Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
File:                     Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft (raw, json)
Hash identifier:          7NJl3VaOCM12h46oVVGdbRUidAQmYJNSESLGk6WVOCQ=
Subject key identifier:   6C:E9:DE:76:5A:42:A1:E6:4E:6A:15:53:2E:7D:9B:9A:76:91:70:D0
Authority key identifier: 0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF
Certificate issuer:       /CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
Certificate serial:       019D6876F1BF5F72372B9835C20B408D78B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
Manifest number:          95
Signing time:             Tue 07 Apr 2026 15:01:58 +0000
Manifest this update:     Tue 07 Apr 2026 15:01:58 +0000
Manifest next update:     Wed 08 Apr 2026 15:01:58 +0000
Files and hashes:         1: 1-ZA3tjZXtTnljb1_LyYKoCeyOLg.asa (hash: 1+ooJiGuRehijv0BAu/DjLMQWAM8WG1GvP8acPYp+Sk=)
                          2: Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl (hash: F4HQcf6LXPAPe+XbwepbAv6MSB/KPVgxiaIZkAwUc/I=)
                          3: dO3RNAISfOv0O9_8IUROa2pKet4.roa (hash: C48BcGhKAuvtDpW8RyICY4ut3E1OUd47JnUb0vzluWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 14:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:68:76:f1:bf:5f:72:37:2b:98:35:c2:0b:40:8d:78:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0adff9e599c49197c6b540a15224eb5aeaf6df
        Validity
            Not Before: Apr  7 15:01:58 2026 GMT
            Not After : Apr  8 15:01:58 2026 GMT
        Subject: CN=6ce9de765a42a1e64e6a15532e7d9b9a769170d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:37:c0:9d:6c:d9:22:5e:9b:5a:d6:24:47:
                    c6:a7:4f:7f:24:a7:44:ff:8b:87:ed:d2:04:a2:6a:
                    10:4b:60:c5:b9:37:d9:91:76:ec:16:f8:41:0e:ae:
                    20:f4:3b:ba:3c:b3:5d:52:51:7a:83:a9:0b:81:2c:
                    3a:12:de:f1:7e:be:12:ae:13:02:25:81:f0:38:c1:
                    97:e7:0b:6d:f5:9d:a1:1e:db:d8:68:5a:57:9c:0b:
                    9f:c3:c4:df:13:92:64:91:11:9e:4f:1a:55:95:f7:
                    4e:13:f4:ae:3b:3f:85:b8:89:60:ba:12:ce:70:fc:
                    88:a8:2c:86:ac:90:8b:36:d3:fb:59:04:f0:50:21:
                    3e:75:1b:7f:d4:dc:9e:53:70:0a:eb:07:b7:a3:56:
                    b9:4f:bb:0d:22:1c:1f:e0:60:5a:1e:58:0a:af:e7:
                    1f:06:35:af:82:c1:59:fe:87:d7:22:da:0c:38:25:
                    b2:13:82:4a:1c:50:f0:b7:b8:50:5e:72:25:03:08:
                    98:0a:62:24:36:02:5c:b0:bc:ce:d4:8b:58:d6:90:
                    bd:fb:b4:fd:c3:16:0d:6f:61:03:d6:cd:8a:05:d4:
                    6a:10:63:05:08:fc:f0:e3:7c:a9:c0:be:be:b5:72:
                    d8:6e:04:eb:f3:c5:64:a7:9b:67:12:2f:98:3d:3d:
                    c6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E9:DE:76:5A:42:A1:E6:4E:6A:15:53:2E:7D:9B:9A:76:91:70:D0
            X509v3 Authority Key Identifier:
                keyid:0E:0A:DF:F9:E5:99:C4:91:97:C6:B5:40:A1:52:24:EB:5A:EA:F6:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgrf-eWZxJGXxrVAoVIk61rq9t8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ff6761-cfa2-4c78-966b-a036d97c4e2b/1/Dgrf-eWZxJGXxrVAoVIk61rq9t8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:c0:b4:ba:4a:42:94:fc:29:4f:26:1b:4b:b1:83:3f:67:85:
         5b:35:82:79:67:f5:d6:cb:ae:f7:35:98:43:e1:af:a1:59:ac:
         fc:f9:a2:9a:e0:ea:a6:a1:3c:0a:41:e4:49:b9:41:11:34:01:
         1c:51:d7:1e:ff:c8:fd:50:e7:f9:a6:0c:84:40:e2:0e:73:cd:
         4e:61:cc:20:d4:0c:57:d2:82:71:8f:03:b2:0b:f6:f1:5b:a1:
         9a:95:b6:62:e8:c3:7d:21:ec:32:ed:6d:0b:c5:70:72:ac:74:
         bb:28:a1:95:be:c2:20:58:42:92:5f:9d:10:5f:e4:1c:35:60:
         90:d0:8d:ec:8a:a9:79:e1:eb:1f:f5:5c:08:38:bc:f6:f8:10:
         54:c3:66:48:e7:75:08:1e:ce:28:77:98:2e:26:b2:17:17:da:
         49:8b:f1:c6:03:ce:56:f0:d2:78:97:ec:82:f6:62:ed:b7:56:
         02:a9:17:c6:94:d2:b7:49:a4:a5:64:e7:f6:ab:1a:76:5c:79:
         ee:6d:86:fc:10:b0:d5:48:0a:82:9b:8e:2f:3d:72:0e:b7:08:
         0e:08:f5:fb:cc:99:3f:95:3e:0a:10:76:fc:73:e2:01:e7:a7:
         25:e1:39:22:ec:ef:ce:ef:00:5a:97:d0:8d:93:de:c5:95:69:
         bd:37:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:57:20 2026 by rpki-client