Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
File:                     Rv57VnIiRRFtQjS-SEoCpIod3h8.mft (raw, json)
Hash identifier:          FONmNwVWxvjVhDRVJDJGDa8Poq64ER871S4n7rNeQso=
Subject key identifier:   3A:63:81:D4:37:EA:48:17:48:77:00:F9:94:0C:F6:84:B7:37:79:3F
Authority key identifier: 46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F
Certificate issuer:       /CN=46fe7b56722245116d4234be484a02a48a1dde1f
Certificate serial:       01A08B9F2ACEE1559911C7808393FB86DBE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
Manifest number:          13D0
Signing time:             Thu 10 Sep 2026 14:00:59 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:59 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:59 +0000
Files and hashes:         1: Rv57VnIiRRFtQjS-SEoCpIod3h8.crl (hash: Z6p12P2B1XtL93i64arcSsYBmydy/wfa/Fi51xUOd80=)
                          2: UU4xI-IDeZuaxwAij62eAAaWQ_0.roa (hash: V7I4/+fg+WJ0ybpIztp9e8XhyLxQSgqYEJV59yE+n4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9f:2a:ce:e1:55:99:11:c7:80:83:93:fb:86:db:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46fe7b56722245116d4234be484a02a48a1dde1f
        Validity
            Not Before: Sep 10 14:00:59 2026 GMT
            Not After : Sep 11 14:00:59 2026 GMT
        Subject: CN=3a6381d437ea4817487700f9940cf684b737793f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5a:6f:2f:17:9a:ce:68:ef:b2:07:2b:f1:ba:
                    1c:3e:4e:cd:4c:7b:58:04:66:4d:e3:da:30:3b:6c:
                    de:7d:36:cd:b5:ee:1c:09:a1:45:4b:59:a7:0b:d6:
                    a1:18:54:a6:89:9c:d2:7f:9d:80:2a:b9:2f:4d:77:
                    26:71:9f:d4:ef:2a:9f:c1:f2:12:50:6e:c3:4b:69:
                    67:50:bc:63:60:06:fa:ec:29:97:5c:de:a4:09:73:
                    b2:00:5c:a7:8e:e6:c5:f7:92:27:49:5f:08:2b:f0:
                    fa:94:d0:da:78:f6:69:ac:24:ef:6d:98:32:dc:35:
                    74:22:6d:c2:38:12:fb:ea:09:a6:7a:16:12:24:a5:
                    4e:f0:ca:1d:b3:83:11:5d:e7:e2:49:98:39:77:04:
                    07:5b:68:98:21:01:4d:99:f1:95:11:a0:2a:ae:6d:
                    f5:4b:9a:1e:38:ac:9a:a2:a2:97:3c:16:0e:42:d7:
                    d5:b3:82:93:6d:08:b0:63:fe:b5:7a:22:dd:30:46:
                    5a:a4:52:a1:98:ea:79:df:c5:af:8c:8a:59:3f:49:
                    54:e6:86:29:3e:f2:2d:cc:c7:92:ad:66:7a:e6:6f:
                    ce:19:08:66:85:bb:c0:73:30:35:61:4c:72:5e:14:
                    d9:f3:ce:83:fd:1d:b4:36:9f:0d:19:c5:ef:85:04:
                    54:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:63:81:D4:37:EA:48:17:48:77:00:F9:94:0C:F6:84:B7:37:79:3F
            X509v3 Authority Key Identifier:
