Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File:                     dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier:          8NKy/vE1wN8ExHM4Vq1KAvOfXh/KQKAd+iVuF9QTzqc=
Subject key identifier:   ED:86:F5:86:8F:11:F3:7B:0A:E3:96:4E:4C:49:23:DB:14:31:13:BC
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer:       /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial:       019F90FF7354246B5F5B4D88E57B42AE16ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number:          14A2
Signing time:             Thu 23 Jul 2026 22:01:28 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:28 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:28 +0000
Files and hashes:         1: B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa (hash: nyiUF3Zt9sMp6+mzeEZ8PMtjO/iACI+KfmNy9BotXDk=)
                          2: D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa (hash: dH6am4VhkjdQhWRQqbXQ4D/HbErjXar5HVgXeANi9W0=)
                          3: Lp0vHH3sV5CmRox_CW0AyUEO49A.roa (hash: HnRMr5r2HkpjEYviPbeXFZfwzUunRvvI+wgZvCnFlCc=)
                          4: c6nKpma73pYWxvMGKppaadDfEFw.roa (hash: vhO0PPLdQXMMpfgBSaG37tdr8r6MbA4mP7J/LJzhZao=)
                          5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: S7otPgkaPisoMPNIs5+g1uxUkvd7ka7D74WEB0a03ro=)
                          6: jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa (hash: K41n6g6IzXx6vx3vFplymreUJX4uIZoX2K6TNqcNUyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:73:54:24:6b:5f:5b:4d:88:e5:7b:42:ae:16:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764928a97be955377013d382c62940e950dd212b
        Validity
            Not Before: Jul 23 22:01:28 2026 GMT
            Not After : Jul 24 22:01:28 2026 GMT
        Subject: CN=ed86f5868f11f37b0ae3964e4c4923db143113bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4a:3b:8f:a0:3a:05:0f:57:00:d2:e1:96:e1:
                    4c:f1:b5:95:a9:37:c8:95:3e:95:c6:95:94:8f:17:
                    4f:b4:aa:7d:66:05:4c:f0:e2:fc:3a:b0:ff:01:46:
                    61:d1:c9:90:33:c3:76:55:a4:e7:fb:80:55:16:8d:
                    f0:ea:e9:47:a2:b8:9e:23:9a:ac:7b:8a:55:ec:ea:
                    3c:4a:86:b1:3e:eb:13:4c:e3:fa:ca:aa:08:a6:1b:
                    db:cc:b4:0b:c4:49:e0:96:18:3f:23:f2:1f:6e:cb:
                    e6:0a:38:ff:79:05:d9:0c:39:21:c6:db:da:90:a7:
                    16:9c:13:47:06:be:3a:2a:54:23:56:38:4d:45:0b:
                    03:3b:37:bc:73:be:8a:ee:bb:62:ad:25:99:9b:29:
                    2e:56:bd:5a:70:ac:6a:2a:37:0e:6b:43:0b:ec:a5:
                    e5:d7:e6:e7:a8:64:04:e5:f8:be:a1:b7:58:54:0c:
                    55:ea:ce:2b:1a:9f:f8:da:cb:67:48:35:f9:14:c6:
                    2c:f1:55:0c:88:de:ff:8b:d7:67:d5:65:3a:2f:46:
                    01:13:1d:c6:97:97:3b:c2:42:2a:fc:82:8c:d1:36:
                    ec:d1:39:03:fd:db:33:d2:29:67:4f:29:13:23:ff:
                    a2:c5:80:3b:c4:8e:ca:9d:26:1c:0d:aa:40:b1:63:
                    05:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:86:F5:86:8F:11:F3:7B:0A:E3:96:4E:4C:49:23:DB:14:31:13:BC
            X509v3 Authority Key Identifier:
                keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:74:e8:66:6f:ed:45:c9:58:34:a0:da:27:48:6b:e4:71:34:
         31:e2:b5:17:76:1c:79:ed:d1:8c:49:53:02:3f:fd:9b:03:ff:
         fe:3c:b0:db:55:5f:de:df:5a:a8:5d:eb:5d:61:9b:93:d0:4a:
         7a:96:49:d1:23:32:41:7e:32:76:c4:6d:8a:d0:4c:04:da:04:
         1e:8b:c2:b3:5e:14:75:28:b0:d5:e3:73:b9:78:a0:9d:89:6a:
         79:0e:dc:a3:bb:46:58:59:d2:c7:73:87:7c:51:1f:8d:d1:00:
         03:d7:94:62:d0:ed:37:ac:29:5f:2d:70:07:65:ce:85:67:78:
         a8:ff:e8:52:97:d6:28:85:26:77:75:7e:66:05:5c:af:b8:12:
         18:ff:ca:d3:af:ca:0c:03:67:09:93:19:9d:ce:ce:19:72:3d:
         69:f5:4f:64:76:bc:dd:72:0f:25:d6:23:7b:51:2e:65:e8:e3:
         6a:9f:26:65:5e:fe:20:1b:59:4d:57:b7:da:15:41:4f:76:6c:
         cd:34:34:34:17:23:14:70:57:a3:0a:f1:59:0d:70:d2:6f:62:
         30:45:63:13:ee:68:62:65:85:bd:eb:d2:77:5f:dd:01:fe:08:
         6d:fc:d1:31:7a:3c:98:6c:87:57:51:f7:88:63:d5:52:1c:ac:
         a5:a7:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:44:59 2026 by rpki-client