Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
File:                     dBSRprEEM7mWFXVv3pMT8r4dPfA.mft (raw, json)
Hash identifier:          pYWhkzwiof1N0IUzt/joFtJHHMOi1inw/2VivnHzHkQ=
Subject key identifier:   A1:98:CE:DB:A1:EE:D9:E7:80:2E:8C:E2:D0:58:81:4D:EC:06:12:78
Authority key identifier: 74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0
Certificate issuer:       /CN=741491a6b10433b99615756fde9313f2be1d3df0
Certificate serial:       01A0B652540AC56CDB48F99BF1B43369596D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
Manifest number:          1538
Signing time:             Fri 18 Sep 2026 21:00:43 +0000
Manifest this update:     Fri 18 Sep 2026 21:00:43 +0000
Manifest next update:     Sat 19 Sep 2026 21:00:43 +0000
Files and hashes:         1: ISzoHWBHuetmLQLrWc6n51rZYYg.roa (hash: 1yzmUR8v23fkpuJd9tVMCHTMq6Cr5Yk1vOljZxe5hY0=)
                          2: dBSRprEEM7mWFXVv3pMT8r4dPfA.crl (hash: /0fvG6MSZWDzRgSIXXnCW1CtSqqGNkZsWQEdm743w5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 17:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:52:54:0a:c5:6c:db:48:f9:9b:f1:b4:33:69:59:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741491a6b10433b99615756fde9313f2be1d3df0
        Validity
            Not Before: Sep 18 21:00:43 2026 GMT
            Not After : Sep 19 21:00:43 2026 GMT
        Subject: CN=a198cedba1eed9e7802e8ce2d058814dec061278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7c:00:2c:45:85:22:e9:86:32:79:f2:c2:8f:
                    64:a4:6e:c3:42:8d:9c:4c:46:70:13:17:24:bc:46:
                    14:69:5b:c3:97:35:6a:b7:4b:e2:19:cd:11:0b:92:
                    b6:64:a4:52:0b:f3:9f:4e:19:cd:65:7a:d8:36:21:
                    23:e7:b2:6a:19:9b:98:42:be:ac:a4:5c:01:a7:41:
                    c4:59:31:bf:f8:46:d7:8c:fa:da:2c:fe:7a:37:fa:
                    c9:4d:f5:60:20:55:f3:ba:d2:99:3c:1a:fa:74:d8:
                    80:42:27:be:f9:6d:71:42:90:3d:a6:92:6e:59:f2:
                    0b:0f:a2:95:ba:94:70:7f:25:1e:da:af:2d:3f:49:
                    a1:a5:f6:e7:8d:33:bc:b4:1a:13:f6:6d:28:7e:a7:
                    64:12:5f:61:6d:5c:7f:31:2f:70:db:f2:1e:69:92:
                    db:63:78:b4:8c:7f:b2:13:6d:87:6b:bd:2a:17:76:
                    33:0d:eb:30:02:b4:09:ba:c9:58:c0:7e:22:0f:42:
                    b5:dc:cc:a6:61:5b:27:30:5f:80:8f:04:7f:21:aa:
                    81:12:89:10:e0:01:91:25:8f:61:16:14:81:69:97:
                    a0:da:6e:1c:d2:4a:1f:de:b9:1b:6a:8b:e9:eb:a7:
                    1c:50:b0:0b:a2:1d:c3:79:da:67:11:80:ac:24:aa:
                    3c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:98:CE:DB:A1:EE:D9:E7:80:2E:8C:E2:D0:58:81:4D:EC:06:12:78
            X509v3 Authority Key Identifier:
