Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File:                     DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier:          647REgZqrgp8NLPZS4rsYpqL0+TsvblMGmMRdMHPUFM=
Subject key identifier:   A2:AF:0D:06:E0:D1:BE:9B:EB:91:9C:E9:D9:B2:62:14:D6:63:A2:94
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer:       /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial:       01A1867653A7F6FF2761910E3B69BA583D80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number:          17B9
Signing time:             Thu 29 Oct 2026 07:01:03 +0000
Manifest this update:     Thu 29 Oct 2026 07:01:03 +0000
Manifest next update:     Fri 30 Oct 2026 07:01:03 +0000
Files and hashes:         1: 5gzt4CwT9bvsp9z_Y1cddIfWsTM.roa (hash: m2Bvt7q0tdHrQ2fSHkOtVmTU4O14Tj93KaqVZHF85bA=)
                          2: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: CLAItLRly2bYl7qezsVYd4+9n0smJcK4MqOC1Ueo5HI=)
                          3: Gj7_HCZCEIEaaQcIOB8I26hpXJo.roa (hash: dna5HeCv7m+irZ9B9MRHtXXyokNwB7b4uG9bBJzKQjA=)
                          4: bQJIzpgstJ6tgK975t_kJvHhfnE.roa (hash: YZ8X60mNl9Zz2ZurQqorVTzia/8zSz3Bam727LiZpFA=)
                          5: mzAUafPNCTUpOi1xeAIAHgnqncg.roa (hash: 75EGQ43BZx3fMNqmy/B+uHn1YHc0mh0ZnJonJs36Ezs=)
                          6: ozr_7U6YddsAki_u1IviseVnGr8.roa (hash: A2gLyHJgOlcq2fhQNul6Az4HfqR7wlY8G6yuIpKn2sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:76:53:a7:f6:ff:27:61:91:0e:3b:69:ba:58:3d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
        Validity
            Not Before: Oct 29 07:01:03 2026 GMT
            Not After : Oct 30 07:01:03 2026 GMT
        Subject: CN=a2af0d06e0d1be9beb919ce9d9b26214d663a294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:12:5d:9e:8a:74:6f:03:65:0f:cc:84:c5:b9:
                    1f:1f:37:1f:84:03:ba:e8:8a:9c:6b:8c:92:40:d7:
                    fb:c6:58:56:e8:35:77:86:1d:eb:bd:fe:ee:da:35:
                    f2:32:0c:05:2f:0a:64:75:90:b0:f7:9e:95:de:b5:
                    c2:37:91:12:fb:a5:0f:66:3b:ed:80:bd:0f:76:bf:
                    a3:76:ba:04:f9:2b:c6:b5:ef:24:8a:53:2f:dd:98:
                    20:8e:51:be:2c:19:c5:b6:e0:20:79:1e:c4:8f:16:
                    18:7e:6a:64:ee:e0:dc:6a:71:ca:eb:68:bb:56:eb:
                    36:e4:7f:7e:60:3e:f9:7b:24:e8:1e:03:9a:22:00:
                    82:52:fa:4b:01:8d:87:ef:eb:55:25:6f:f6:de:87:
                    cb:74:d1:e7:78:a7:be:13:b7:fe:bb:19:8a:11:3a:
                    bc:c1:81:51:a4:8e:ca:e8:08:cb:e6:fd:5e:a5:48:
                    4a:16:1b:43:40:b2:16:96:f0:65:6d:78:05:36:4b:
                    03:0e:66:05:26:70:b6:b6:7e:ae:a8:55:f0:75:da:
                    7e:02:eb:59:c0:0d:c8:70:ec:04:13:28:00:2a:8e:
                    8d:33:9c:bc:51:ae:98:19:d0:a6:a3:b5:77:26:a9:
                    f7:1b:ff:71:3e:73:fd:8f:f8:7d:60:bd:88:6f:f7:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AF:0D:06:E0:D1:BE:9B:EB:91:9C:E9:D9:B2:62:14:D6:63:A2:94
            X509v3 Authority Key Identifier:
                keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1c:ab:ce:ab:8f:2c:d5:4e:35:70:f7:42:4f:e5:b5:76:23:
         5a:68:56:ec:cb:39:1d:28:cd:21:c7:cc:7a:ef:76:14:42:da:
         5b:af:b3:c8:d8:4c:44:30:0a:19:9b:52:fa:65:58:39:7d:a6:
         ab:9d:ee:ce:8b:64:64:fd:0e:0a:63:72:b2:23:d0:f6:00:bf:
         11:e8:4f:c5:68:f1:ef:af:2d:2f:fd:99:10:bc:9f:34:6a:90:
         a8:30:74:eb:d9:44:ff:9f:42:e5:52:23:db:f2:54:62:60:31:
         ec:12:3e:ac:6c:5e:7b:20:5a:b0:df:af:e0:21:a3:cb:26:82:
         67:dc:8d:81:84:1c:c7:fb:e6:2d:f0:73:d5:64:19:25:2f:1b:
         3c:8e:2f:8e:64:6f:50:e4:79:ae:0e:05:d0:8f:ab:9e:07:ca:
         d7:97:a0:d6:36:1a:1d:ba:77:68:06:3e:76:d2:75:8a:04:0d:
         0e:a0:17:5c:7a:44:c8:9e:c8:3d:5d:f4:1d:a0:7f:88:3f:e9:
         67:9f:ac:83:45:aa:01:fe:5a:16:cf:f6:53:e7:c8:4e:61:f0:
         07:12:41:ac:5b:40:d5:a4:04:f6:94:38:f7:24:99:44:8c:de:
         c7:e7:a7:89:be:2b:67:11:66:c2:49:d6:5c:05:0e:12:80:59:
         56:f8:59:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:52:50 2026 by rpki-client