Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
File:                     DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json)
Hash identifier:          e5mz4CuAF1GMrf1YtlsrlXEL/R9y0qtLxq58Vd29c30=
Subject key identifier:   26:A9:36:0F:79:53:5D:9A:D2:71:B3:8D:2A:75:06:8D:A4:07:4D:B5
Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
Certificate issuer:       /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Certificate serial:       019D39E5EB174E587399A8425DB46C026186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
Manifest number:          1594
Signing time:             Sun 29 Mar 2026 14:01:02 +0000
Manifest this update:     Sun 29 Mar 2026 14:01:02 +0000
Manifest next update:     Mon 30 Mar 2026 14:01:02 +0000
Files and hashes:         1: C-78xmWgZqJn-98KCnx2cK8W2iw.roa (hash: kvyCi4+DSBTeslNasxxFTjOtFWjXLr4uWpv3Fg7ByZw=)
                          2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: E/rsNrxfKNbiIEtbSFtTOC+MjbUA/Su4lr9UeeL+ozE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:eb:17:4e:58:73:99:a8:42:5d:b4:6c:02:61:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
        Validity
            Not Before: Mar 29 14:01:02 2026 GMT
            Not After : Mar 30 14:01:02 2026 GMT
        Subject: CN=26a9360f79535d9ad271b38d2a75068da4074db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:05:13:96:43:7e:31:22:44:03:c1:34:d7:4c:
                    90:33:de:2d:9d:70:f0:af:8c:15:b8:67:2b:cc:76:
                    a7:e0:d3:c3:d0:0e:31:f7:28:d6:4a:50:e6:42:dd:
                    f4:5f:ce:59:03:cc:ce:35:d5:3c:fe:93:61:ee:e8:
                    cc:b9:53:a1:c2:ef:6e:23:3a:73:e2:60:a5:3e:c1:
                    f0:95:a7:1b:cb:19:ae:7c:91:5b:ef:7f:ed:b8:40:
                    62:e1:a3:15:ed:18:39:f6:17:b4:a1:89:38:37:80:
                    e6:3a:e1:e1:5f:f7:fd:c9:8b:e9:bb:f2:39:79:88:
                    20:8a:89:5e:7d:ed:68:57:83:d2:b1:0e:1d:85:7c:
                    5d:bb:6b:10:2c:b7:e5:be:cb:e3:03:83:92:ce:e0:
                    9a:27:e4:95:c2:84:9d:6b:a2:fa:5e:3a:4c:d1:18:
                    4b:95:ff:da:d1:ec:3e:87:ac:7e:31:b3:c3:0d:04:
                    34:15:ca:c8:65:43:e6:a3:3c:8c:f9:01:b4:36:f7:
                    c1:af:cf:26:01:65:ac:86:36:82:61:08:ff:f8:19:
                    d3:75:b7:a2:55:95:28:64:a4:59:8a:b5:f9:b9:49:
                    5c:68:bc:ab:84:b5:b5:05:86:74:fc:88:0a:1c:59:
                    6b:9f:6b:1a:93:b9:92:42:f9:21:87:9c:20:44:1d:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A9:36:0F:79:53:5D:9A:D2:71:B3:8D:2A:75:06:8D:A4:07:4D:B5
            X509v3 Authority Key Identifier:
                keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2e:db:9f:e4:82:73:60:f0:ee:5e:18:2e:db:9f:52:2d:71:
         c4:6d:6b:a1:cc:f3:c3:a4:9b:85:38:da:86:77:80:72:eb:2b:
         5c:94:4c:b9:cb:45:c2:97:db:4b:b2:8d:8c:29:21:5d:e4:fa:
         4f:fa:1b:9a:3a:17:65:7d:7a:1d:ad:1e:89:17:03:2f:17:bf:
         94:b5:03:75:1b:50:99:3f:ac:56:1b:16:9e:d1:e6:da:28:ec:
         f9:72:12:ee:01:39:d2:15:be:94:25:40:7c:dd:de:10:45:c6:
         b1:da:d2:13:f5:a4:92:b4:7e:b8:64:6e:df:6a:e3:5d:2e:97:
         40:1c:11:b9:91:2a:2a:da:85:0a:57:b5:f9:df:61:f1:96:c8:
         0e:07:97:f6:49:af:b0:bc:f6:77:ab:dd:34:65:21:64:ed:a6:
         12:fd:39:84:e6:6f:03:7e:54:d6:27:78:57:1d:71:81:2b:54:
         fb:fc:c1:16:19:57:61:cf:b7:b0:83:a5:24:78:96:71:6d:3e:
         59:8e:7a:9b:cf:af:9c:f8:ab:9f:5c:a3:f7:1b:02:4f:ae:e3:
         33:7d:b6:50:ae:5c:43:b7:0d:bf:ef:d0:e8:d0:ad:c4:7b:1a:
         d2:ad:8b:a6:13:6a:dc:6e:63:2e:e5:43:3a:5d:f4:ec:38:3a:
         cd:cc:09:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:47 2026 by rpki-client