Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.mft
File:                     dnvDZOY8eqV5U_s-SlF447Q8H28.mft (raw, json)
Hash identifier:          YKxtuDSJWaIuRqVgYEUNrFOHINo84T8SDTpHX/3WyhI=
Subject key identifier:   69:49:8F:F1:94:37:29:A0:FC:33:4D:CE:9C:B2:15:F1:08:34:3A:9C
Authority key identifier: 76:7B:C3:64:E6:3C:7A:A5:79:53:FB:3E:4A:51:78:E3:B4:3C:1F:6F
Certificate issuer:       /CN=767bc364e63c7aa57953fb3e4a5178e3b43c1f6f
Certificate serial:       01A0D68300DD9F4F28E7B48B58E54B29FFEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dnvDZOY8eqV5U_s-SlF447Q8H28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.mft
Manifest number:          0189
Signing time:             Fri 25 Sep 2026 03:01:44 +0000
Manifest this update:     Fri 25 Sep 2026 03:01:44 +0000
Manifest next update:     Sat 26 Sep 2026 03:01:44 +0000
Files and hashes:         1: 5AE7_O4mI7-H6Wv-ZhNYnselqaU.roa (hash: ZU8q9mKfymGsv/1D2pNr1VbfbTiFUrL0MjqiBD7DHmM=)
                          2: dnvDZOY8eqV5U_s-SlF447Q8H28.crl (hash: 9Oo8W7ctPdGrH6oIJd66m+FRakT9jEk2GLq1MO8XXZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dnvDZOY8eqV5U_s-SlF447Q8H28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 03:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:83:00:dd:9f:4f:28:e7:b4:8b:58:e5:4b:29:ff:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767bc364e63c7aa57953fb3e4a5178e3b43c1f6f
        Validity
            Not Before: Sep 25 03:01:44 2026 GMT
            Not After : Sep 26 03:01:44 2026 GMT
        Subject: CN=69498ff1943729a0fc334dce9cb215f108343a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5f:98:bc:47:30:f0:a2:ab:44:0a:1a:b0:b1:
                    95:f7:89:2c:ea:73:e1:da:d9:29:6f:4b:5d:68:96:
                    4d:27:92:22:9d:79:5c:1c:ec:8c:6b:6c:af:fd:87:
                    ff:f0:d5:58:89:5b:73:e2:b8:96:37:ee:c9:94:f4:
                    ea:c4:d6:0f:3d:dd:fe:86:51:0f:35:34:99:be:71:
                    63:d2:e9:47:e6:4a:58:a3:85:21:7f:57:7d:71:4f:
                    d4:a2:aa:1b:be:37:45:20:4c:3a:cd:c0:72:cd:ba:
                    c6:9f:d5:b9:a7:38:b0:3a:54:9c:cf:2c:7e:58:df:
                    96:86:49:56:a1:2a:5b:67:92:61:f5:b5:c3:0b:86:
                    ae:62:fb:11:28:29:d7:1e:49:d6:09:90:16:1a:48:
                    2c:ed:63:eb:19:c6:0a:54:a4:93:84:31:5e:0a:36:
                    40:ea:bc:83:73:73:83:16:59:04:23:16:85:1a:a5:
                    7f:0e:2d:fe:b5:eb:b7:76:53:e0:15:25:c9:6d:6d:
                    70:b8:aa:c8:14:f6:eb:f4:e5:7f:57:81:a7:72:ce:
                    b5:2d:19:e9:99:44:3b:0c:e8:72:67:f0:3a:6e:84:
                    02:76:02:0c:50:5c:ad:73:a1:6e:01:e6:8c:49:e2:
                    de:e5:f9:19:cc:18:0f:96:0b:7b:2d:48:14:fa:e6:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:49:8F:F1:94:37:29:A0:FC:33:4D:CE:9C:B2:15:F1:08:34:3A:9C
            X509v3 Authority Key Identifier:
                keyid:76:7B:C3:64:E6:3C:7A:A5:79:53:FB:3E:4A:51:78:E3:B4:3C:1F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnvDZOY8eqV5U_s-SlF447Q8H28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:01:d6:e9:a0:73:f0:53:56:40:e8:f1:fa:56:4f:0e:ea:ad:
         7b:7a:77:c4:7a:f4:f8:f9:61:68:e8:1d:5a:27:cb:6a:17:93:
         34:58:be:e7:a7:00:6f:c2:67:a6:c9:17:c4:5b:bc:d0:b3:f2:
         0b:ae:66:c4:ca:d8:97:b9:16:0b:63:12:86:d7:3e:ca:82:73:
         09:2b:e4:b6:77:34:d0:1a:85:3a:a2:af:44:1d:62:f8:06:0f:
         41:b7:2e:5c:1f:dd:2f:6c:37:d5:39:27:d4:20:69:de:eb:8c:
         d9:4b:fc:c5:91:a5:28:2f:15:13:03:47:a5:81:5b:2f:11:51:
         24:d8:b2:6c:22:15:c1:d8:f9:f6:f1:86:6a:90:10:b5:ca:49:
         d2:40:48:bb:eb:c6:3f:a9:01:dd:aa:6e:46:2e:4e:a2:11:18:
         a1:e9:7c:09:40:22:89:5b:d0:79:28:d9:8f:85:8d:1a:21:8f:
         f0:0a:ee:08:3c:5e:6c:c4:2f:14:97:72:ab:01:43:8f:df:91:
         87:ac:33:9d:7a:fd:6e:f2:77:d4:b5:44:f6:61:e9:a0:2f:ac:
         4e:b7:db:c4:30:60:91:ad:f3:e0:f7:a0:61:0c:21:64:77:c3:
         69:37:22:70:9e:88:0e:3e:1a:c8:6b:2f:fb:82:ce:92:3a:a3:
         b1:3b:da:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:12:47 2026 by rpki-client