Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File:                     dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier:          nveAQnAxfG33KMI0THfQi78dvRsiQ3RkCSdTvMItfJs=
Subject key identifier:   DB:CD:C1:07:97:E4:42:80:FE:76:6D:C8:FC:E5:9A:13:6E:BD:49:8D
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer:       /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial:       01A0E32BB50694A823158AD48C164367B337
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number:          0F31
Signing time:             Sun 27 Sep 2026 14:01:27 +0000
Manifest this update:     Sun 27 Sep 2026 14:01:27 +0000
Manifest next update:     Mon 28 Sep 2026 14:01:27 +0000
Files and hashes:         1: KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa (hash: 1beuOrWqdA+O+erqVb2gqs5tEOIpMoZMwqBtE6QzSbA=)
                          2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: /c/FXKNID5MHG/cctiN/IkbCmv38HuR08IhHGVBTKJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:2b:b5:06:94:a8:23:15:8a:d4:8c:16:43:67:b3:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
        Validity
            Not Before: Sep 27 14:01:27 2026 GMT
            Not After : Sep 28 14:01:27 2026 GMT
        Subject: CN=dbcdc10797e44280fe766dc8fce59a136ebd498d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:b5:b4:56:36:48:25:1d:47:27:0e:29:b8:
                    66:98:b2:03:ac:26:a7:c8:3b:4a:06:e0:09:1d:34:
                    2b:bf:a7:05:55:43:22:37:8e:6b:03:70:a2:2a:75:
                    8e:99:df:ba:d6:31:4c:dd:73:04:91:7f:8e:9a:53:
                    ab:9d:43:21:83:89:ff:29:ad:87:54:bc:9f:5f:b0:
                    00:0b:f1:d3:fe:dc:d5:5b:a7:2c:ef:ea:5f:4d:6b:
                    3b:d7:3d:1e:6d:5c:85:93:e0:72:57:05:a0:a6:59:
                    b5:13:b8:c4:23:04:bc:b0:dd:12:51:7e:4f:e6:1e:
                    04:56:91:a9:e1:7e:1c:f1:65:4e:6b:a8:0b:8d:c1:
                    c5:2d:9a:8f:84:20:f2:99:e7:f2:61:2e:d5:6d:9a:
                    18:57:c3:3f:69:c1:b2:24:44:e0:e0:1b:ac:df:31:
                    fa:45:ab:89:a7:69:00:9a:bb:d1:e3:98:51:6c:3a:
                    85:41:30:12:ed:13:c9:d1:a1:3e:d4:93:e8:2e:c5:
                    ef:97:db:00:f2:e3:48:8d:3a:a4:53:e7:9e:6d:02:
                    ee:f7:20:88:0c:56:6d:7d:3c:ea:b8:b5:17:f2:14:
                    62:be:ff:fe:e7:bf:15:fc:9e:4e:23:fa:fb:4a:5c:
                    eb:ed:2b:d6:a5:6e:83:2d:59:2b:35:3f:4d:51:ea:
                    86:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:CD:C1:07:97:E4:42:80:FE:76:6D:C8:FC:E5:9A:13:6E:BD:49:8D
            X509v3 Authority Key Identifier:
                keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:03:91:5b:5e:9d:a9:39:9c:84:66:d8:97:bc:4a:bf:50:53:
         cf:03:67:ef:9a:01:67:05:cc:d9:57:2f:c2:8e:66:84:b9:e1:
         c3:61:4b:36:a4:94:22:da:5f:84:83:42:d9:72:17:54:4b:37:
         23:e8:5a:d8:fb:fd:19:8d:37:88:a2:f8:e9:4b:32:ee:29:ef:
         65:22:45:8d:1d:3d:64:c3:37:fa:fc:4d:06:7f:c6:f2:28:b2:
         41:39:ce:53:53:9f:97:05:73:64:34:17:c6:d0:81:e2:7b:f4:
         6e:fb:60:bf:cb:fa:05:08:12:b4:20:48:0a:51:74:1f:7f:69:
         68:38:d3:78:76:59:a1:ec:12:45:a1:88:bb:90:82:a0:21:a3:
         58:f5:0c:f5:14:0e:6c:f1:b2:ce:6c:a4:31:64:a3:75:23:7b:
         b1:9b:42:fc:e3:6e:41:7a:da:6b:e3:81:96:db:79:31:be:d5:
         f6:e7:9b:08:52:bb:98:f5:2a:8a:c3:ea:82:d2:53:a4:51:ac:
         fd:9c:b5:1d:c4:2d:b8:8e:ec:83:f6:33:e4:41:23:c9:fe:04:
         f6:45:27:5c:bc:1a:f5:c7:c6:b0:a3:81:4c:bd:70:ff:7b:4d:
         19:ed:ab:26:c1:57:d0:f0:33:ac:f6:b2:b1:88:65:03:82:90:
         62:97:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:20:31 2026 by rpki-client