                keyid:46:FE:7B:56:72:22:45:11:6D:42:34:BE:48:4A:02:A4:8A:1D:DE:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rv57VnIiRRFtQjS-SEoCpIod3h8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/908143-f916-4718-8f97-4bd3392d55d1/1/Rv57VnIiRRFtQjS-SEoCpIod3h8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e7:e6:a9:dd:84:a4:90:b3:eb:b9:c2:14:fe:1c:cf:86:5a:
         69:21:b1:83:fa:2f:04:7f:12:a1:eb:4c:5f:b1:55:ae:c3:c6:
         a8:47:16:40:7a:24:af:ed:b1:73:d0:08:f2:4e:a9:eb:b6:d4:
         14:f9:06:f4:85:d5:4e:0a:8d:e0:7d:26:6e:9b:6d:2d:8b:e4:
         b9:c6:7c:54:59:d3:3e:bb:6e:19:11:45:f6:21:15:3e:5b:84:
         0d:76:c2:cb:43:fb:16:58:39:5f:6c:61:76:93:6a:cc:82:b3:
         fe:63:4e:89:92:f9:ce:e5:ee:37:26:f8:03:86:f2:47:af:21:
         cb:72:1f:b5:16:43:6c:51:df:e8:55:b4:a3:89:6a:5b:45:b6:
         2c:45:08:37:b5:96:d4:95:41:0f:24:ec:63:28:1d:5c:61:16:
         33:3d:88:12:da:74:97:e5:f5:20:d2:18:da:56:19:42:61:f3:
         82:9f:72:76:c9:56:33:d7:dd:bf:84:1e:3d:9b:b7:01:0d:d4:
         89:58:40:61:2d:61:5b:fd:61:c4:5c:1e:02:b4:15:a8:d9:7e:
         6a:0a:e1:ff:b2:df:cf:e4:20:a7:2f:8d:06:3a:53:d6:81:2e:
         a3:10:d0:cc:78:f8:b1:0e:e4:6d:c6:af:d7:98:31:64:ee:33:
         2b:12:ca:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLnyrO4VWZEceAg5P7htvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZmU3YjU2NzIyMjQ1MTE2ZDQyMzRiZTQ4NGEwMmE0OGEx
ZGRlMWYwHhcNMjYwOTEwMTQwMDU5WhcNMjYwOTExMTQwMDU5WjAzMTEwLwYDVQQD
EygzYTYzODFkNDM3ZWE0ODE3NDg3NzAwZjk5NDBjZjY4NGI3Mzc3OTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVpvLxeazmjvsgcr8bocPk7NTHtY
BGZN49owO2zefTbNte4cCaFFS1mnC9ahGFSmiZzSf52AKrkvTXcmcZ/U7yqfwfIS
UG7DS2lnULxjYAb67CmXXN6kCXOyAFynjubF95InSV8IK/D6lNDaePZprCTvbZgy
3DV0Im3COBL76gmmehYSJKVO8Mods4MRXefiSZg5dwQHW2iYIQFNmfGVEaAqrm31
S5oeOKyaoqKXPBYOQtfVs4KTbQiwY/61eiLdMEZapFKhmOp538WvjIpZP0lU5oYp
PvItzMeSrWZ65m/OGQhmhbvAczA1YUxyXhTZ886D/R20Np8NGcXvhQRUIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpjgdQ36kgXSHcA+ZQM9oS3N3k/MB8GA1UdIwQY
MBaAFEb+e1ZyIkURbUI0vkhKAqSKHd4fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTct
NGJkMzM5MmQ1NWQxLzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85MDgxNDMtZjkxNi00NzE4LThmOTctNGJkMzM5MmQ1NWQx
LzEvUnY1N1ZuSWlSUkZ0UWpTLVNFb0NwSW9kM2g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU+fmqd2E
pJCz67nCFP4cz4ZaaSGxg/ovBH8SoetMX7FVrsPGqEcWQHokr+2xc9AI8k6p67bU
FPkG9IXVTgqN4H0mbpttLYvkucZ8VFnTPrtuGRFF9iEVPluEDXbCy0P7Flg5X2xh
dpNqzIKz/mNOiZL5zuXuNyb4A4byR68hy3IftRZDbFHf6FW0o4lqW0W2LEUIN7WW
1JVBDyTsYygdXGEWMz2IEtp0l+X1INIY2lYZQmHzgp9ydslWM9fdv4QePZu3AQ3U
iVhAYS1hW/1hxFweArQVqNl+agrh/7Lfz+Qgpy+NBjpT1oEuoxDQzHj4sQ7kbcav
15gxZO4zKxLKdw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 18:28:20 2026 by rpki-client