                keyid:74:14:91:A6:B1:04:33:B9:96:15:75:6F:DE:93:13:F2:BE:1D:3D:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBSRprEEM7mWFXVv3pMT8r4dPfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f54cb3-ebae-46b2-8b17-84b57693c7a8/1/dBSRprEEM7mWFXVv3pMT8r4dPfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:48:7a:b4:28:dc:7d:d1:87:8a:9c:59:36:a3:32:a6:7b:21:
         ee:84:b5:25:b1:11:f9:a3:e3:a1:41:74:d9:11:85:23:19:57:
         12:f1:bc:cc:cb:9b:de:df:4e:9e:6a:64:58:96:e2:36:db:3a:
         d4:59:71:ca:5d:18:36:8a:58:f2:1f:cc:48:66:f4:b7:0f:86:
         ef:04:84:89:a9:ab:f3:5a:cc:ae:78:1e:17:77:fb:6b:f0:00:
         72:da:ce:1a:c8:3f:6f:05:82:2e:cf:3b:f4:85:26:37:4e:1d:
         ab:be:56:eb:5b:f0:44:07:bc:93:3a:a9:3c:35:5b:98:20:0c:
         fb:b6:c9:4e:c3:23:4c:e7:cb:74:4b:e4:89:25:68:e9:51:02:
         4b:4c:24:8a:d4:bd:be:64:40:da:9e:3e:66:a9:3e:0c:28:ed:
         6f:ff:6d:cb:71:d3:f5:1b:02:ab:4d:d8:ff:8f:8e:1c:b8:4d:
         02:67:b5:c6:50:81:f7:71:40:29:0e:b6:86:2d:9d:97:d0:30:
         5a:9c:a5:d0:4b:18:ab:63:7a:96:6c:da:fa:95:1c:3b:15:ad:
         32:6d:4d:4d:1f:aa:e4:cd:1b:ef:c9:a2:7f:b7:b0:a4:3d:bf:
         ff:7c:12:5f:9c:9b:c7:9a:3e:14:c0:0b:d0:02:82:68:30:08:
         43:9c:c7:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC2UlQKxWzbSPmb8bQzaVltMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTQ5MWE2YjEwNDMzYjk5NjE1NzU2ZmRlOTMxM2YyYmUx
ZDNkZjAwHhcNMjYwOTE4MjEwMDQzWhcNMjYwOTE5MjEwMDQzWjAzMTEwLwYDVQQD
EyhhMTk4Y2VkYmExZWVkOWU3ODAyZThjZTJkMDU4ODE0ZGVjMDYxMjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XwALEWFIumGMnnywo9kpG7DQo2c
TEZwExckvEYUaVvDlzVqt0viGc0RC5K2ZKRSC/OfThnNZXrYNiEj57JqGZuYQr6s
pFwBp0HEWTG/+EbXjPraLP56N/rJTfVgIFXzutKZPBr6dNiAQie++W1xQpA9ppJu
WfILD6KVupRwfyUe2q8tP0mhpfbnjTO8tBoT9m0ofqdkEl9hbVx/MS9w2/IeaZLb
Y3i0jH+yE22Ha70qF3YzDeswArQJuslYwH4iD0K13MymYVsnMF+AjwR/IaqBEokQ
4AGRJY9hFhSBaZeg2m4c0kof3rkbaovp66ccULALoh3DedpnEYCsJKo8nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGYztuh7tnngC6M4tBYgU3sBhJ4MB8GA1UdIwQY
MBaAFHQUkaaxBDO5lhV1b96TE/K+HT3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTct
ODRiNTc2OTNjN2E4LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNTRjYjMtZWJhZS00NmIyLThiMTctODRiNTc2OTNjN2E4
LzEvZEJTUnByRUVNN21XRlhWdjNwTVQ4cjRkUGZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkh6tCjc
fdGHipxZNqMypnsh7oS1JbER+aPjoUF02RGFIxlXEvG8zMub3t9OnmpkWJbiNts6
1Flxyl0YNopY8h/MSGb0tw+G7wSEiamr81rMrngeF3f7a/AActrOGsg/bwWCLs87
9IUmN04dq75W61vwRAe8kzqpPDVbmCAM+7bJTsMjTOfLdEvkiSVo6VECS0wkitS9
vmRA2p4+Zqk+DCjtb/9ty3HT9RsCq03Y/4+OHLhNAme1xlCB93FAKQ62hi2dl9Aw
Wpyl0EsYq2N6lmza+pUcOxWtMm1NTR+q5M0b78mif7ewpD2//3wSX5ybx5o+FMAL
0AKCaDAIQ5zHXw==
-----END CERTIFICATE-----
Generated at Sat Sep 19 02:58:39 2026 by rpki-client