Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
File:                     dlOpinSeVpdEoe3iyUDy5DPEQIo.mft (raw, json)
Hash identifier:          Wt1BUU0CLaivHKNAE4pFnmIhX87xtT6NdQEpa2toQFo=
Subject key identifier:   AF:AE:F8:E9:D5:F6:08:AA:E9:34:99:BC:8A:B0:81:BD:D5:57:E7:04
Authority key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
Certificate issuer:       /CN=7653a98a749e569744a1ede2c940f2e433c4408a
Certificate serial:       019F9059D900D6850AC1785F90AC1A9C8BF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
Manifest number:          0D57
Signing time:             Thu 23 Jul 2026 19:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:35 +0000
Files and hashes:         1: RsF6wJG_DVoKQM6B-sCzW6WCDW0.roa (hash: qws597tbqP0XDfiuU1TMHHh3nxH1S6tAU3H9xRP9fH8=)
                          2: dlOpinSeVpdEoe3iyUDy5DPEQIo.crl (hash: dJ2N0R7ru6YsWpKKrfT7H+lnTZMgu/YC5Dc5VKSC2Lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:d9:00:d6:85:0a:c1:78:5f:90:ac:1a:9c:8b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7653a98a749e569744a1ede2c940f2e433c4408a
        Validity
            Not Before: Jul 23 19:00:35 2026 GMT
            Not After : Jul 24 19:00:35 2026 GMT
        Subject: CN=afaef8e9d5f608aae93499bc8ab081bdd557e704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:f5:c2:f3:c9:7f:3b:fb:fb:98:4b:78:66:
                    69:3f:9b:b5:ba:f4:c2:35:62:3f:74:83:59:37:94:
                    a3:08:e5:8f:7c:41:62:e9:3c:6b:e9:7b:30:96:7f:
                    60:da:19:7e:41:a3:d4:37:68:b8:bf:2d:63:13:74:
                    8c:d5:7e:da:db:41:f3:91:f3:0a:2b:99:74:4c:79:
                    d8:f3:e1:61:90:d4:7b:ef:bf:1c:b5:b5:6e:d0:0c:
                    74:e2:1a:03:15:8b:17:3d:72:89:f1:7b:08:5b:e6:
                    da:f8:ee:f7:81:90:4d:50:53:0a:ef:2c:66:e7:83:
                    2d:99:d4:57:c0:43:c9:5c:7f:ef:d8:4f:c7:3f:e8:
                    50:cb:fc:09:f7:d3:f2:e5:af:1f:db:d7:24:b5:de:
                    9b:f2:28:7d:17:fd:7c:f9:50:1d:9f:b8:33:52:22:
                    25:28:f4:9a:5c:79:3a:c0:7c:ab:23:79:7e:3d:ce:
                    0e:e4:f5:de:eb:35:94:f3:e5:e7:3c:be:ae:d8:6c:
                    15:f2:34:02:ed:65:cb:b5:0a:dc:ac:6e:37:3e:34:
                    16:15:32:56:d9:db:3e:da:f3:49:6d:1f:8c:5e:11:
                    70:fd:f0:1e:e4:35:8b:4a:e4:77:f0:f9:82:80:7b:
                    d0:db:0a:ef:18:68:77:22:25:02:86:30:85:18:02:
                    87:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AE:F8:E9:D5:F6:08:AA:E9:34:99:BC:8A:B0:81:BD:D5:57:E7:04
            X509v3 Authority Key Identifier:
                keyid:76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:d3:2b:77:5f:46:6d:b5:b9:02:c6:c8:4c:ff:92:7b:df:ab:
         40:96:b6:a4:c4:96:aa:55:ea:4c:d9:0d:47:ff:9f:f2:b0:ee:
         cc:ea:06:33:fb:b9:f1:5e:32:a3:1c:c1:22:62:18:f4:05:eb:
         42:db:dd:cf:37:52:43:ea:1e:89:1b:ac:5c:67:4c:6c:3b:27:
         3e:da:2a:f8:34:6b:1e:ef:ac:20:f7:dd:b7:42:b8:49:09:b2:
         56:7a:f0:21:b9:09:4e:42:89:0f:1f:f7:5f:04:78:da:72:3b:
         05:02:3c:db:7d:1a:3e:0b:0f:15:2d:c9:32:40:27:25:62:ac:
         51:9e:b4:a5:97:f5:99:c5:19:30:46:0c:59:18:5c:c3:d0:b8:
         27:b3:43:04:d3:a7:4f:99:fa:dd:02:74:74:40:8e:07:56:1c:
         fc:90:df:35:ee:30:1a:53:37:ee:7e:e1:3b:0f:08:ac:f4:9e:
         dc:4d:31:a9:89:bc:85:98:65:8e:d5:04:9b:53:35:60:ad:b6:
         83:8b:69:b3:19:a8:78:15:d4:88:f1:99:24:12:27:b0:00:04:
         1f:d1:fa:a8:29:f6:b5:ae:78:6e:dc:06:ba:90:ce:f1:68:cc:
         46:9e:5c:84:c5:23:4c:e9:25:9f:fd:73:46:4e:9e:23:5b:50:
         c9:cf:de:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:56 2026 by rpki-client