Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/62237d-4d6e-4128-904a-ceee5fa94c71/1/dvdDKX62gqjk6GqsA3kDkQP4qCU.mft
File:                     dvdDKX62gqjk6GqsA3kDkQP4qCU.mft (raw, json)
Hash identifier:          CflFaL0rglfD9xl4iHtc8ypzL4LBKNipasw/MU1OXxQ=
Subject key identifier:   01:D4:24:57:38:CA:6D:85:F1:C7:99:63:A1:A1:C3:C9:D9:09:CF:5B
Authority key identifier: 76:F7:43:29:7E:B6:82:A8:E4:E8:6A:AC:03:79:03:91:03:F8:A8:25
Certificate issuer:       /CN=76f743297eb682a8e4e86aac0379039103f8a825
Certificate serial:       01A0D0B6B240D10A74E3A6444F31058516E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvdDKX62gqjk6GqsA3kDkQP4qCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/62237d-4d6e-4128-904a-ceee5fa94c71/1/dvdDKX62gqjk6GqsA3kDkQP4qCU.mft
Manifest number:          0146
Signing time:             Thu 24 Sep 2026 00:00:29 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:29 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:29 +0000
Files and hashes:         1: SEe-2AwpWxyhA8wpX0OFfyueB0g.roa (hash: 72dQDYzN0PU1eohO/GnZ1Ibf20jsAONiNZ9ARQF0EEo=)
                          2: dvdDKX62gqjk6GqsA3kDkQP4qCU.crl (hash: Ylzidfk71LeY4MCabIj+WHcTsaWS11QuGVlpPvMJ2ME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/62237d-4d6e-4128-904a-ceee5fa94c71/1/dvdDKX62gqjk6GqsA3kDkQP4qCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/62237d-4d6e-4128-904a-ceee5fa94c71/1/dvdDKX62gqjk6GqsA3kDkQP4qCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvdDKX62gqjk6GqsA3kDkQP4qCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:b2:40:d1:0a:74:e3:a6:44:4f:31:05:85:16:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f743297eb682a8e4e86aac0379039103f8a825
        Validity
            Not Before: Sep 24 00:00:29 2026 GMT
            Not After : Sep 25 00:00:29 2026 GMT
        Subject: CN=01d4245738ca6d85f1c79963a1a1c3c9d909cf5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a2:f2:5a:65:ad:5e:b8:3b:d1:37:88:da:16:
                    4c:93:61:37:fb:98:83:1e:3b:3b:e8:82:9b:dd:30:
                    5e:97:3a:6e:17:92:f4:6d:bf:28:2d:00:a9:73:2a:
                    e6:56:a1:fd:5d:7c:7a:ed:61:ae:35:91:1e:11:75:
                    83:17:ba:30:33:7f:0e:24:97:a6:e8:90:e6:03:57:
                    61:8b:9b:0a:01:88:5f:01:cd:d9:32:03:45:12:d8:
                    16:fd:7f:8c:7d:2a:c4:95:b7:39:ce:48:ed:7f:b6:
                    f8:a7:b4:ce:34:44:d4:57:e0:5e:0c:13:31:7e:b2:
                    0c:27:82:5f:d8:19:e9:77:58:a0:e1:b6:43:bd:4e:
                    3b:6d:88:74:8a:42:29:4a:20:cd:e2:cb:8c:56:ad:
                    16:49:b7:72:c4:92:c0:40:cf:d9:d2:b6:37:0f:ea:
                    b7:1a:35:fc:61:9e:73:9b:2c:ea:0d:a3:b9:7c:f1:
                    ee:50:0f:3a:66:18:07:06:87:fd:21:3f:9b:d8:90:
                    6c:f2:10:73:12:bc:aa:16:b9:d3:68:d4:e3:56:d6:
                    e7:6c:9d:0c:25:4a:70:a1:bd:f5:ce:85:1b:00:8b:
                    e5:6e:c0:13:4b:96:f2:e8:b3:15:93:ab:c8:2f:c1:
                    5f:48:45:42:d4:66:52:62:0e:e3:e3:d7:46:c6:fe:
                    b1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D4:24:57:38:CA:6D:85:F1:C7:99:63:A1:A1:C3:C9:D9:09:CF:5B
            X509v3 Authority Key Identifier:
                keyid:76:F7:43:29:7E:B6:82:A8:E4:E8:6A:AC:03:79:03:91:03:F8:A8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvdDKX62gqjk6GqsA3kDkQP4qCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/62237d-4d6e-4128-904a-ceee5fa94c71/1/dvdDKX62gqjk6GqsA3kDkQP4qCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/62237d-4d6e-4128-904a-ceee5fa94c71/1/dvdDKX62gqjk6GqsA3kDkQP4qCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:0d:33:f0:cd:e1:a3:3b:9d:03:08:d7:41:8c:fa:b5:fb:d2:
         0d:b5:49:4a:c1:f2:4d:0b:0a:95:51:e7:ea:d7:62:5f:76:28:
         e7:e2:f9:55:6f:70:7b:cd:07:05:e4:84:a9:54:2c:f9:ef:0c:
         ee:70:19:74:27:14:c8:83:25:9d:44:74:6f:21:d4:3c:a5:2c:
         3e:6c:64:bb:bb:ac:66:aa:33:b3:de:87:4e:31:07:fa:3f:be:
         a5:96:cf:f5:a0:1f:4c:d8:47:ff:63:24:7b:07:5b:fc:06:20:
         4b:80:01:c0:1c:2c:b0:43:07:59:64:12:33:04:fa:dd:0a:f5:
         99:08:20:2f:0c:7c:de:1b:98:f5:e4:ac:ab:d3:fb:43:df:a7:
         d0:c1:c3:e3:99:b3:1f:5c:5f:b3:73:49:98:41:fd:0d:81:a6:
         61:08:ad:69:2b:71:ab:26:e8:aa:be:1a:3f:ec:e4:da:03:74:
         37:b7:cd:18:f6:8e:2f:1e:36:ae:cd:c7:cf:99:a0:eb:fc:25:
         92:c1:fd:15:65:59:43:8a:80:8f:c6:14:bf:52:52:40:71:54:
         11:89:9d:40:a7:52:15:86:5d:18:be:86:52:8e:49:46:57:be:
         37:fa:85:d5:fc:72:0a:24:29:4f:17:d4:3d:92:99:43:39:08:
         a1:13:ff:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:05:04 2026 by rpki-client