Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
File:                     DP81-NWtPe6lUQZbJAK7DTyNlRk.mft (raw, json)
Hash identifier:          4RwRKvfSv9GgRbENkyTygW2SH2pP8qnNEMGO94Bz0C4=
Subject key identifier:   6B:CE:E4:4B:3B:14:85:42:F1:CA:D1:43:6E:DE:FB:2C:79:58:BA:12
Authority key identifier: 0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19
Certificate issuer:       /CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
Certificate serial:       019E2F975D9D7773131DE3BC05001FDB741E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
Manifest number:          190D
Signing time:             Sat 16 May 2026 07:01:49 +0000
Manifest this update:     Sat 16 May 2026 07:01:49 +0000
Manifest next update:     Sun 17 May 2026 07:01:49 +0000
Files and hashes:         1: DP81-NWtPe6lUQZbJAK7DTyNlRk.crl (hash: EK1PZsvdT3pJdco8946yZCCKnWwruu0GuRYFMmYelVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 07:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:97:5d:9d:77:73:13:1d:e3:bc:05:00:1f:db:74:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cff35f8d5ad3deea551065b2402bb0d3c8d9519
        Validity
            Not Before: May 16 07:01:49 2026 GMT
            Not After : May 17 07:01:49 2026 GMT
        Subject: CN=6bcee44b3b148542f1cad1436edefb2c7958ba12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e8:50:a2:8e:80:88:ca:85:75:04:dc:b5:58:
                    3a:e7:2b:8d:d7:7c:71:3b:e7:6b:37:62:70:54:2a:
                    0f:5c:63:53:8a:c5:fb:ed:bb:55:68:c0:c4:ed:11:
                    7e:67:58:17:55:79:7f:76:05:a4:94:0c:51:29:02:
                    9b:e1:92:53:3b:8e:10:1e:7a:5e:18:cc:bc:27:9b:
                    88:63:b3:8f:7c:6d:44:a5:07:67:ac:21:f6:2c:4e:
                    89:5d:73:68:3c:60:f7:90:e3:1e:c2:fe:f6:1b:c4:
                    bc:28:c6:4b:cb:5b:41:52:f7:d5:4e:01:da:cb:07:
                    74:3a:9b:8c:c2:5b:e0:09:d0:61:3e:7d:61:d3:0a:
                    02:0a:25:86:24:7c:6b:fb:02:18:4e:28:63:3f:27:
                    ce:16:1e:8a:76:02:0b:86:a4:2d:a9:ce:e1:a1:61:
                    e5:32:cb:61:23:88:6a:9e:98:d9:a6:72:55:c2:cf:
                    38:e9:c7:e8:05:ea:0a:2c:eb:46:32:7f:11:09:92:
                    5f:27:c3:0a:24:44:cb:65:d7:d9:c0:be:f8:55:01:
                    93:4a:dd:ed:4f:d5:87:bb:42:22:50:51:bc:53:f4:
                    4e:a4:7e:ee:79:73:f1:35:ed:fc:68:bd:51:4a:b3:
                    6b:71:78:c3:7a:32:15:3c:8a:39:e0:00:70:04:4e:
                    a1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:CE:E4:4B:3B:14:85:42:F1:CA:D1:43:6E:DE:FB:2C:79:58:BA:12
            X509v3 Authority Key Identifier:
