Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          /dYhIFgyqb+ml6doI+HIGYjSAh+LUkO3yIyPsPa/Z1Y=
Subject key identifier:   46:53:B9:4E:08:8D:70:12:17:F8:D7:71:7E:F8:4F:79:5A:22:AD:B6
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       01A0D9BAF95D900A473E15ABBA8FDF3F2377
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          1A73
Signing time:             Fri 25 Sep 2026 18:01:44 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:44 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:44 +0000
Files and hashes:         1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=)
                          2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: Zjk0LzRfTM/gH/evEg/akMAMo9RjdV8KFw3B3I94dmo=)
                          3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=)
                          4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=)
                          5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=)
                          6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:f9:5d:90:0a:47:3e:15:ab:ba:8f:df:3f:23:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Sep 25 18:01:44 2026 GMT
            Not After : Sep 26 18:01:44 2026 GMT
        Subject: CN=4653b94e088d701217f8d7717ef84f795a22adb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:58:0d:11:44:32:a6:db:a3:18:91:b3:a3:
                    28:38:c3:25:12:7f:c2:d4:45:f5:d3:d9:37:69:b6:
                    f4:b1:74:4e:ec:92:6e:74:a8:03:d9:fb:64:c2:4e:
                    29:23:68:ab:d4:fc:f7:47:0e:ce:55:eb:2d:d3:91:
                    18:09:4d:bb:15:19:5e:12:1b:c6:8f:e2:70:5f:0d:
                    74:a1:8b:7c:94:1f:b4:2a:75:0e:e9:18:f9:be:ba:
                    f7:41:99:b2:c2:37:fb:71:94:45:3d:4c:17:4e:79:
                    a9:f6:9c:3d:87:79:b8:92:e1:e3:9e:82:40:36:e2:
                    62:fd:33:3a:40:cb:e4:57:7c:04:26:6b:47:27:5c:
                    bc:7b:12:fe:05:17:56:fd:3f:57:f3:89:d1:55:7a:
                    9d:99:56:1c:71:f1:15:c4:ab:53:f5:f5:bf:e0:74:
                    c6:63:a3:3d:e9:6d:c3:84:b0:63:9d:e9:7a:a9:b2:
                    27:63:5d:68:4e:ed:2b:58:4c:86:be:9a:de:be:93:
                    34:1f:72:08:32:89:9d:24:eb:96:1a:9c:16:57:9f:
                    13:b7:38:31:c3:ea:dc:05:8f:25:89:79:b1:e3:ea:
                    b9:e2:4b:a5:13:80:0d:f0:b0:96:69:b1:47:6e:fc:
                    2e:fb:6c:85:e8:a6:b5:33:4c:02:c2:a4:cd:09:45:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:53:B9:4E:08:8D:70:12:17:F8:D7:71:7E:F8:4F:79:5A:22:AD:B6
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:e2:9b:34:b0:3f:ee:4a:e4:b4:40:62:2b:b7:4e:e9:09:94:
         4b:d7:f5:fb:f2:e6:fd:92:dd:1b:bc:e1:fa:6f:f9:58:e9:ea:
         cd:7c:2c:1a:5b:23:5b:94:d9:9f:01:92:18:f1:ef:13:4d:db:
         a2:18:63:04:0e:53:64:44:f1:4d:31:75:b4:69:27:0c:6f:1b:
         a0:cf:67:9e:e7:f5:4c:01:2b:48:7e:25:68:33:fd:43:3d:a2:
         a2:28:08:11:e3:13:ab:73:5b:ec:67:6e:c9:d7:f5:43:6c:9b:
         2c:0e:03:56:58:c5:74:57:62:f1:4c:f8:06:be:83:31:77:f7:
         26:33:0b:e3:2e:2f:49:37:05:e7:ae:f9:7b:a6:e0:5b:35:16:
         ec:f2:2c:be:e2:7f:fb:db:bb:d5:c9:fa:bc:4a:31:05:75:b2:
         b0:51:1e:e4:01:83:84:db:c5:82:7a:4b:5f:17:94:89:ca:e3:
         7b:cc:32:ab:4c:a1:f8:84:93:08:9e:59:75:6d:97:2b:fc:7a:
         4e:ee:e6:41:5d:d0:58:24:25:07:8c:06:ab:57:42:ff:06:6e:
         8c:10:63:f6:ee:f1:08:30:99:4c:c0:df:13:e8:c1:81:93:50:
         88:48:15:b6:b0:66:0c:eb:d8:fe:0a:31:c3:4d:04:5a:3d:db:
         b0:8f:88:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:00:38 2026 by rpki-client