Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
File:                     DXPUvXkdXM6A4CbErX1CfRV1k0c.mft (raw, json)
Hash identifier:          6X7su5VhG0yJJOJhNuHnxsPHwdjzciv9MK+2zoN/698=
Subject key identifier:   A7:26:9F:F1:BA:CC:27:4F:3F:34:F7:F8:77:41:05:BC:98:43:44:48
Authority key identifier: 0D:73:D4:BD:79:1D:5C:CE:80:E0:26:C4:AD:7D:42:7D:15:75:93:47
Certificate issuer:       /CN=0d73d4bd791d5cce80e026c4ad7d427d15759347
Certificate serial:       01A0D94D1992A5547B92846BCC200DC3993A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
Manifest number:          1F
Signing time:             Fri 25 Sep 2026 16:01:43 +0000
Manifest this update:     Fri 25 Sep 2026 16:01:43 +0000
Manifest next update:     Sat 26 Sep 2026 16:01:43 +0000
Files and hashes:         1: DXPUvXkdXM6A4CbErX1CfRV1k0c.crl (hash: bK0s6le0X07xPPRvX6gVu4AeELIBEU0Ev8UG0TQQLPs=)
                          2: dT0jM_sMFfjOGLTY2WtAxjqm9LQ.roa (hash: DyW/hyjh1BJFkTRjbEkpEYcuJTV4LPGigS20lQaYWE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4d:19:92:a5:54:7b:92:84:6b:cc:20:0d:c3:99:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d73d4bd791d5cce80e026c4ad7d427d15759347
        Validity
            Not Before: Sep 25 16:01:43 2026 GMT
            Not After : Sep 26 16:01:43 2026 GMT
        Subject: CN=a7269ff1bacc274f3f34f7f8774105bc98434448
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:23:e5:13:cb:ff:23:3d:c1:eb:42:b9:db:
                    ef:be:9f:9c:e7:19:ac:b8:f2:6e:a4:38:c2:fc:93:
                    93:06:41:11:96:c8:1e:66:aa:9e:78:17:e9:6c:07:
                    36:4f:4b:05:01:5d:5b:eb:a4:b1:c6:4d:c3:55:12:
                    dd:73:06:d3:41:ae:a7:f7:2e:b9:90:7f:8c:47:c8:
                    66:28:f5:56:16:f1:8c:a0:38:03:eb:ff:27:83:38:
                    f8:fd:4d:ba:b3:0c:c0:fb:d6:75:fe:dd:4e:42:c7:
                    90:67:13:02:bf:87:e0:3a:d7:bd:c1:47:9d:b8:ce:
                    19:5f:db:46:10:f4:3a:51:66:2a:57:cd:ae:99:ae:
                    3a:d7:9a:ce:5a:cc:a1:5c:3b:66:a2:38:b7:2a:b3:
                    3e:ae:26:58:1c:16:0f:4f:e8:46:05:af:0d:90:ab:
                    60:df:60:49:91:36:5f:5f:47:2a:c5:f9:75:bf:cd:
                    75:14:20:f2:78:63:3f:b9:c0:dc:28:f3:b4:f4:99:
                    fb:70:4f:64:cf:49:82:88:68:88:44:93:a4:a8:1a:
                    e4:ef:9f:0b:9a:55:d3:bd:ac:0a:db:fd:94:87:fd:
                    3e:4f:40:6c:d5:3d:9d:b3:51:d3:22:7d:b8:44:95:
                    93:a1:27:61:79:e8:9e:1f:52:92:61:fe:6e:34:20:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:26:9F:F1:BA:CC:27:4F:3F:34:F7:F8:77:41:05:BC:98:43:44:48
            X509v3 Authority Key Identifier:
                keyid:0D:73:D4:BD:79:1D:5C:CE:80:E0:26:C4:AD:7D:42:7D:15:75:93:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXPUvXkdXM6A4CbErX1CfRV1k0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d86eb6-9fb2-4d7e-87a3-0f99a39b0cfb/1/DXPUvXkdXM6A4CbErX1CfRV1k0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:45:b4:3f:07:4d:a7:c5:77:b4:83:6f:0f:9d:f9:51:16:92:
         e1:1f:33:b9:94:29:5f:09:5b:ed:f4:e0:5d:7d:58:a9:56:54:
         00:05:37:cc:39:09:18:54:14:96:5e:6a:03:d9:c9:85:87:ea:
         fe:5a:ce:a5:0f:f6:65:0e:11:2b:d2:36:bc:e6:11:fa:c7:f6:
         ad:ca:54:bd:9f:93:1d:84:ed:b4:36:4f:b0:f6:c4:bc:68:9b:
         05:db:ad:f6:2b:5c:35:df:bf:4b:4c:3b:0c:47:4c:e2:8f:2f:
         77:9d:01:ac:d9:8e:e1:64:b9:7f:00:29:2d:c2:f9:3c:14:75:
         a8:cc:55:80:16:0c:1b:86:1a:3d:b7:63:f1:e9:93:81:7a:c6:
         e3:f1:19:50:6d:49:7a:24:48:72:6a:15:20:78:40:57:78:ff:
         8d:8d:79:d7:69:1d:5a:8b:64:3b:4d:1d:fc:b0:17:ba:d5:98:
         3a:15:42:de:a4:d9:5f:98:84:3a:81:d6:cf:db:30:c7:26:c2:
         32:89:75:16:81:97:58:19:70:ec:41:fa:60:5b:c5:5b:6f:ec:
         7f:e8:f4:b8:c3:fd:2b:33:6a:ba:d2:c6:1a:74:cd:ee:0d:b2:
         cd:9b:00:eb:a5:8f:f5:5f:de:b8:cc:e2:b0:60:c6:e6:c8:13:
         7f:6f:ae:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:02:11 2026 by rpki-client