Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File:                     DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier:          jh0+9NwjLY/n63f3omUOnpXiTgqT+wmlFB4xM19qcC4=
Subject key identifier:   08:91:29:5B:46:37:79:FE:6A:F7:88:3E:8D:B5:2F:26:CA:D1:E5:73
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer:       /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial:       01A0D1244FDB5C0951E9A8248399C3CB07F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number:          1A6C
Signing time:             Thu 24 Sep 2026 02:00:12 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:12 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:12 +0000
Files and hashes:         1: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: pSgzFlDZo2gwPZW8zwUchHSuKYM/LS4bQ4DW1JFUFxI=)
                          2: GBiCQBi8m4-enxXZqw25PlMWPLQ.roa (hash: gTvW1OlNiz8hjMHgTUjrVGo7tVYa1kNXNiD2T8nmxFU=)
                          3: _j5362r7qv_9JgdkjeZ2Dr4Qsuk.roa (hash: XaswjrTxz0kpjxbDPMGjQHSDzCAPii9RYq3exV8GmFk=)
                          4: aezv-rxn8SkJT7jOMF8hl_lwOeo.roa (hash: jv2UN7Qe0W1KSoZ0p/rqmZ5wT1beFaF7g2jYyXMocTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:4f:db:5c:09:51:e9:a8:24:83:99:c3:cb:07:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
        Validity
            Not Before: Sep 24 02:00:12 2026 GMT
            Not After : Sep 25 02:00:12 2026 GMT
        Subject: CN=0891295b463779fe6af7883e8db52f26cad1e573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ee:29:1b:d8:97:2e:e6:c0:68:68:cc:cb:b4:
                    69:54:33:bf:dc:f3:23:13:af:c8:58:08:45:32:4e:
                    73:19:78:b6:bc:5d:06:ab:53:d2:63:81:7a:4b:de:
                    a3:40:e0:6b:8d:a8:22:d7:8e:4b:84:f8:e4:f3:8e:
                    30:8f:46:e2:35:68:e9:57:9a:46:f3:75:3d:4d:ec:
                    5a:e4:a8:ba:80:b5:a4:3e:12:d3:d9:8a:67:e9:86:
                    23:e0:c6:69:a2:55:db:c5:e4:a2:b4:7f:31:6c:9f:
                    55:c8:b1:59:53:dc:77:5d:b4:b8:a4:34:d5:cd:8c:
                    1d:0f:9a:1e:9d:f0:0c:1c:e8:4e:38:98:32:b5:e3:
                    5d:99:ea:8c:c3:00:91:ed:5e:5f:59:f3:25:27:14:
                    a9:79:17:4a:e0:5f:6c:6d:23:7f:3e:11:81:d8:ad:
                    5f:51:a5:47:cb:ff:3d:0c:b9:1f:b5:4b:e4:0b:11:
                    94:be:fe:d2:30:4d:b8:2b:ea:23:28:a2:36:fa:f4:
                    7c:46:ed:b5:18:e0:6d:48:aa:ab:8b:bf:62:98:82:
                    a5:d5:8e:69:0c:50:d2:97:5e:74:af:28:07:aa:cc:
                    ed:d9:82:2f:fd:8c:50:55:cf:a2:0a:d5:6e:6c:e1:
                    9e:89:f7:8e:2a:bd:7c:aa:97:cc:70:23:b6:bc:b6:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:91:29:5B:46:37:79:FE:6A:F7:88:3E:8D:B5:2F:26:CA:D1:E5:73
            X509v3 Authority Key Identifier:
                keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:92:a3:3e:3a:37:67:e8:e7:97:5a:80:0e:e6:1e:b0:31:c8:
         98:9a:bf:44:7c:89:97:6c:84:6e:13:6a:68:70:62:cc:c5:9d:
         93:e4:56:fe:d1:12:4a:97:45:24:1c:34:1e:d7:de:b3:85:9e:
         f9:c6:67:fe:45:d2:c4:b7:53:57:19:7e:1e:5c:a0:73:80:7a:
         10:6e:fb:2b:1e:e5:91:e9:25:b1:66:0e:33:c8:a8:74:f8:d5:
         40:de:af:b9:53:67:b2:a4:c7:0d:41:cb:9b:da:a9:1e:ab:3f:
         e1:43:72:e2:ec:71:e9:71:35:1c:1d:d4:f6:c4:e4:9d:54:d0:
         08:61:7f:33:50:95:fc:bb:e9:94:69:7e:05:21:bc:ee:c2:1f:
         9e:50:32:6c:bb:a3:85:c8:51:c4:b1:60:c8:e5:38:dd:ed:fc:
         ef:b9:04:64:8c:b2:ae:0d:90:68:18:90:c9:25:83:db:eb:55:
         d0:e4:d6:18:bf:c9:48:9d:3f:d9:c5:09:47:dc:04:5c:10:29:
         87:b5:c4:4f:e6:ab:7e:c2:2b:e4:90:9a:c7:dc:c5:9d:21:b3:
         68:4a:2f:2a:cf:be:ad:81:69:cb:1e:2a:0e:ed:62:f3:20:72:
         19:9d:cf:2b:43:07:9a:3f:58:b0:9c:90:e9:ba:b5:90:94:18:
         e4:b8:a3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:40:50 2026 by rpki-client