Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
File:                     DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft (raw, json)
Hash identifier:          rrKnnK5jD3TWwpIH+pkuDtUKIIYToC7Sj3+H0Bsl1Lo=
Subject key identifier:   97:92:2B:5B:01:F9:F4:80:C3:7F:9B:61:68:95:F8:07:B0:92:A5:C4
Authority key identifier: 0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54
Certificate issuer:       /CN=0c56234bc73d0cac819611cade29874822ff5d54
Certificate serial:       01A0D201707252FF7B754FCDE9E7664C185E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
Manifest number:          E6
Signing time:             Thu 24 Sep 2026 06:01:44 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:44 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:44 +0000
Files and hashes:         1: 2zJJEln3aMuBWTTX2Wghm64WL1c.roa (hash: 5hVuyCxLA7+9VBEWVzzqiucZv/QNutyUowFs04GW0IQ=)
                          2: DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl (hash: 6Z7btEufga/f5jAgJQ2i/IcCV38Qp8sl2YrcxHhskpA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:01:70:72:52:ff:7b:75:4f:cd:e9:e7:66:4c:18:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c56234bc73d0cac819611cade29874822ff5d54
        Validity
            Not Before: Sep 24 06:01:44 2026 GMT
            Not After : Sep 25 06:01:44 2026 GMT
        Subject: CN=97922b5b01f9f480c37f9b616895f807b092a5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:82:d8:a8:e4:83:80:59:b0:ee:d9:c3:96:
                    39:7a:69:86:59:36:80:b2:fc:a5:8b:a8:4b:94:60:
                    50:47:04:06:0b:70:b8:a2:b0:fb:20:95:90:3a:8e:
                    99:fa:ff:6f:d6:c9:a1:b2:51:7a:2a:49:a1:37:c5:
                    fc:30:e9:c1:f4:7a:fd:f7:e7:35:fb:12:bf:38:51:
                    08:4f:ed:20:d4:bb:a4:74:75:10:08:b2:86:d1:49:
                    c3:09:81:29:50:f9:b7:4a:2e:40:0d:e4:43:c7:58:
                    42:7f:a9:51:66:76:8f:d6:20:1d:29:2b:97:df:1a:
                    79:d9:f1:98:c4:2f:7a:b9:e5:69:48:9c:8a:14:aa:
                    4f:49:5f:26:cd:78:8c:ce:20:04:65:15:c3:45:6e:
                    c7:12:de:d4:2a:7b:8b:18:59:f4:90:7a:da:0f:98:
                    ee:4e:01:01:4b:26:30:d6:ad:d1:a9:d3:f4:a3:7f:
                    e5:0d:c8:49:c2:da:7e:24:a0:78:ed:fd:2b:47:ac:
                    ed:ee:10:bd:db:22:a0:8a:40:a3:9f:e8:35:86:7e:
                    5d:eb:b1:f8:1e:c9:6c:a1:92:ec:9a:e0:83:30:4f:
                    73:56:a4:13:ec:78:a7:54:44:b0:31:25:1b:66:3d:
                    38:c5:d8:b8:09:f7:de:96:a4:91:f4:7a:2c:a7:40:
                    86:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:92:2B:5B:01:F9:F4:80:C3:7F:9B:61:68:95:F8:07:B0:92:A5:C4
            X509v3 Authority Key Identifier:
                keyid:0C:56:23:4B:C7:3D:0C:AC:81:96:11:CA:DE:29:87:48:22:FF:5D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFYjS8c9DKyBlhHK3imHSCL_XVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e64625-cb8b-49cb-8569-266ac104f7b4/1/DFYjS8c9DKyBlhHK3imHSCL_XVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:65:74:03:46:92:eb:d8:16:af:ea:42:d0:f4:5e:47:32:
         a0:11:31:38:a0:33:a8:0b:56:e2:2d:f4:ba:b0:0a:d5:a9:aa:
         dd:16:92:cc:76:f7:ff:19:05:bb:ab:df:10:c8:cb:84:20:a3:
         ab:96:c6:ba:4f:3a:77:88:6d:0a:0d:16:7c:fb:66:d5:ff:7f:
         8d:58:51:24:ef:f7:85:12:e9:ba:f7:a5:3f:d2:2e:c5:c7:1f:
         3e:f6:61:87:d4:49:bc:45:2d:b8:b1:6b:a3:f4:8b:7f:bf:f1:
         0e:13:d6:95:d6:2f:51:d0:26:41:5d:ed:04:07:e9:35:67:15:
         7d:65:63:e0:6f:a2:b1:4b:a6:ab:a9:28:d5:78:02:fe:77:09:
         9b:1c:e5:eb:5d:9f:5c:26:7b:aa:8b:f7:2c:fc:6c:be:67:81:
         dd:d0:6c:9d:aa:ef:0a:26:9e:25:49:7b:74:4c:21:51:99:c0:
         50:ee:8d:c7:73:83:4d:5e:a3:c1:8c:04:7e:08:04:37:a5:1d:
         4a:fe:11:3f:56:c0:23:d2:8a:9c:7f:8c:d9:20:72:16:57:78:
         60:1e:c1:1a:af:9f:da:d5:ff:12:77:45:f9:da:fb:d2:1b:89:
         51:38:45:31:36:dd:95:ca:a0:ce:dd:67:a2:c5:df:fc:dc:7c:
         cb:e0:f3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:05:20 2026 by rpki-client