Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
File:                     d8pTqKWgOwVcs_NA_L64XXrUh6g.mft (raw, json)
Hash identifier:          7TIR9K7PdwqoseO+ildBsNYVcADd6Pqg+TxhmOUFZ8o=
Subject key identifier:   9A:72:90:B2:84:C3:4B:AF:BE:F6:EF:7C:F1:59:D6:C9:B9:1A:80:AE
Authority key identifier: 77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8
Certificate issuer:       /CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
Certificate serial:       019DCC74B47648EA2B918779AB61CF91411B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
Manifest number:          0D06
Signing time:             Mon 27 Apr 2026 01:01:33 +0000
Manifest this update:     Mon 27 Apr 2026 01:01:33 +0000
Manifest next update:     Tue 28 Apr 2026 01:01:33 +0000
Files and hashes:         1: Kr3YNIOZuTADRy89OqB1M7GiF_A.roa (hash: KV4JFAX9LmQEN4ylvhyFAZOy/rrjX27pdPNOLsJgnUs=)
                          2: d8pTqKWgOwVcs_NA_L64XXrUh6g.crl (hash: t4Drmn8P51d4kdnib3QH3jY6ruHsCFvqfPV/FcJu2bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Apr 2026 23:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cc:74:b4:76:48:ea:2b:91:87:79:ab:61:cf:91:41:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77ca53a8a5a03b055cb3f340fcbeb85d7ad487a8
        Validity
            Not Before: Apr 27 01:01:33 2026 GMT
            Not After : Apr 28 01:01:33 2026 GMT
        Subject: CN=9a7290b284c34bafbef6ef7cf159d6c9b91a80ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9d:15:fc:65:61:76:37:36:d8:ea:72:be:6e:
                    59:d3:88:52:75:00:c8:e6:f9:64:f1:49:ef:4f:11:
                    7e:70:87:51:65:98:6a:5c:3c:7c:03:9f:ec:ec:c1:
                    48:f7:07:60:9b:11:c5:6a:4c:30:41:68:1f:cb:c7:
                    c6:10:51:a2:da:05:ca:65:2f:19:7a:6d:52:4e:9b:
                    f1:99:77:a7:a4:3f:54:19:ea:bc:c8:7d:08:4e:3b:
                    0b:79:e4:f1:8c:dc:69:e3:bc:fa:40:ad:3c:2f:92:
                    02:f3:1f:58:ae:4c:30:86:7b:ec:09:82:07:1c:a3:
                    e7:d1:33:63:3f:a9:97:78:eb:78:4f:a1:7e:49:d6:
                    89:48:7e:f5:2b:5e:8f:bb:8b:cd:a2:f2:e4:1d:7c:
                    fe:cf:ac:9c:a9:8f:43:2a:95:78:0d:eb:d8:f1:6e:
                    db:1e:e2:dd:b2:fe:b5:9b:d7:ac:1a:f7:00:16:b4:
                    40:51:39:d3:af:15:c2:4b:3e:2c:31:ef:fc:c2:9e:
                    b1:33:15:10:ce:8b:45:3a:8c:41:64:07:dd:d7:94:
                    2d:7d:03:b8:28:2f:76:a3:12:26:e9:1e:29:24:60:
                    4f:6d:77:08:64:fb:aa:10:50:b8:bb:84:83:c9:d0:
                    57:7f:ae:cd:81:14:6c:04:a0:fd:e2:2d:f4:7e:4d:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:72:90:B2:84:C3:4B:AF:BE:F6:EF:7C:F1:59:D6:C9:B9:1A:80:AE
            X509v3 Authority Key Identifier:
                keyid:77:CA:53:A8:A5:A0:3B:05:5C:B3:F3:40:FC:BE:B8:5D:7A:D4:87:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8pTqKWgOwVcs_NA_L64XXrUh6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0d79a4-88ae-42e4-928c-cc3e78f62dc2/1/d8pTqKWgOwVcs_NA_L64XXrUh6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f4:f9:d2:82:8e:76:58:be:44:19:fd:5c:fd:b8:3f:2f:e5:
         df:2c:4a:1a:e4:d4:7b:5d:00:7a:93:cc:ff:95:4f:13:80:09:
         ae:2c:67:87:98:6a:3e:c8:55:d1:89:88:85:4b:21:99:9c:7c:
         81:e9:bb:4a:9b:cc:48:1d:81:34:fe:78:47:a4:96:ea:ed:fe:
         69:88:f7:96:b7:3b:2c:de:e2:13:90:5c:45:08:66:a4:cd:3b:
         c9:c5:71:09:18:50:ed:33:cb:e6:92:a3:be:66:2d:21:0b:ab:
         b1:79:15:0e:51:57:d3:0a:80:9e:d9:e8:68:2f:07:71:a0:56:
         7e:18:20:3a:af:d0:53:ad:f5:cb:cd:5c:67:c9:1e:7c:6f:12:
         10:14:52:99:7b:4a:53:4d:df:0d:95:a2:d9:91:10:7c:08:20:
         b1:ca:3c:ca:38:d8:ea:8e:17:1d:35:21:b9:6d:72:38:f7:96:
         05:d4:8e:86:b8:75:62:bd:98:39:f2:e7:ad:ce:f4:22:4d:63:
         d3:39:77:08:9c:15:49:1a:77:a1:25:a1:4c:3b:ac:1c:b1:dc:
         7b:0b:ea:3f:c3:7c:38:7c:51:45:db:30:2c:ff:6e:18:e8:02:
         6f:d7:d1:50:df:a2:70:03:07:6b:98:b2:6e:1e:0d:17:1b:0d:
         0d:6d:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:15:31 2026 by rpki-client