Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File:                     d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier:          LYpIoG6t3icmwUWlkR+pafdf/5GFIU1Xha/57IeaWT4=
Subject key identifier:   48:11:48:5A:5A:8F:6E:EE:90:5D:53:16:17:52:6D:0C:EC:F4:1B:09
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer:       /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial:       019DCDBDDCCCD61284B7B8B8027CEAD46411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number:          0FC6
Signing time:             Mon 27 Apr 2026 07:01:05 +0000
Manifest this update:     Mon 27 Apr 2026 07:01:05 +0000
Manifest next update:     Tue 28 Apr 2026 07:01:05 +0000
Files and hashes:         1: 1JIM2kMeVJoHRDwhcEraJMNWzzk.roa (hash: 7HnRkqXRdr1xWTIy9iiHnk4cqifwXb86Gt3ZsfiE8YQ=)
                          2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: wQls/4GgDO8A9ozj95gXLF0T8MS5GCqlvI8g7mrSlsU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cd:bd:dc:cc:d6:12:84:b7:b8:b8:02:7c:ea:d4:64:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
        Validity
            Not Before: Apr 27 07:01:05 2026 GMT
            Not After : Apr 28 07:01:05 2026 GMT
        Subject: CN=4811485a5a8f6eee905d531617526d0cecf41b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:64:82:fc:e0:9d:ed:92:a1:b3:79:bf:f2:e3:
                    21:5a:bc:7e:f2:48:f0:92:13:cf:65:dc:65:18:90:
                    f5:ee:bc:14:b2:ca:b1:ba:c1:fe:ee:d7:00:8a:2e:
                    ac:95:22:0d:52:06:88:f7:f5:b1:99:52:51:b5:2e:
                    43:fc:94:45:a4:93:e4:f5:06:19:43:64:3a:6e:ee:
                    f1:fc:a2:ca:d9:e1:57:dd:d3:61:39:51:eb:41:90:
                    9b:de:9b:1a:96:74:1d:30:a1:55:12:51:c6:a8:58:
                    39:5b:9b:e0:1d:e7:ec:89:df:e6:32:c7:cc:fd:fd:
                    96:86:8c:64:28:9a:3f:77:dd:10:22:fb:12:2e:55:
                    ab:e9:86:2a:d0:8b:77:5e:b1:61:e6:c8:2f:84:15:
                    b3:3f:0f:46:91:82:75:05:b3:84:57:f4:95:e6:34:
                    15:14:85:53:4f:2f:4a:e9:aa:6b:bb:4e:03:5a:f6:
                    6f:8b:8f:25:0e:00:6b:23:04:ca:1d:e2:e7:c7:23:
                    ab:6b:90:2e:b0:a9:c5:ed:cb:f2:4a:b3:07:cc:ff:
                    1a:ef:4c:a7:3e:0f:ef:f5:7a:79:0a:67:6b:7f:14:
                    a6:e4:23:fe:7a:c6:30:de:a5:4a:83:21:7a:2c:3a:
                    9b:92:64:3e:82:a7:ef:ab:86:c6:f6:0c:1a:b7:da:
                    c9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:11:48:5A:5A:8F:6E:EE:90:5D:53:16:17:52:6D:0C:EC:F4:1B:09
            X509v3 Authority Key Identifier:
                keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:14:d5:dc:8b:ee:63:23:d2:e2:c7:a4:90:72:77:0b:25:d5:
         59:5f:12:95:3a:39:43:84:fa:3c:25:4f:a6:34:66:45:73:e8:
         58:71:f0:9b:dd:d0:2b:0a:ab:ee:52:51:8c:e4:a4:c6:52:1a:
         6d:b2:23:8e:ea:8e:9e:0b:6d:2b:62:21:0e:6f:c1:00:43:a3:
         a6:41:6e:a2:a3:94:cf:f1:6d:69:7a:e0:05:38:8c:de:8a:7d:
         85:39:14:b6:06:db:c4:65:91:31:77:28:47:e1:73:a7:af:21:
         f8:eb:90:e7:9c:a5:27:00:e0:a6:4a:b8:d5:7c:4c:cf:9b:f3:
         c4:e4:e7:03:df:a6:f8:2c:e2:4b:96:a5:75:d0:12:0e:82:39:
         58:3f:e4:57:ea:3a:78:e7:a6:49:88:df:e1:f4:5b:57:0c:46:
         0c:80:22:fb:d4:4f:a9:7d:e8:a9:6f:07:ec:3a:02:1f:8e:eb:
         b2:c3:37:4b:d3:68:69:44:19:ab:60:74:ad:7e:42:f3:b4:e2:
         ab:69:6d:5c:e6:e4:b3:5b:5e:ac:a0:28:28:26:97:5c:a7:f8:
         5e:ef:fa:94:da:a8:20:d0:32:c6:20:ad:1a:76:55:eb:05:ad:
         ac:37:18:7e:03:1c:7e:51:b7:21:78:aa:6e:13:b0:ae:50:45:
         97:ce:86:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NvdzM1hKEt7i4Anzq1GQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3N2M0OWQzZjYyNzMzNTE5MGUzYzJlYzM2NTRlMTU0Y2Zk
NDUzOTgwHhcNMjYwNDI3MDcwMTA1WhcNMjYwNDI4MDcwMTA1WjAzMTEwLwYDVQQD
Eyg0ODExNDg1YTVhOGY2ZWVlOTA1ZDUzMTYxNzUyNmQwY2VjZjQxYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WSC/OCd7ZKhs3m/8uMhWrx+8kjw
khPPZdxlGJD17rwUssqxusH+7tcAii6slSINUgaI9/WxmVJRtS5D/JRFpJPk9QYZ
Q2Q6bu7x/KLK2eFX3dNhOVHrQZCb3psalnQdMKFVElHGqFg5W5vgHefsid/mMsfM
/f2WhoxkKJo/d90QIvsSLlWr6YYq0It3XrFh5sgvhBWzPw9GkYJ1BbOEV/SV5jQV
FIVTTy9K6apru04DWvZvi48lDgBrIwTKHeLnxyOra5AusKnF7cvySrMHzP8a70yn
Pg/v9Xp5CmdrfxSm5CP+esYw3qVKgyF6LDqbkmQ+gqfvq4bG9gwat9rJHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgRSFpaj27ukF1TFhdSbQzs9BsJMB8GA1UdIwQY
MBaAFHd8SdP2JzNRkOPC7DZU4VTP1FOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMt
Y2QyZjhjOTRmOTc0LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMtY2QyZjhjOTRmOTc0
LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUxTV3Ivu
YyPS4sekkHJ3CyXVWV8SlTo5Q4T6PCVPpjRmRXPoWHHwm93QKwqr7lJRjOSkxlIa
bbIjjuqOngttK2IhDm/BAEOjpkFuoqOUz/FtaXrgBTiM3op9hTkUtgbbxGWRMXco
R+Fzp68h+OuQ55ylJwDgpkq41XxMz5vzxOTnA9+m+CziS5alddASDoI5WD/kV+o6
eOemSYjf4fRbVwxGDIAi+9RPqX3oqW8H7DoCH47rssM3S9NoaUQZq2B0rX5C87Ti
q2ltXObks1terKAoKCaXXKf4Xu/6lNqoINAyxiCtGnZV6wWtrDcYfgMcflG3IXiq
bhOwrlBFl86GRg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:44 2026 by rpki-client