Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
File:                     DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft (raw, json)
Hash identifier:          FxZiVsTS2eFj3teBUYnh//iA75IGwuCo7ME2F+iJMQg=
Subject key identifier:   2E:03:12:F7:41:63:E7:4F:83:6A:CE:83:4F:C0:0A:16:37:36:2D:05
Authority key identifier: 0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7
Certificate issuer:       /CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
Certificate serial:       01A17F61D47EB9F38729E0EE4891090995D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
Manifest number:          0263
Signing time:             Tue 27 Oct 2026 22:01:20 +0000
Manifest this update:     Tue 27 Oct 2026 22:01:20 +0000
Manifest next update:     Wed 28 Oct 2026 22:01:20 +0000
Files and hashes:         1: DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl (hash: Aj7vHI5S3C7XaF2Mq+dJvBiXhBJXJh9836TZLbtEaJE=)
                          2: u3zxwv8aiDPFhl4Oxz0_bf9g92U.roa (hash: wBX3vONdNDvp84LOZvpcknzsgcTIkj6k0n194mkJDS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:61:d4:7e:b9:f3:87:29:e0:ee:48:91:09:09:95:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
        Validity
            Not Before: Oct 27 22:01:20 2026 GMT
            Not After : Oct 28 22:01:20 2026 GMT
        Subject: CN=2e0312f74163e74f836ace834fc00a1637362d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4f:63:cd:42:4f:5d:90:6b:9a:c8:b2:21:b8:
                    6c:b1:6b:19:77:ef:8e:9b:98:bd:7d:9b:89:49:fb:
                    48:04:8e:4b:f2:27:08:8d:80:18:20:10:a5:2b:d1:
                    d3:9f:3a:d2:a2:a8:24:f9:f1:e5:b6:65:f0:5b:64:
                    e7:45:8f:fe:c7:f0:60:d8:ad:70:38:c4:73:cb:d9:
                    97:aa:46:83:f7:5f:b1:11:0d:7c:47:4d:fc:eb:cb:
                    f4:55:76:e1:ac:54:fe:3e:2a:1c:8f:a2:86:03:a9:
                    15:bf:6d:25:b2:42:b2:63:0a:69:d5:ea:8d:04:9f:
                    53:30:b1:45:df:f9:9b:58:71:b3:54:9e:ee:78:55:
                    fe:09:03:cb:1f:1d:bd:1a:c4:1d:41:e1:28:88:d5:
                    45:6d:45:c2:3f:62:41:d9:ed:df:31:d8:0e:57:7f:
                    53:c1:59:0b:2d:75:5d:5f:8e:cd:fe:fb:4b:74:07:
                    77:5e:b1:57:09:2c:1e:d6:72:35:01:a1:2e:38:2f:
                    eb:8d:23:2b:13:0e:2f:38:a7:b4:d6:df:97:a8:a5:
                    2b:15:ac:04:e6:6a:17:38:66:d9:e9:f0:c4:62:1d:
                    51:76:b7:fd:da:fe:21:a1:d3:75:f0:51:08:59:3e:
                    d1:fb:84:be:40:1f:d4:84:71:58:7c:12:9a:28:05:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:03:12:F7:41:63:E7:4F:83:6A:CE:83:4F:C0:0A:16:37:36:2D:05
            X509v3 Authority Key Identifier:
                keyid:0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:93:c7:49:b5:70:d2:7b:05:79:f0:cb:58:be:4d:9a:02:54:
         4c:ea:10:b3:6e:9e:0c:bf:62:d0:59:9c:b4:a0:fb:94:93:1d:
         ac:f9:bc:63:8d:97:3b:01:52:c1:3a:d9:fd:b2:92:57:43:e0:
         43:96:b6:e5:46:c3:6e:ca:ac:45:de:55:12:8d:2c:a6:1f:32:
         db:a0:76:d1:cb:c4:2f:b3:24:85:ad:e6:2a:5d:f0:70:1c:e7:
         28:2f:78:13:53:8f:92:f3:34:7a:b6:49:7d:05:a4:0e:c7:27:
         d8:43:8a:6b:04:82:68:5f:90:28:16:ca:ef:b8:fc:05:02:47:
         12:8b:19:04:d7:4e:25:c5:10:0a:42:a4:e3:ac:4f:01:63:21:
         af:dc:a7:27:e5:b8:27:38:91:2a:d1:e6:3d:e4:ac:18:4a:34:
         8f:0a:1e:1e:38:0a:7b:c9:7f:c5:34:2c:da:05:69:29:1a:2c:
         d1:d4:08:ad:9c:f7:c2:0a:00:72:89:35:1e:3c:b6:a6:4b:d1:
         91:8f:5c:51:77:e2:67:2f:48:eb:c3:9e:b3:48:55:58:02:d5:
         8b:bc:db:a3:87:c3:25:88:cb:89:43:ea:49:1b:4c:9f:6e:53:
         4d:4f:6d:31:2b:9a:99:d0:d6:84:e9:73:00:61:59:39:60:30:
         8e:97:da:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:41:56 2026 by rpki-client