Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
File:                     DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json)
Hash identifier:          afoJLnh1/NEJ71jEun5kcPsq0CwGuMomCV7AeGoDx4c=
Subject key identifier:   EB:7C:84:4E:87:3C:B0:AE:41:70:54:8C:34:B5:FF:89:B5:C7:27:34
Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
Certificate issuer:       /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Certificate serial:       01A13590CDDCA147C162F002B902ACB876E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
Manifest number:          17A4
Signing time:             Tue 13 Oct 2026 14:00:44 +0000
Manifest this update:     Tue 13 Oct 2026 14:00:44 +0000
Manifest next update:     Wed 14 Oct 2026 14:00:44 +0000
Files and hashes:         1: C-78xmWgZqJn-98KCnx2cK8W2iw.roa (hash: kvyCi4+DSBTeslNasxxFTjOtFWjXLr4uWpv3Fg7ByZw=)
                          2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: CE44Ar8jTW02jo11oFqp/ethjwVANkC/fpl0VZZqBwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:90:cd:dc:a1:47:c1:62:f0:02:b9:02:ac:b8:76:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
        Validity
            Not Before: Oct 13 14:00:44 2026 GMT
            Not After : Oct 14 14:00:44 2026 GMT
        Subject: CN=eb7c844e873cb0ae4170548c34b5ff89b5c72734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:6a:dc:9c:57:49:87:eb:71:30:44:94:7a:
                    e4:48:f0:a7:c4:bc:00:ec:2a:f4:9e:f3:11:61:e4:
                    98:eb:a0:ee:b4:3f:49:c9:1c:4a:8b:52:6b:5d:78:
                    87:fe:a5:00:43:35:22:cb:3e:4d:83:22:de:a0:72:
                    7b:f6:ec:a8:3d:a3:e2:a8:24:5a:db:63:f4:b1:97:
                    4a:92:56:d0:30:a1:89:ca:d8:34:8d:03:b1:02:b9:
                    f5:b9:97:64:7f:95:9e:79:0a:ce:7b:a3:72:89:2f:
                    37:7b:df:30:95:f9:ac:af:36:2c:33:89:f4:2e:a0:
                    15:03:89:56:c6:05:12:4c:22:90:f4:79:1a:b2:29:
                    39:0e:8c:78:9c:83:69:fa:de:62:7e:0f:37:db:10:
                    3b:fa:70:49:75:d5:42:99:e2:98:85:3f:c3:56:b5:
                    43:bf:d8:e6:3f:30:9c:ec:ad:7e:bb:ad:84:77:9a:
                    da:06:29:96:8a:5d:36:57:fc:6c:99:37:a0:e5:c9:
                    d3:70:dc:16:cb:e9:a5:8d:2f:16:63:17:ef:23:c0:
                    88:a4:66:48:0d:3c:c6:ca:b2:86:08:a8:80:7a:0c:
                    c5:a0:2e:75:4c:4e:85:b5:ff:7d:e3:6f:70:00:22:
                    42:6f:b3:c4:a2:7a:fc:fe:0f:59:22:00:c4:46:98:
                    e2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7C:84:4E:87:3C:B0:AE:41:70:54:8C:34:B5:FF:89:B5:C7:27:34
            X509v3 Authority Key Identifier:
                keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bc:43:17:1d:ee:f9:50:b6:f4:78:5c:4a:53:4d:aa:d2:d9:
         92:ce:63:ac:3b:91:76:5f:7b:91:d4:e7:8e:4f:d2:e5:62:ff:
         77:5a:4f:d6:aa:b5:32:c5:40:ae:f8:bc:6f:8b:ff:4e:77:09:
         12:19:14:33:3c:bf:62:95:4c:8f:00:14:35:b6:a3:1a:48:7c:
         1b:43:6b:4a:ae:87:55:09:c5:7a:41:b6:41:63:0d:32:09:41:
         38:cf:ed:fc:6b:ee:c8:1d:77:a7:1d:93:95:f3:19:16:7b:8e:
         b4:2f:27:c7:0a:5f:25:50:09:d4:b9:b7:78:04:f2:8a:2b:0e:
         89:7d:5d:ae:1f:e8:78:57:69:c3:42:6b:a3:5f:1d:0d:1a:e6:
         e2:fa:f9:f0:bc:19:21:21:b9:de:88:33:3f:9b:a9:b3:78:05:
         19:99:15:c4:6a:95:68:9e:68:96:86:c8:3d:ec:8b:34:56:85:
         fb:a6:25:d1:ab:6e:9c:12:91:0b:76:15:67:30:28:03:71:50:
         ae:c0:67:0d:43:d8:c0:eb:bd:d5:22:31:90:8b:0c:9a:79:dc:
         85:d9:2d:62:b1:9e:ef:03:98:67:06:c3:7a:76:17:e5:2f:9a:
         ac:ef:8a:3a:05:e7:bf:d4:59:f0:e2:2d:04:6b:26:a5:e6:71:
         f6:4b:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:45:10 2026 by rpki-client