Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File:                     0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier:          JR4gQXxNDuW3dyroyr1o4KNjaf5D4YgiHtG0T1CHDJ4=
Subject key identifier:   4E:B0:E5:0D:3C:18:41:66:23:5F:1D:17:21:88:DC:EF:F3:93:B9:AF
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer:       /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial:       01A13DB803022712E19C3403F6B1C37F24DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number:          1742
Signing time:             Thu 15 Oct 2026 04:00:31 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:31 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:31 +0000
Files and hashes:         1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: rFPxs8eTSobDXtlAZijW2W9NQQR5J0L+VtdWHU7CuMg=)
                          2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:03:02:27:12:e1:9c:34:03:f6:b1:c3:7f:24:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
        Validity
            Not Before: Oct 15 04:00:31 2026 GMT
            Not After : Oct 16 04:00:31 2026 GMT
        Subject: CN=4eb0e50d3c184166235f1d172188dceff393b9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f2:16:91:21:ac:89:20:5b:44:d6:e6:f9:cd:
                    60:99:85:6a:a9:cd:99:c1:90:80:b2:95:4f:3b:81:
                    29:3c:83:89:ad:2c:de:b3:d5:ab:6f:df:7a:60:7c:
                    b1:9e:cd:c4:8d:2f:28:08:65:f0:2f:c1:a1:eb:2c:
                    2e:2b:99:13:24:af:10:3a:5a:d8:8e:5e:59:98:ea:
                    22:24:10:45:28:d5:c1:19:4b:31:87:b9:09:48:ed:
                    b0:ea:d1:f0:02:dc:e7:41:d0:23:47:3e:48:f3:a8:
                    c9:73:2c:8c:2e:2f:f4:88:7d:f4:43:1d:db:c2:ec:
                    f1:7b:80:53:42:81:94:84:57:b3:a1:8a:08:85:15:
                    15:c1:64:d8:9e:29:77:d9:8a:b5:5f:80:8e:89:dc:
                    c1:05:4f:a6:13:06:16:a3:5f:85:a2:3e:b8:f5:56:
                    fd:17:e4:25:2b:ce:df:b9:b9:62:c9:e1:b5:5a:62:
                    c4:f1:5a:f6:20:af:04:46:9f:be:1f:b8:46:f8:70:
                    5f:83:da:84:0a:69:90:fa:2a:4b:d3:20:b4:65:a2:
                    08:26:a9:f7:f1:71:98:39:20:02:61:93:e5:75:5a:
                    7e:02:31:5e:43:71:fd:16:a0:3a:6a:28:95:4a:92:
                    9f:ac:30:81:18:5b:fe:c5:0a:aa:97:9f:d0:55:c2:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B0:E5:0D:3C:18:41:66:23:5F:1D:17:21:88:DC:EF:F3:93:B9:AF
            X509v3 Authority Key Identifier:
                keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:b8:18:e8:73:78:f5:d9:46:d1:9f:11:78:2c:10:0a:72:6c:
         65:7b:56:80:bd:69:ff:cd:1c:38:72:3b:33:f2:4b:66:83:93:
         09:96:b2:61:0d:c5:d2:f7:13:5e:b2:7d:36:ed:bb:78:36:f5:
         14:6c:ff:a4:82:ea:14:d1:b3:c3:a3:34:4f:88:5b:a0:cd:21:
         e5:b9:3a:87:09:81:d0:da:6f:ba:52:99:72:0d:3c:e2:76:23:
         8c:f4:3a:9f:63:59:63:7b:e6:e2:89:0a:fe:73:02:2f:de:c8:
         30:4f:e2:3e:16:52:15:0f:a7:0b:54:44:79:7b:3f:1d:b2:3b:
         3f:be:50:db:86:58:20:99:80:21:3f:82:5f:8f:d8:2a:14:13:
         d6:ba:b2:f3:c2:5e:21:46:97:20:30:b6:13:a4:9f:0a:b7:ad:
         9f:fb:75:f7:0f:2c:5b:c4:5a:ec:99:cc:4c:b5:07:b4:b4:71:
         3c:f1:c7:d9:4a:da:73:18:33:41:80:59:0e:2a:32:e2:f6:f4:
         c9:6f:98:ac:82:36:6e:a2:61:86:26:25:7b:ec:30:da:45:dd:
         bd:fe:45:2f:af:59:19:29:1f:e1:9c:b2:fe:09:b5:87:d0:e9:
         1a:a5:0b:6f:f2:06:e6:19:45:64:2a:c6:63:23:35:e3:88:08:
         f1:7d:de:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:56:48 2026 by rpki-client