Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
File:                     Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft (raw, json)
Hash identifier:          NvRmpJ6owZOHXZxfrjVw4d2moY+HtDibkJwXJzhTDEA=
Subject key identifier:   87:B2:EF:7E:DA:21:9E:79:A3:5E:37:36:26:CA:BF:76:61:9D:1E:84
Authority key identifier: 0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D
Certificate issuer:       /CN=0ecbefe20e18866b8a490c95ee45992643bed69d
Certificate serial:       01A11297DD6CDE634D530412E8FD05B63FF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
Manifest number:          193D
Signing time:             Tue 06 Oct 2026 19:01:44 +0000
Manifest this update:     Tue 06 Oct 2026 19:01:44 +0000
Manifest next update:     Wed 07 Oct 2026 19:01:44 +0000
Files and hashes:         1: Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl (hash: bb9Co/AqOFE/hMmPKawxDRuADhsM/BhxGH94vjy3NW8=)
                          2: vOLYbuZI2HiAQAMspaYJozGTYd4.roa (hash: 2GBF+iOAjgmkpYWuKiOs1PlAzGgzPUynmOp5R9AhrOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:97:dd:6c:de:63:4d:53:04:12:e8:fd:05:b6:3f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ecbefe20e18866b8a490c95ee45992643bed69d
        Validity
            Not Before: Oct  6 19:01:44 2026 GMT
            Not After : Oct  7 19:01:44 2026 GMT
        Subject: CN=87b2ef7eda219e79a35e373626cabf76619d1e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3d:27:12:e4:53:79:d0:39:1b:d4:8d:0a:fc:
                    b7:8b:78:39:96:84:d7:16:fe:a2:5e:e3:8a:cd:e0:
                    fe:ca:f2:1d:5e:93:cf:d3:13:78:3f:b8:34:ce:b8:
                    53:4a:19:20:37:ef:aa:30:02:b7:10:ca:3a:07:ae:
                    f0:75:62:0e:a7:dd:cf:db:70:0d:1e:6c:20:97:fa:
                    4b:8a:90:c7:92:13:d5:61:a1:ba:0d:09:55:33:dd:
                    34:b8:51:19:06:c9:e3:e8:8b:6e:a7:3e:76:60:d7:
                    f9:32:09:37:32:d3:0e:4a:e7:4d:81:8c:5d:43:67:
                    55:2b:23:43:05:98:c7:98:38:f2:5c:f3:75:de:2e:
                    96:fd:11:d6:34:c5:7b:6a:6a:53:47:9b:bc:19:57:
                    9b:b6:93:93:81:67:ae:6f:a1:4f:26:12:6c:e2:5b:
                    6b:07:ff:8b:2e:cd:63:8c:08:08:a1:69:e7:79:6a:
                    2b:b0:fe:60:a0:7e:32:0a:02:3f:f3:e1:7a:07:58:
                    9f:07:c3:7e:88:76:30:63:66:e4:49:9d:4e:f5:58:
                    37:ae:76:07:cd:6a:62:ff:d0:ee:79:4f:12:a5:93:
                    b0:77:54:bd:86:73:6d:39:74:53:ae:69:7b:e9:73:
                    2b:a8:bc:c4:94:15:ed:9f:d1:c9:bd:78:ab:6c:20:
                    d5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B2:EF:7E:DA:21:9E:79:A3:5E:37:36:26:CA:BF:76:61:9D:1E:84
            X509v3 Authority Key Identifier:
                keyid:0E:CB:EF:E2:0E:18:86:6B:8A:49:0C:95:EE:45:99:26:43:BE:D6:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c755cc-5f90-47f5-adec-905f24c258ee/1/Dsvv4g4YhmuKSQyV7kWZJkO-1p0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:df:6c:86:2f:1e:2b:96:33:cd:d2:56:f3:ba:29:dd:07:f4:
         33:87:c1:5b:75:db:cd:b0:00:95:4a:9e:19:80:fd:e7:6c:d1:
         66:f6:8f:43:51:8a:8d:cd:b4:85:aa:fc:f1:79:f6:d7:89:cc:
         61:50:15:53:cc:b0:aa:f9:1a:30:56:17:80:2d:80:56:47:10:
         49:4a:ef:53:b7:dc:e8:22:64:ed:c0:ee:29:72:47:33:63:27:
         ed:f9:59:3c:07:08:4c:8a:c7:4e:43:13:13:43:e2:82:8f:c3:
         cc:d8:b2:5c:c7:5f:5d:28:4a:93:bf:1b:cf:02:d2:17:0a:87:
         62:a7:06:90:4e:ec:57:23:64:26:77:58:de:1d:e9:bf:04:f8:
         11:17:91:44:11:62:37:9f:16:6b:31:14:ed:78:a5:1a:01:24:
         0c:02:4d:54:0d:e3:cf:91:6b:5a:55:fe:bb:ce:3c:ad:40:57:
         f0:fa:23:37:f0:a0:26:bf:ab:b9:73:76:cd:60:11:77:d7:66:
         ca:72:de:7d:de:91:7f:1e:9d:d3:4a:48:cc:e4:5f:7a:30:43:
         51:95:26:2c:2c:fb:d1:31:65:e8:dc:a1:6f:b1:d1:6b:d5:a3:
         5b:84:cc:9d:0b:66:83:c0:1c:93:c6:96:ac:d7:7e:7e:a4:a0:
         71:0f:83:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 22:59:19 2026 by rpki-client