Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File:                     3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier:          A0VVbNgEdeZwytNK5PBD4OnbVUTTQDnwDnlI396XHtI=
Subject key identifier:   5B:DC:BA:41:F6:5F:4C:65:B5:75:C4:D3:2B:66:E6:38:7A:FC:46:95
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer:       /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial:       01A1CB1FD679FE2DB322CDE1450751516F78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number:          17C2
Signing time:             Wed 11 Nov 2026 15:00:23 +0000
Manifest this update:     Wed 11 Nov 2026 15:00:23 +0000
Manifest next update:     Thu 12 Nov 2026 15:00:23 +0000
Files and hashes:         1: 204umdoIBOqtcTbJI3jfclBQCyw.roa (hash: IwWlQnWIC7tAHQ+uxk+vueYs6Cuvcq1jNuaEjgSin/4=)
                          2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: yqoOOVPZRT/sjJy5aHBEOXYeFVsBJUSkgXKkPtYAcxU=)
                          3: 8tyX_G1-_nW7kgFUYT9y4ShiVPc.roa (hash: L+fAM2wTev7jcaaHyppAq65XRuAVybyECH1GJHGUgB8=)
                          4: Y09xLkmt7VHTVYtC64eFlrK6j58.roa (hash: iA768afUcGVOaqrvOSx3MnWnS2M+3J4maoqeEMVN/wE=)
                          5: p0VUng2o1_gaZHh--wu0wK0iIL4.roa (hash: oO1bw6THJUf9h7ZSPQOfZA0dBR3CVemJCl3j27Vlz30=)
                          6: v0q74nFVUklRHXEbX3DfFnuxDhk.roa (hash: G3/kUDIGfBOfo10jBZiH7VnHCFywynXkvKClxNGu0gY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Nov 2026 14:58:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:cb:1f:d6:79:fe:2d:b3:22:cd:e1:45:07:51:51:6f:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
        Validity
            Not Before: Nov 11 15:00:23 2026 GMT
            Not After : Nov 12 15:00:23 2026 GMT
        Subject: CN=5bdcba41f65f4c65b575c4d32b66e6387afc4695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:83:73:14:c9:b9:fa:6d:93:4d:64:b2:44:39:
                    c3:9d:d7:c7:00:21:26:3e:33:48:30:52:bc:14:78:
                    8d:8e:e5:f2:7d:3e:53:c0:27:3f:b2:a5:26:cf:1e:
                    87:1e:c9:b7:d4:2b:78:f8:8c:c4:2f:f6:da:7e:3d:
                    94:d6:ad:7d:a9:9f:59:96:53:41:76:c9:7f:5b:d7:
                    ab:13:90:ca:3e:a4:a0:e8:a8:d6:5c:c0:9d:cb:ec:
                    3e:bf:08:b8:1f:be:44:eb:a8:83:f2:52:ed:d2:8c:
                    5d:92:fd:cc:05:f1:fd:41:68:5e:ab:55:c9:73:5d:
                    9b:83:59:31:d4:d2:76:20:14:d9:bc:3b:3d:bd:0f:
                    32:69:f9:7b:a1:eb:a7:e4:c5:9f:d4:3a:0b:0c:96:
                    d8:0d:6b:72:9c:68:cd:84:ae:8c:71:32:d5:cd:e0:
                    d9:38:a3:bd:84:a2:35:fe:22:7b:7a:0a:45:3b:41:
                    a3:71:27:6e:c7:7b:a8:32:ca:a4:ca:91:5b:8f:fb:
                    92:68:17:2d:04:ec:20:ba:45:24:0e:77:e2:35:66:
                    63:3f:44:b3:c7:e1:5c:9e:6c:11:81:9b:2f:6f:7c:
                    80:c2:ab:84:2c:81:a4:a4:fd:30:33:1c:48:1c:07:
                    a1:17:a8:71:d3:09:bf:34:3b:f2:28:24:44:32:b3:
                    33:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DC:BA:41:F6:5F:4C:65:B5:75:C4:D3:2B:66:E6:38:7A:FC:46:95
            X509v3 Authority Key Identifier:
                keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:33:d2:df:2e:71:89:93:ce:21:a5:7c:26:7b:b0:fd:90:45:
         56:5c:d3:42:5f:79:5a:e4:fa:85:58:0c:4e:c2:3e:66:50:24:
         dd:9c:a3:2c:9a:b8:b5:ba:87:c9:32:f4:5d:8f:fb:9f:d5:a1:
         53:1e:ad:79:3d:fe:10:c7:7a:51:14:e1:e9:f1:e7:be:56:75:
         fe:f6:c3:13:3b:59:b6:86:c4:cf:c2:11:e1:ae:55:e5:e8:e0:
         4a:b0:c2:60:98:ca:5b:3b:33:ac:9c:46:b0:cf:98:71:7e:5f:
         4e:2d:6f:90:bb:d2:48:56:fa:4a:9a:c7:3f:35:cc:e5:a2:ce:
         0b:bc:24:1d:54:0f:bf:2a:0f:e9:aa:0b:eb:69:dd:a9:a6:97:
         e4:ef:28:d7:83:2b:85:a0:0c:a6:fd:5d:af:5b:ef:05:ab:75:
         7a:3d:36:bc:7f:9b:f4:4d:c2:5c:83:8e:f9:54:7f:d7:cf:cb:
         d8:81:90:3e:2b:f6:c6:a3:97:04:76:8e:dc:e2:a1:d9:71:8d:
         77:44:30:43:fb:55:e2:26:f6:18:f5:ae:14:7e:42:6e:41:27:
         15:a4:84:cc:58:6f:2c:8d:30:b9:02:14:28:41:a6:8d:f8:d9:
         d8:09:72:34:eb:3c:b7:de:5e:51:13:a7:62:d0:b0:65:7d:5e:
         3e:19:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 18:37:18 2026 by rpki-client