Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
File:                     0dyvv2n_2nKwgna9sRGTVkrtj5c.mft (raw, json)
Hash identifier:          gJtX8FLdWeWXPythnY+j0l2C+UzNc1MwtzkoY7FKCoY=
Subject key identifier:   68:14:B0:CB:D2:C7:D9:46:F6:75:E8:AE:EB:7D:9D:5E:67:B2:7B:AA
Authority key identifier: D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97
Certificate issuer:       /CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
Certificate serial:       01A1DFF17168183E53689DFC162EB99877AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
Manifest number:          1AF5
Signing time:             Sun 15 Nov 2026 16:01:44 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:44 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:44 +0000
Files and hashes:         1: 0dyvv2n_2nKwgna9sRGTVkrtj5c.crl (hash: 8AGRsFe4fUCXe6wYA2QJK5+wbG572lojmcWy6eI2fxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f1:71:68:18:3e:53:68:9d:fc:16:2e:b9:98:77:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1dcafbf69ffda72b08276bdb11193564aed8f97
        Validity
            Not Before: Nov 15 16:01:44 2026 GMT
            Not After : Nov 16 16:01:44 2026 GMT
        Subject: CN=6814b0cbd2c7d946f675e8aeeb7d9d5e67b27baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:41:f4:a9:e8:11:58:a7:68:0e:04:b9:6c:8a:
                    89:3f:56:e7:ab:35:31:5d:79:77:34:59:74:ac:04:
                    4f:b2:e5:91:dc:4a:9a:c9:e8:25:ad:b9:00:da:ec:
                    f0:61:d8:1e:04:2c:63:22:84:94:93:a5:39:c8:1f:
                    1c:d8:32:f9:ad:c9:f4:28:a1:6e:c1:ac:71:f6:6b:
                    19:9a:b5:d6:08:3e:57:26:c9:91:ac:19:c3:e5:5e:
                    64:f8:9e:ff:f6:2b:36:54:6a:6b:c5:37:41:fc:c0:
                    5c:aa:9c:d0:32:c2:ad:66:e6:50:dc:3a:90:68:c1:
                    00:20:30:d5:16:43:19:d7:8d:9b:09:00:69:6b:cb:
                    0b:c3:fe:53:c0:fc:f8:bc:4d:a9:76:77:01:82:f8:
                    06:74:22:53:f5:fa:3f:8f:20:e5:e8:5b:69:36:bb:
                    ee:f8:70:8e:b5:ce:68:0b:5a:ed:5d:1c:da:a4:ca:
                    0e:c3:28:ff:91:b5:11:10:e9:f0:bc:4e:dd:4d:ea:
                    1b:db:b5:87:46:c8:00:b3:91:a6:5b:61:8a:8b:d0:
                    d4:6a:02:de:88:10:71:ce:3e:a0:9b:22:99:e7:4f:
                    20:f2:c0:d4:5d:59:63:e6:ce:9b:3a:df:dd:21:f3:
                    7e:18:6a:b4:57:0c:96:bb:05:5e:a6:68:35:b4:0c:
                    ae:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:14:B0:CB:D2:C7:D9:46:F6:75:E8:AE:EB:7D:9D:5E:67:B2:7B:AA
            X509v3 Authority Key Identifier:
                keyid:D1:DC:AF:BF:69:FF:DA:72:B0:82:76:BD:B1:11:93:56:4A:ED:8F:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0dyvv2n_2nKwgna9sRGTVkrtj5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/6e697e-0858-46f5-88a5-5e6c8d473a59/1/0dyvv2n_2nKwgna9sRGTVkrtj5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:50:a7:e0:5b:36:a8:4b:40:25:cb:c2:03:b2:e1:f7:ca:6f:
         9b:55:02:93:00:8f:90:a0:a4:d9:5b:a3:d7:df:66:97:b5:82:
         59:db:30:f1:31:d7:20:a6:c4:42:f1:84:16:d3:fb:d6:2c:34:
         44:bf:d8:dc:55:8b:2d:e2:45:e2:59:31:e2:57:e6:82:a3:7c:
         df:b6:cc:71:18:78:17:f2:16:8c:e8:59:33:96:9f:24:48:df:
         8e:53:b2:be:a8:5d:7d:98:dd:70:4d:0d:0c:11:23:23:9d:c1:
         28:bb:b9:ef:fb:bf:14:46:8f:dc:d4:87:c8:13:eb:2a:af:d2:
         69:cf:70:06:58:9b:9c:9b:bf:c5:16:5f:e2:4c:6f:7d:2a:1c:
         d4:50:c7:25:6c:0d:ba:b1:40:38:40:4b:37:6c:62:75:a1:6a:
         e6:dd:83:e0:3c:1a:96:38:a3:ca:44:95:75:24:18:95:5a:09:
         5d:e8:a8:77:48:a0:8c:b3:23:4f:2b:4d:d7:23:30:ae:65:be:
         1b:09:bc:f7:f0:30:94:a3:73:b8:d5:3a:13:22:7c:72:25:35:
         91:ce:a5:14:bc:26:d7:ff:5f:e1:91:44:7b:4c:d8:9a:87:74:
         7a:08:40:17:61:39:8a:ed:f1:ec:91:68:06:24:65:6e:8c:dc:
         e7:2f:74:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:14:18 2026 by rpki-client