Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File:                     DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier:          mrjCeOB2/hKQbsbLUHSbNddHkLowUmdh3c74gOuGWck=
Subject key identifier:   DC:C4:20:E3:35:CF:B6:9B:5D:47:37:B2:B6:FB:9D:A2:5D:80:57:9F
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer:       /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial:       01A10512ACF56DEB2533B33D750A80740778
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number:          1A92
Signing time:             Sun 04 Oct 2026 04:01:12 +0000
Manifest this update:     Sun 04 Oct 2026 04:01:12 +0000
Manifest next update:     Mon 05 Oct 2026 04:01:12 +0000
Files and hashes:         1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: cdkej7QrlZw8RDF8YzTEdECXNG/IUas5a26h+9RTVOc=)
                          2: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (hash: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:12:ac:f5:6d:eb:25:33:b3:3d:75:0a:80:74:07:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
        Validity
            Not Before: Oct  4 04:01:12 2026 GMT
            Not After : Oct  5 04:01:12 2026 GMT
        Subject: CN=dcc420e335cfb69b5d4737b2b6fb9da25d80579f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:dd:bd:56:fc:ef:19:55:d2:aa:99:9c:f9:
                    ab:78:01:44:78:10:a3:45:68:e0:81:02:80:ac:b8:
                    81:bf:f1:ef:73:b0:29:e1:79:61:79:38:34:75:71:
                    5e:7c:b1:bb:23:cb:e2:a9:38:5a:33:34:3c:c6:e6:
                    e3:d2:e2:a2:81:1f:31:62:bb:6f:51:d9:88:d3:3b:
                    82:57:b2:9b:37:f4:5d:11:a3:b6:a3:78:8c:f4:93:
                    c6:1f:9e:5d:0f:4d:77:e0:d8:03:b0:9d:f2:56:d5:
                    59:b3:c9:12:1d:b5:bd:f1:1b:3a:3d:5f:1f:8c:6b:
                    46:c4:62:99:07:40:ee:49:e3:80:6a:35:94:ac:d8:
                    e3:c7:6f:b9:5e:f7:8a:74:90:f0:5a:67:ea:5d:de:
                    ca:a4:7b:ea:94:94:42:a0:57:da:1e:c8:7c:33:3b:
                    a3:18:1e:c6:c4:3f:7c:5f:3a:60:78:5c:da:70:ad:
                    56:62:6d:6e:14:b9:64:06:1a:6f:11:06:56:59:24:
                    2f:4c:b2:d8:f9:37:32:a0:59:b2:3f:d0:d9:9c:18:
                    02:93:c7:66:d4:74:ae:b8:a3:64:bc:4e:5a:2e:bf:
                    12:3b:cf:9e:2e:31:c8:b8:46:50:eb:52:dc:bd:ae:
                    56:fd:c6:47:f7:34:b4:a0:e1:1f:ff:a4:ca:9a:be:
                    4e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C4:20:E3:35:CF:B6:9B:5D:47:37:B2:B6:FB:9D:A2:5D:80:57:9F
            X509v3 Authority Key Identifier:
                keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:82:3c:a0:a7:1b:6c:16:5c:18:54:67:9d:16:43:58:87:2b:
         23:05:71:d5:71:23:fd:96:75:3e:a3:57:7e:b5:70:9e:b3:1d:
         5d:c6:16:09:2d:c0:d7:6d:b5:49:3f:03:eb:38:0a:bf:03:eb:
         07:9b:96:62:3d:81:11:14:05:44:03:81:37:e4:92:3b:d3:07:
         1c:04:b6:d9:80:96:7e:1a:62:74:94:83:15:77:98:fa:62:76:
         b4:89:c8:26:05:38:b4:8d:6c:e8:57:78:3d:36:1c:52:1e:fb:
         f0:87:59:fb:ac:81:17:ed:35:f5:de:66:ec:b5:b6:f0:bd:9d:
         ce:51:9f:a9:0b:b1:4b:c5:2e:93:da:bf:95:ee:50:13:83:c6:
         be:8f:ca:d5:e9:78:26:12:03:8a:89:6f:0a:f0:75:b4:59:36:
         d0:6c:34:48:4e:8b:0a:48:94:2d:b9:b3:91:f0:47:d9:30:70:
         99:12:31:75:ee:f4:a2:5b:46:46:45:6b:24:b8:75:c6:5d:53:
         36:49:3e:12:ab:b1:78:6c:3f:cb:94:31:02:98:54:6b:c7:c5:
         71:af:78:ad:0f:31:c9:fa:49:ff:dd:c8:31:98:07:6a:ec:ad:
         63:ee:c7:b1:74:37:72:9a:77:9a:42:32:fd:fc:d2:b9:fb:b4:
         e1:ac:71:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:34:43 2026 by rpki-client