Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
File:                     DNpch0NU2Dgm5DwlNbduINW2GwU.mft (raw, json)
Hash identifier:          IesvdhaoHzP5P5ziHmY5kyqPJMQjdd7y8tAA8S6I8d4=
Subject key identifier:   13:73:B3:41:89:90:96:61:C2:57:26:D3:F1:64:E3:07:3C:8A:CF:FD
Authority key identifier: 0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05
Certificate issuer:       /CN=0cda5c874354d83826e43c2535b76e20d5b61b05
Certificate serial:       019CE4B5EACFA92E99B1ECD7DBE70D7B8B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
Manifest number:          186F
Signing time:             Fri 13 Mar 2026 01:00:53 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:53 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:53 +0000
Files and hashes:         1: DNpch0NU2Dgm5DwlNbduINW2GwU.crl (hash: yrAeNOfXvZpf794OoFQ1clr55MOG2pr0U5mk1QmrNOc=)
                          2: u5v1NIr7zCznyDKOfZW5zSM1TZI.roa (hash: 0y7T3YJCDc+2Cz1VFqoKYSn2dXOumotGXs+vkOowx74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b5:ea:cf:a9:2e:99:b1:ec:d7:db:e7:0d:7b:8b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cda5c874354d83826e43c2535b76e20d5b61b05
        Validity
            Not Before: Mar 13 01:00:53 2026 GMT
            Not After : Mar 14 01:00:53 2026 GMT
        Subject: CN=1373b34189909661c25726d3f164e3073c8acffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:e5:55:05:7a:16:e8:49:1a:d0:cf:18:98:
                    30:75:7e:fe:95:a0:ea:76:ea:40:54:35:51:4c:de:
                    e2:5d:7d:37:1d:c2:40:01:21:8f:5b:c7:ce:51:d4:
                    f2:06:ef:e5:d1:0d:a4:c3:d0:73:57:87:31:ea:8c:
                    f3:2e:7e:7c:62:0a:70:b1:a0:f7:ee:35:20:b8:69:
                    08:2c:e5:3a:43:d4:70:8b:a8:9a:78:ee:3a:91:92:
                    21:44:78:dd:5a:3b:31:51:91:f6:46:e8:de:b2:bc:
                    b5:ef:71:34:38:b2:25:26:d3:ec:03:1f:50:5b:09:
                    88:fc:35:7d:8f:c4:90:35:a7:af:13:0f:c9:88:e4:
                    c0:55:9f:bc:e7:f5:ff:e2:eb:b1:ff:ed:8f:aa:3d:
                    8e:20:6d:35:46:27:69:33:19:d5:80:ce:ea:68:30:
                    7e:b2:83:13:cf:0b:86:d4:59:4d:c8:14:90:1d:3f:
                    4c:ad:0e:aa:80:b6:0e:6d:ce:a0:0c:44:87:0a:df:
                    27:9e:ea:96:39:6f:19:7e:6a:40:71:3c:e7:10:a6:
                    2f:61:4f:d2:5d:b4:eb:71:fe:60:09:fe:91:20:09:
                    b8:ac:f6:8a:a1:b1:a5:d7:58:a5:12:4d:3c:b2:55:
                    f0:92:bd:eb:b1:80:57:5c:05:21:e9:af:bf:4b:c4:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:73:B3:41:89:90:96:61:C2:57:26:D3:F1:64:E3:07:3C:8A:CF:FD
            X509v3 Authority Key Identifier:
                keyid:0C:DA:5C:87:43:54:D8:38:26:E4:3C:25:35:B7:6E:20:D5:B6:1B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNpch0NU2Dgm5DwlNbduINW2GwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/92332f-03e0-4116-b6f3-c82f424b6d0d/1/DNpch0NU2Dgm5DwlNbduINW2GwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4e:32:24:32:a7:6d:73:f2:9e:6b:f5:49:c0:0c:0b:db:22:
         6f:a9:11:bc:00:b0:70:70:94:67:a7:83:3a:48:e5:cb:ed:2c:
         69:ec:61:22:ad:03:3a:cd:05:e0:5b:02:75:cc:57:5a:1f:36:
         c2:59:20:8d:7c:87:20:f9:20:9e:82:11:25:ab:a3:bd:7f:4c:
         f2:82:a3:5b:1b:b9:5e:63:d8:9f:1e:7e:53:ff:60:6c:a6:4f:
         ce:17:cf:32:71:d1:27:9d:a9:f3:88:c3:89:c6:d1:80:ed:03:
         ae:3d:18:01:bf:e7:d5:16:4d:a7:1f:a1:55:be:c3:cb:83:2e:
         da:0f:f2:68:83:97:fd:77:b9:81:87:c3:b3:47:43:a3:d0:2e:
         bc:22:b9:6b:3e:07:ff:3a:1b:64:e7:ec:61:4b:d6:8c:0b:bb:
         1c:73:75:6f:fc:5d:c7:11:95:56:7c:c0:f0:85:ca:40:3d:45:
         1d:3b:20:62:8e:6b:72:ec:33:bf:00:6c:16:9d:48:fc:a8:00:
         34:48:22:1e:c1:c1:78:b6:4e:3e:7e:97:a9:9f:50:c6:c9:64:
         fc:58:b8:04:85:01:53:bd:e5:c8:62:7d:71:f0:f5:af:8c:5d:
         c7:14:cd:57:de:49:cf:96:7c:cb:7f:16:4a:8c:d3:a0:cc:9c:
         5a:3f:27:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:38 2026 by rpki-client