Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
File:                     C1peymzTjpIbWhRXCFSttKO2kjg.mft (raw, json)
Hash identifier:          swWcTpl4UxCYuFie4Go1Goh5ltkAVvc/m2Meli3QRkI=
Subject key identifier:   DE:9D:2C:DF:DB:B6:2C:5C:61:6F:92:95:79:F2:59:39:E3:F5:09:DE
Authority key identifier: 0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38
Certificate issuer:       /CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
Certificate serial:       01A089E80BB94BECB67B682CBB6783E6650C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
Manifest number:          11DD
Signing time:             Thu 10 Sep 2026 06:01:20 +0000
Manifest this update:     Thu 10 Sep 2026 06:01:20 +0000
Manifest next update:     Fri 11 Sep 2026 06:01:20 +0000
Files and hashes:         1: C1peymzTjpIbWhRXCFSttKO2kjg.crl (hash: zw0YfvQfXwaItlirFT48aRE5PrUAkl1We5vNulHEdyM=)
                          2: vYDkiQ8284qwQlXQwbK7sIbrgu4.roa (hash: atoNREmcnzRM3p/MPLhkQ+MYv5LYFsR6JX4f94qKzQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e8:0b:b9:4b:ec:b6:7b:68:2c:bb:67:83:e6:65:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5a5eca6cd38e921b5a14570854adb4a3b69238
        Validity
            Not Before: Sep 10 06:01:20 2026 GMT
            Not After : Sep 11 06:01:20 2026 GMT
        Subject: CN=de9d2cdfdbb62c5c616f929579f25939e3f509de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:d4:eb:d2:52:d7:b2:a9:c0:57:c0:16:94:
                    58:4b:30:b7:02:e3:55:d9:c9:b7:ca:f2:b2:59:a1:
                    9b:84:6f:6b:80:d4:61:bc:77:1f:33:e3:77:be:0a:
                    9f:ba:c7:65:e1:c8:2d:bb:99:bf:24:9c:cd:fa:71:
                    d9:c9:47:bd:af:6f:e2:79:36:b8:79:77:ee:6b:20:
                    94:1a:83:ff:0f:df:60:d4:b4:02:34:87:7f:77:43:
                    a1:73:7b:de:85:63:8d:a1:b5:ab:62:eb:3e:1a:ab:
                    5a:3a:4d:60:fd:5c:6b:4a:db:4a:7a:d0:c0:41:d5:
                    67:b3:5d:00:4c:25:21:49:65:c8:10:74:aa:15:0f:
                    1c:d1:65:14:14:10:99:29:4d:4f:89:9c:85:e4:4b:
                    ba:e0:ec:d2:2e:e4:99:3d:d1:ef:99:70:05:08:89:
                    17:fa:04:14:06:33:58:da:32:66:e7:71:48:f7:cb:
                    69:d3:23:3a:60:fa:ac:b5:f6:79:e1:e4:5b:fb:04:
                    47:84:14:88:d8:0b:cd:59:2e:f1:7b:73:ac:2b:fe:
                    2b:fa:66:ac:08:77:2c:9b:06:33:51:a4:be:be:c1:
                    20:1f:6d:e1:94:86:3b:00:a5:1f:d7:76:24:1b:1f:
                    ba:5a:d7:25:d2:37:8d:4b:fd:8b:be:06:a4:41:2b:
                    44:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:2C:DF:DB:B6:2C:5C:61:6F:92:95:79:F2:59:39:E3:F5:09:DE
            X509v3 Authority Key Identifier:
