx5y1+D7AufGFrd2Lxj/IoxhYJkSEkGTTX2snw3i8qH4Jv1XF9xLe
R5Sq+Bqiuk2quWzDXOBEnzAFG0iG8STOWeW3SOi5PGV9LuAj15BS+oJWBsGpRMRc
+Z0mUCNSn/xcnMoZRxbIPoAUabA/Cvib6ZMlYqI8woCRuwvKLGnYMURDtEH8H9ET
q09EGVZvbop0xIFTa5FrjOnbUndt+QNs+2jKY93LDCmsQPpvuYA9yHkEhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOyiVbGcnEcGi8uX8HY0vgUof0z+MB8GA1UdIwQY
MBaAFNXYXO3wnYL3ksGA2QpamiNtanBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAt
YjFmN2M3MWIyMDFiLzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni82YTU2NmMtZjk5ZC00ZTcxLWEyNzAtYjFmN2M3MWIyMDFi
LzEvMWRoYzdmQ2RndmVTd1lEWkNscWFJMjFxY0Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/SlAIn5
NWFyl8unmxna2zCnL7e3Wm8TAAGrnTMRHUG9uSEtvJ+umzG3Kp0a4OnoaXACkdJi
uMRqmJUaJBGpwAFJaJrZRDg0DAklotEzPXXdvVuYuASdoXVelTGDaNBSJ97fJryu
OtMcClFZx11F1uf78D749pJlJM5F7W4t+5qZKgazQztUNJwTe+9azJy0oBlgYOlY
dtoaJtuoBu6DnAZqYtGc19jA3y9tDXPD6rwUCStAVcvHXfTCBYJqAizp56GoC4FI
i45DHw5wOuEo+lc5r6zX/w9PbIHi1N9EkwNKjgoOQSCm6CWG+60vK/lugmfAngFd
FTNi7GMVPxEjVQ==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:31 2026 by rpki-client