                keyid:0C:FF:35:F8:D5:AD:3D:EE:A5:51:06:5B:24:02:BB:0D:3C:8D:95:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP81-NWtPe6lUQZbJAK7DTyNlRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/70ac54-8acb-4a1b-8105-e33f2baabc60/1/DP81-NWtPe6lUQZbJAK7DTyNlRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:09:01:f4:03:ea:a5:8c:53:81:1a:1d:85:b9:43:bb:de:cf:
         29:52:a4:9a:b2:6e:b3:0c:80:b6:98:51:8e:70:9a:f5:b2:ba:
         04:cc:d3:cd:c4:ef:10:25:04:a8:ba:da:6f:de:2a:02:0e:56:
         b1:9d:4c:a6:e7:d0:4f:93:42:65:e1:af:6d:1a:b6:43:cd:3f:
         4b:f9:3e:94:16:a6:ad:c8:3e:1d:20:db:4a:c1:af:9d:03:24:
         07:a9:c8:04:d2:06:75:43:cc:4a:f0:dd:4f:23:8b:2d:e0:61:
         ac:2e:27:2d:5a:e4:75:e6:39:ff:0c:26:9a:07:1e:41:7a:56:
         54:48:47:b8:d5:0c:6b:16:cd:79:7c:14:e6:84:2f:7e:66:2e:
         72:42:4b:98:02:a5:0c:20:83:25:c8:93:15:65:eb:ab:99:c6:
         c2:b0:f0:62:39:cc:d5:4b:3e:51:79:57:a1:76:8a:36:ce:af:
         47:f8:28:8b:32:ee:8d:79:d6:8a:e0:5f:6e:12:ba:c4:71:9d:
         a7:ea:bc:a5:62:d2:38:37:05:e6:d2:38:3d:df:e1:64:0d:95:
         3c:43:68:43:a8:0c:fc:0d:ad:3c:e8:e3:04:c5:1d:51:e5:30:
         05:1f:05:82:c2:b0:f7:5a:e7:96:76:ed:5b:44:d6:fa:00:30:
         02:d8:b2:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4vl12dd3MTHeO8BQAf23QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZmYzNWY4ZDVhZDNkZWVhNTUxMDY1YjI0MDJiYjBkM2M4
ZDk1MTkwHhcNMjYwNTE2MDcwMTQ5WhcNMjYwNTE3MDcwMTQ5WjAzMTEwLwYDVQQD
Eyg2YmNlZTQ0YjNiMTQ4NTQyZjFjYWQxNDM2ZWRlZmIyYzc5NThiYTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOhQoo6AiMqFdQTctVg65yuN13xx
O+drN2JwVCoPXGNTisX77btVaMDE7RF+Z1gXVXl/dgWklAxRKQKb4ZJTO44QHnpe
GMy8J5uIY7OPfG1EpQdnrCH2LE6JXXNoPGD3kOMewv72G8S8KMZLy1tBUvfVTgHa
ywd0OpuMwlvgCdBhPn1h0woCCiWGJHxr+wIYTihjPyfOFh6KdgILhqQtqc7hoWHl
MsthI4hqnpjZpnJVws846cfoBeoKLOtGMn8RCZJfJ8MKJETLZdfZwL74VQGTSt3t
T9WHu0IiUFG8U/ROpH7ueXPxNe38aL1RSrNrcXjDejIVPIo54ABwBE6haQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvO5Es7FIVC8crRQ27e+yx5WLoSMB8GA1UdIwQY
MBaAFAz/NfjVrT3upVEGWyQCuw08jZUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MGFjNTQtOGFjYi00YTFiLTgxMDUt
ZTMzZjJiYWFiYzYwLzEvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC83MGFjNTQtOGFjYi00YTFiLTgxMDUtZTMzZjJiYWFiYzYw
LzEvRFA4MS1OV3RQZTZsVVFaYkpBSzdEVHlObFJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQkB9APq
pYxTgRodhblDu97PKVKkmrJuswyAtphRjnCa9bK6BMzTzcTvECUEqLrab94qAg5W
sZ1MpufQT5NCZeGvbRq2Q80/S/k+lBamrcg+HSDbSsGvnQMkB6nIBNIGdUPMSvDd
TyOLLeBhrC4nLVrkdeY5/wwmmgceQXpWVEhHuNUMaxbNeXwU5oQvfmYuckJLmAKl
DCCDJciTFWXrq5nGwrDwYjnM1Us+UXlXoXaKNs6vR/goizLujXnWiuBfbhK6xHGd
p+q8pWLSODcF5tI4Pd/hZA2VPENoQ6gM/A2tPOjjBMUdUeUwBR8FgsKw91rnlnbt
W0TW+gAwAtiyyA==
-----END CERTIFICATE-----
Generated at Sat May 16 16:25:58 2026 by rpki-client