                keyid:0B:5A:5E:CA:6C:D3:8E:92:1B:5A:14:57:08:54:AD:B4:A3:B6:92:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1peymzTjpIbWhRXCFSttKO2kjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc4e4d-ae22-4147-ac87-e0d914c1cb50/1/C1peymzTjpIbWhRXCFSttKO2kjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:8e:44:4b:94:b3:e1:d2:f1:b3:8e:7e:86:0b:d0:a3:14:5c:
         b8:7e:0e:1d:93:e7:c7:3b:34:80:2f:d0:ec:e3:f8:20:79:0c:
         3e:66:0e:99:d5:a5:15:b0:f6:b5:c8:73:c8:d6:6e:da:de:e5:
         1b:95:30:68:d9:0f:b0:30:1a:98:e6:59:22:56:ea:d6:77:ad:
         3f:c3:4e:d8:0f:1d:28:db:83:c1:31:1c:b2:bf:06:1c:a3:67:
         77:cc:72:bf:b9:6d:ad:7e:a6:df:d9:d3:0c:18:b6:78:4b:57:
         24:0d:69:ee:7d:a2:dd:cd:71:9f:3a:b6:30:c4:8a:e6:f1:ec:
         1e:5c:c4:49:05:95:a1:b8:de:5f:b1:54:80:ca:18:4a:e6:fb:
         5e:d3:33:03:4d:41:a8:05:34:bd:f4:32:f8:11:90:4f:aa:cd:
         4e:01:d0:b6:71:9b:12:9d:2d:51:e5:41:0a:31:2e:41:3c:d8:
         2e:86:e4:7b:21:d4:f3:d0:d9:0b:96:11:99:af:40:35:b8:dc:
         96:56:34:81:7e:94:e1:ce:9e:ee:90:e3:20:bc:f4:63:0f:4b:
         d8:98:ce:bc:21:5b:7c:68:63:76:4b:2e:99:d5:21:91:5a:dc:
         91:a3:2a:28:ed:19:05:19:15:17:f0:63:5b:4e:9e:b4:ec:eb:
         da:d7:14:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ6Au5S+y2e2gsu2eD5mUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNWE1ZWNhNmNkMzhlOTIxYjVhMTQ1NzA4NTRhZGI0YTNi
NjkyMzgwHhcNMjYwOTEwMDYwMTIwWhcNMjYwOTExMDYwMTIwWjAzMTEwLwYDVQQD
EyhkZTlkMmNkZmRiYjYyYzVjNjE2ZjkyOTU3OWYyNTkzOWUzZjUwOWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszjU69JS17KpwFfAFpRYSzC3AuNV
2cm3yvKyWaGbhG9rgNRhvHcfM+N3vgqfusdl4cgtu5m/JJzN+nHZyUe9r2/ieTa4
eXfuayCUGoP/D99g1LQCNId/d0Ohc3vehWONobWrYus+GqtaOk1g/VxrSttKetDA
QdVns10ATCUhSWXIEHSqFQ8c0WUUFBCZKU1PiZyF5Eu64OzSLuSZPdHvmXAFCIkX
+gQUBjNY2jJm53FI98tp0yM6YPqstfZ54eRb+wRHhBSI2AvNWS7xe3OsK/4r+mas
CHcsmwYzUaS+vsEgH23hlIY7AKUf13YkGx+6Wtcl0jeNS/2LvgakQStEMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6dLN/btixcYW+SlXnyWTnj9QneMB8GA1UdIwQY
MBaAFAtaXsps046SG1oUVwhUrbSjtpI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODct
ZTBkOTE0YzFjYjUwLzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9kYzRlNGQtYWUyMi00MTQ3LWFjODctZTBkOTE0YzFjYjUw
LzEvQzFwZXltelRqcEliV2hSWENGU3R0S08ya2pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH45ES5Sz
4dLxs45+hgvQoxRcuH4OHZPnxzs0gC/Q7OP4IHkMPmYOmdWlFbD2tchzyNZu2t7l
G5UwaNkPsDAamOZZIlbq1netP8NO2A8dKNuDwTEcsr8GHKNnd8xyv7ltrX6m39nT
DBi2eEtXJA1p7n2i3c1xnzq2MMSK5vHsHlzESQWVobjeX7FUgMoYSub7XtMzA01B
qAU0vfQy+BGQT6rNTgHQtnGbEp0tUeVBCjEuQTzYLobkeyHU89DZC5YRma9ANbjc
llY0gX6U4c6e7pDjILz0Yw9L2JjOvCFbfGhjdksumdUhkVrckaMqKO0ZBRkVF/Bj
W06etOzr2tcUFQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 10:43:20 2026 by rpki-client