Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File:                     DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier:          YhxPJz30d5cc5d5IIlrH5SBH1x5tyQKfFc+jtJ2r1PA=
Subject key identifier:   75:F8:A5:33:E9:8F:D8:E2:E6:37:8F:CF:62:EA:23:42:2B:7C:D4:13
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer:       /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial:       019F962585A9804BF9187538E140D8F12253
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number:          0D26
Signing time:             Fri 24 Jul 2026 22:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 22:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 22:01:09 +0000
Files and hashes:         1: 4mvw711lnQzyvs4Hvdkp66DN8WA.roa (hash: cOfCZrF6cE78BmpoYXmsaMPC6thd3G27U3oDjezLwXY=)
                          2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: tXrEnTi+8BwklcxZG3bH26gbzgUURLVw3ZW2Lg7xVng=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:25:85:a9:80:4b:f9:18:75:38:e1:40:d8:f1:22:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
        Validity
            Not Before: Jul 24 22:01:09 2026 GMT
            Not After : Jul 25 22:01:09 2026 GMT
        Subject: CN=75f8a533e98fd8e2e6378fcf62ea23422b7cd413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cd:bc:bb:30:2c:d4:d5:07:3e:eb:2b:c5:9c:
                    5c:b8:d7:d2:80:ee:6f:5b:73:04:5a:2c:15:14:b4:
                    c5:87:fe:f7:c8:c2:89:6d:0c:6f:a4:7e:41:2d:4f:
                    50:d4:24:ae:67:c8:38:a8:df:46:07:22:e8:cf:43:
                    49:63:b6:8f:79:d9:c5:0b:19:bc:ce:70:ae:32:57:
                    8e:14:62:cd:75:39:44:15:68:dd:ae:25:0d:83:b6:
                    de:20:fa:50:25:8c:5e:7c:3d:24:4d:37:28:34:77:
                    34:25:70:14:64:eb:84:37:f5:d4:a0:a0:6c:f6:16:
                    81:f5:0e:e0:4e:5b:37:70:b7:83:bc:0b:1d:62:40:
                    a0:44:61:f9:74:ee:53:e7:03:ef:d1:f9:f7:16:4f:
                    a6:75:36:62:42:a2:9a:1b:c7:57:fa:4d:fc:d8:e3:
                    6f:b8:08:57:aa:fa:fc:cb:4f:8f:2c:08:3a:ef:4a:
                    10:c6:70:11:87:d8:c6:20:76:ed:6c:cd:94:e3:b7:
                    03:af:bb:d3:44:8e:79:db:ad:21:c8:cf:5f:b5:1a:
                    30:37:92:76:9b:49:e1:e3:be:6c:c1:78:ca:e9:07:
                    74:61:53:ab:37:3b:09:98:44:8a:33:bb:67:b5:45:
                    7f:3a:e5:a5:7e:62:cc:58:3e:30:7b:1b:d9:5d:77:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F8:A5:33:E9:8F:D8:E2:E6:37:8F:CF:62:EA:23:42:2B:7C:D4:13
            X509v3 Authority Key Identifier:
                keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:23:66:ec:1a:a8:9f:9b:0b:27:f2:3c:16:92:16:59:8c:71:
         ff:8e:6a:40:5f:84:cd:52:19:75:e3:2e:37:e8:f2:a9:cf:64:
         16:99:16:bb:32:a5:01:40:67:79:29:c7:b5:7f:3d:bb:1f:16:
         bf:71:5d:f6:c1:03:85:da:cb:8c:62:2e:38:97:80:e7:4b:24:
         ef:e3:b7:ef:42:9f:09:09:d0:0f:9c:40:50:73:f2:fa:92:de:
         63:5b:8b:bd:df:c5:c3:42:8e:59:0f:c6:31:b4:3b:2f:2b:55:
         b8:09:37:09:02:a3:af:bd:8c:d5:d7:44:7c:cd:3b:3d:15:93:
         54:f9:c4:f8:9c:4e:2e:cd:95:5c:ab:95:b5:a3:ba:46:da:0c:
         a9:00:66:19:d9:6d:df:40:1a:cc:f7:79:59:22:65:74:1e:c9:
         e0:78:71:06:c6:29:30:68:91:13:d1:21:eb:8a:7a:63:e5:45:
         4f:4d:ba:99:0e:97:f4:79:88:ea:2e:9f:fd:1a:ae:4d:8d:96:
         af:dd:c3:16:e5:a3:e8:11:59:61:b7:29:49:55:90:ef:9b:a7:
         79:3a:99:4f:dd:4a:e3:e4:53:64:e0:40:17:51:11:b0:06:1e:
         cf:a6:aa:1e:1c:6f:04:35:5c:dd:16:c4:98:1d:6a:e5:ec:da:
         5f:a3:75:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:34 2026 by rpki-client