Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
File:                     DVNi1c7cImPJBzUDwu6RT5PzHvI.mft (raw, json)
Hash identifier:          FMooBJugXo7qNIhyI1yJd/BiZwIQvOxIMg1A5stxJlw=
Subject key identifier:   F5:4E:93:3F:5A:5A:8C:2E:02:42:6D:EC:7B:7D:E6:B1:32:2B:8C:C4
Authority key identifier: 0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
Certificate issuer:       /CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Certificate serial:       01A1DC81F44FA595F67B70C31CFB7A1B7ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
Manifest number:          0170
Signing time:             Sun 15 Nov 2026 00:01:06 +0000
Manifest this update:     Sun 15 Nov 2026 00:01:06 +0000
Manifest next update:     Mon 16 Nov 2026 00:01:06 +0000
Files and hashes:         1: 3vLigIAmr0enEPBVbFd-Efg6QLM.roa (hash: z47OAtBU59ox9Fv71R6UjtJxoV/Msptr2wMI8Rk4Vlc=)
                          2: DVNi1c7cImPJBzUDwu6RT5PzHvI.crl (hash: d2jwIHWNYxIkDb560kqOAqzkDd3XWGKlfJkrGAY6eb8=)
                          3: w82F-_2KUo6780OReWbrcXFgOCI.roa (hash: 2sFKVV9OfbJAOCqpzaEbs0k2EluCBWR6KS26tdOE0SQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:81:f4:4f:a5:95:f6:7b:70:c3:1c:fb:7a:1b:7a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
        Validity
            Not Before: Nov 15 00:01:06 2026 GMT
            Not After : Nov 16 00:01:06 2026 GMT
        Subject: CN=f54e933f5a5a8c2e02426dec7b7de6b1322b8cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:99:84:43:c6:24:ad:c2:1d:b1:d0:28:d5:7b:
                    a9:9e:4c:3e:3e:eb:18:6d:70:6d:c4:cf:bd:1a:21:
                    02:6d:b4:a4:bd:92:a0:1c:79:c2:38:0e:30:1f:31:
                    9a:3b:8f:9b:f8:90:a9:4b:8a:6d:26:5c:09:da:d6:
                    c2:94:50:a4:37:18:40:e8:12:86:ba:66:23:40:47:
                    db:4f:a8:39:d3:d4:13:19:b4:be:19:8f:ec:e2:36:
                    a5:e9:66:38:7c:24:a4:50:67:82:4a:a8:e2:1d:f7:
                    08:59:81:b2:af:f7:83:b7:3d:cf:74:42:d8:94:3c:
                    8a:be:64:25:97:4d:98:21:a8:93:34:8a:74:f4:a8:
                    e3:18:5d:9d:ea:42:26:93:0d:c6:76:6b:17:64:67:
                    4e:bc:40:43:91:60:0e:2c:80:8f:39:c2:e1:f7:41:
                    7b:fa:87:eb:ee:6d:9d:b2:31:ff:2c:08:2f:ac:ba:
                    ec:83:e0:86:d1:37:be:3f:6b:2b:bd:ec:46:76:3c:
                    39:c6:fb:f1:9e:95:2d:c7:02:69:93:8a:48:4f:c1:
                    5b:47:57:26:b6:90:4c:cd:10:56:45:ba:2b:16:7c:
                    6c:2f:6a:40:6e:47:4b:cc:23:99:70:da:30:d5:8f:
                    ac:d6:15:eb:e3:3b:92:0a:c3:ca:1d:3b:8e:2a:7d:
                    97:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4E:93:3F:5A:5A:8C:2E:02:42:6D:EC:7B:7D:E6:B1:32:2B:8C:C4
