Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File:                     DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier:          vbwtwqMyIFdPwOkq1Meha8tJymna0AQh47WCexxQvoI=
Subject key identifier:   A3:44:74:E3:E6:A4:47:7D:6E:37:71:E7:71:57:D3:1E:6A:57:3D:27
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer:       /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial:       01A18E668CE65C5FB5F68E53192465CE703A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number:          0320
Signing time:             Fri 30 Oct 2026 20:00:47 +0000
Manifest this update:     Fri 30 Oct 2026 20:00:47 +0000
Manifest next update:     Sat 31 Oct 2026 20:00:47 +0000
Files and hashes:         1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: XAPxaBgDlSBGGdO12WCLRe1k6LbncnBx5/bi7qPVQaw=)
                          2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8e:66:8c:e6:5c:5f:b5:f6:8e:53:19:24:65:ce:70:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
        Validity
            Not Before: Oct 30 20:00:47 2026 GMT
            Not After : Oct 31 20:00:47 2026 GMT
        Subject: CN=a34474e3e6a4477d6e3771e77157d31e6a573d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b1:ab:aa:fe:31:47:fb:05:54:c5:ec:4a:fe:
                    98:2f:ce:0a:67:8c:c2:ad:31:78:70:f4:56:51:74:
                    e3:e1:66:d9:76:84:cd:72:96:08:61:0c:f8:8e:e1:
                    0d:12:c5:85:dc:04:d3:de:15:bc:d8:44:ca:39:f9:
                    2d:10:da:74:00:08:87:8e:b5:de:f4:c2:e3:26:c2:
                    43:25:45:24:9a:a5:ab:0e:3f:f1:98:13:55:98:16:
                    b9:64:4f:79:c1:5b:c2:20:65:41:dc:62:a7:6c:e8:
                    c2:c8:76:4d:5d:e4:85:06:89:79:ca:13:e8:72:64:
                    e1:5f:c0:18:84:49:66:36:a8:13:d6:7f:18:e5:81:
                    7f:07:08:de:5e:74:61:e4:48:af:0d:3d:10:19:00:
                    13:3b:de:f3:97:5f:02:f3:be:26:18:5d:12:de:9e:
                    78:94:74:d4:e1:3a:d6:15:e0:f7:54:31:44:36:a2:
                    49:e9:d8:f1:b3:cf:cc:46:b5:d0:e9:cf:1a:a5:ac:
                    80:9c:57:37:a4:5d:6b:ac:f6:62:c8:97:4e:37:45:
                    53:69:3a:e9:60:25:71:e8:d4:6c:b1:47:07:2c:67:
                    6b:4e:c0:31:2a:50:b4:c9:4d:57:d0:76:ce:30:f4:
                    3c:ff:23:70:bd:8a:ae:f0:de:ed:5c:8b:e3:39:7c:
                    1b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:44:74:E3:E6:A4:47:7D:6E:37:71:E7:71:57:D3:1E:6A:57:3D:27
            X509v3 Authority Key Identifier:
                keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f7:a6:82:37:4c:2f:32:c2:ca:95:50:91:20:64:1a:b8:1c:
         ff:9b:2e:38:3c:da:9b:8a:0f:fb:ef:20:bb:bf:21:80:2f:00:
         bf:77:5b:07:f2:83:0a:bc:3f:f3:58:7f:36:17:b4:f1:59:73:
         f5:f5:13:2b:fb:bb:ca:12:e7:ff:3e:4b:f8:ca:b6:e7:30:08:
         e9:c1:df:49:5c:4f:d8:7c:bb:c8:ae:a9:bc:eb:d9:de:99:f0:
         cc:d8:3e:35:fd:da:2b:91:22:ba:8d:70:f1:06:e2:96:e1:8e:
         ec:31:a1:00:4a:5b:2c:59:28:ad:6b:73:3c:8c:33:9b:05:b9:
         55:e1:ac:6a:10:ee:71:5d:91:99:c1:3b:fe:26:64:5d:ba:09:
         9f:78:92:30:08:9c:04:d9:fa:86:ac:bb:cb:bc:5c:22:ee:29:
         53:7d:d3:bb:59:1b:18:d5:a3:dd:90:ce:5b:e0:86:33:9e:8e:
         ec:e6:d5:c3:b3:37:25:67:0f:80:fb:88:e6:9a:ed:c9:72:80:
         67:28:b5:82:e4:a2:07:3f:70:2b:4b:17:2b:7a:24:25:63:e3:
         db:9e:26:7a:1a:83:1b:38:e9:50:38:cb:12:31:bf:31:3c:f3:
         c8:bf:77:25:9d:b7:ed:0f:95:f9:1c:dd:39:3b:8a:c3:67:1e:
         9f:55:e3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:16:33 2026 by rpki-client