            X509v3 Authority Key Identifier:
                keyid:0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:2e:18:71:08:81:a6:94:07:a6:34:c9:cb:1b:7c:36:a3:a8:
         d7:9f:b2:f5:3a:e9:33:34:0a:6f:56:b4:4d:e1:a1:3d:b7:8e:
         4e:94:99:7f:1c:97:32:c6:6a:f7:a3:7e:57:48:b7:b7:df:16:
         16:fd:61:e6:64:a3:7d:dd:2a:c7:19:cf:e8:33:19:fa:fc:19:
         f3:9e:e3:96:b6:45:d9:28:5a:51:6e:07:59:be:e4:06:d6:42:
         10:2e:64:1b:39:00:0c:88:18:23:ac:68:e3:46:36:b8:35:4e:
         28:a5:51:fa:b9:ca:82:47:0d:78:3b:a8:b1:fb:8b:cc:ac:8f:
         7d:88:ad:7d:8b:11:6c:8a:8e:73:25:d0:fe:32:7d:95:e0:1d:
         b5:85:55:e2:e9:96:78:b2:71:72:bc:db:85:19:6c:28:90:37:
         58:60:6c:39:39:77:13:db:77:83:63:3f:2b:69:cc:5c:ce:0c:
         42:19:6c:7b:51:3d:53:8f:8c:ec:db:03:bc:d3:9e:f9:02:fe:
         be:b6:46:01:da:ce:60:1a:bf:93:48:bf:a6:64:ca:e6:c0:7d:
         bb:4c:2a:1a:5c:d3:bd:e2:7a:00:b3:72:13:df:a2:44:f0:75:
         3d:7e:ff:f8:7f:3e:5b:28:ee:2e:a8:fd:0f:6d:7d:57:81:fe:
         07:2c:63:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcgfRPpZX2e3DDHPt6G3rMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNTM2MmQ1Y2VkYzIyNjNjOTA3MzUwM2MyZWU5MTRmOTNm
MzFlZjIwHhcNMjYxMTE1MDAwMTA2WhcNMjYxMTE2MDAwMTA2WjAzMTEwLwYDVQQD
EyhmNTRlOTMzZjVhNWE4YzJlMDI0MjZkZWM3YjdkZTZiMTMyMmI4Y2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pmEQ8YkrcIdsdAo1Xupnkw+PusY
bXBtxM+9GiECbbSkvZKgHHnCOA4wHzGaO4+b+JCpS4ptJlwJ2tbClFCkNxhA6BKG
umYjQEfbT6g509QTGbS+GY/s4jal6WY4fCSkUGeCSqjiHfcIWYGyr/eDtz3PdELY
lDyKvmQll02YIaiTNIp09KjjGF2d6kImkw3GdmsXZGdOvEBDkWAOLICPOcLh90F7
+ofr7m2dsjH/LAgvrLrsg+CG0Te+P2srvexGdjw5xvvxnpUtxwJpk4pIT8FbR1cm
tpBMzRBWRborFnxsL2pAbkdLzCOZcNow1Y+s1hXr4zuSCsPKHTuOKn2XuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPVOkz9aWowuAkJt7Ht95rEyK4zEMB8GA1UdIwQY
MBaAFA1TYtXO3CJjyQc1A8LukU+T8x7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFZOaTFjN2NJbVBKQnpVRHd1NlJUNVB6SHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMt
NDE5NmIwZWFjZDI3LzEvRFZOaTFjN2NJbVBKQnpVRHd1NlJUNVB6SHZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iMzE3MzEtNWNkMy00NDVlLThjYjMtNDE5NmIwZWFjZDI3
LzEvRFZOaTFjN2NJbVBKQnpVRHd1NlJUNVB6SHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC4YcQiB
ppQHpjTJyxt8NqOo15+y9TrpMzQKb1a0TeGhPbeOTpSZfxyXMsZq96N+V0i3t98W
Fv1h5mSjfd0qxxnP6DMZ+vwZ857jlrZF2ShaUW4HWb7kBtZCEC5kGzkADIgYI6xo
40Y2uDVOKKVR+rnKgkcNeDuosfuLzKyPfYitfYsRbIqOcyXQ/jJ9leAdtYVV4umW
eLJxcrzbhRlsKJA3WGBsOTl3E9t3g2M/K2nMXM4MQhlse1E9U4+M7NsDvNOe+QL+
vrZGAdrOYBq/k0i/pmTK5sB9u0wqGlzTveJ6ALNyE9+iRPB1PX7/+H8+WyjuLqj9
D219V4H+Byxj3w==
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:32:16 2026 by rpki-client