Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File:                     dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier:          MjllL8WzfiFr9rPfmNOBjclFnJgQabHiMBd00YOJArs=
Subject key identifier:   09:BA:70:C1:22:52:CA:6B:8B:99:0D:A7:EA:9C:6E:AE:D6:8B:A9:54
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       01A135235D6CBADBCEDB132C248CBE33D870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number:          12E5
Signing time:             Tue 13 Oct 2026 12:01:12 +0000
Manifest this update:     Tue 13 Oct 2026 12:01:12 +0000
Manifest next update:     Wed 14 Oct 2026 12:01:12 +0000
Files and hashes:         1: GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa (hash: y777qRGEhPwlWpAtzq0goRcn8bZ+BbeZhZ9OTAaKg5I=)
                          2: JEeGJlJzDZv7X5-PTEcchFlbpzM.roa (hash: 4jWqLUKBrgm7XTmYBRKBp3tw/IpbzhhcNF/Uo33+quQ=)
                          3: T9ukIpeE8FQqySiWWIvM8tmpTMI.roa (hash: ibkl+Urb1bu42K9P8KLmWW1X4v+Ewa8euGPZaFBg1oM=)
                          4: TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa (hash: bvpYF9UPs3HZjo44Cry+9B0U6H15yPL3VjfGpzCMqks=)
                          5: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: eBIL9aeN3iCPt96g/88b/3Mr9Y5LSpb5VMQDeYk3rpU=)
                          6: kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa (hash: 7bjk9DIjv1/p8D5/L/JVXvNXm2hIMbNO/Bknu6ms2kc=)
                          7: oGf_1Gi6p9BnTcB2h845ELw18yE.roa (hash: vZEx0hhPga5gHLIccOXjBsLg2I31ryX+jChcgCG39FM=)
                          8: zxlNoz3rzQ3-dAnhy_jjif6hTJc.roa (hash: J8qFyCD+0ZUlnXfOJKaFx3pu76rmJ2d6yo1rgVv/jyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 12:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:23:5d:6c:ba:db:ce:db:13:2c:24:8c:be:33:d8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Oct 13 12:01:12 2026 GMT
            Not After : Oct 14 12:01:12 2026 GMT
        Subject: CN=09ba70c12252ca6b8b990da7ea9c6eaed68ba954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:30:9c:00:58:27:78:80:b3:c8:cb:ea:b6:b6:
                    d2:ae:76:ec:02:db:0c:7c:07:e3:0e:bc:e0:09:f2:
                    54:5e:8b:80:34:ad:95:d1:87:97:60:b9:66:f2:26:
                    c8:c8:fa:cd:7b:e4:a9:84:3e:81:b1:43:87:ab:da:
                    f3:27:b3:f8:a8:48:f0:73:db:00:fd:c0:b7:98:d1:
                    3d:f7:66:f7:c6:7e:72:f1:78:9c:a9:dd:94:e6:ef:
                    bc:74:ff:0b:d6:42:cc:47:4e:48:7a:78:23:bd:b9:
                    73:85:a7:82:f5:3c:c1:50:7a:6d:86:c2:23:11:ee:
                    0d:51:7e:fa:b7:08:ce:2b:bc:6c:b1:74:d1:e4:d2:
                    96:45:7c:e0:f0:f0:cc:8a:b1:6f:9a:e7:8f:1f:ad:
                    63:af:f9:fc:bf:a7:f7:8e:44:cb:57:4f:09:a9:5b:
                    7f:cb:99:20:c5:d9:89:4b:af:00:05:8f:8a:1b:1b:
                    e9:7e:49:d5:97:cf:87:e9:35:3f:6e:a9:46:4f:0b:
                    ec:24:08:5f:7a:a4:ed:bd:41:90:c5:0a:2d:d2:98:
                    fe:4b:9a:4d:3d:73:6d:62:7b:0e:a0:ba:35:c8:54:
                    b3:8d:8f:a3:00:35:30:56:b3:6b:be:43:8e:d8:db:
                    62:af:7e:92:8d:7a:be:16:f6:43:2e:ab:23:13:e0:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:BA:70:C1:22:52:CA:6B:8B:99:0D:A7:EA:9C:6E:AE:D6:8B:A9:54
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d8:1a:c1:f3:47:a9:38:ef:77:2b:26:b2:c6:a8:22:16:a3:
         b6:4c:97:6c:71:ce:59:f4:ec:12:e7:e2:ea:29:fa:79:75:88:
         bd:48:2b:6a:ae:38:de:62:43:b7:00:02:60:22:12:a2:35:e5:
         2d:da:40:e0:a4:8c:f6:bb:a3:9b:72:33:fd:17:9f:00:87:a5:
         75:d6:db:61:b9:0a:78:bc:4f:2c:53:f4:fd:92:68:a8:63:11:
         cf:35:86:db:a0:fc:fa:bd:80:a1:77:ab:fd:1a:3e:78:45:bd:
         16:24:f2:d7:39:91:ad:17:8d:36:bc:d8:42:0f:f8:27:54:a3:
         62:80:5b:37:7c:eb:7d:d1:85:0b:86:a2:5c:2a:65:a0:de:18:
         1c:40:c3:bf:a4:44:17:6c:b3:40:f3:1a:27:cd:c2:7d:74:8a:
         26:d6:62:d1:a1:e0:81:48:9c:86:6a:c7:44:17:1d:42:fc:90:
         57:09:d9:2f:ed:09:bd:0f:c6:ef:89:ba:fa:b0:69:a5:f6:86:
         0a:01:16:97:81:8a:1c:f2:c2:39:c1:38:3a:1d:7b:b1:ef:3c:
         02:a2:40:3c:32:26:56:1d:ff:16:bd:55:68:24:70:36:94:47:
         88:b6:a9:a3:2d:dc:58:93:e7:ac:36:48:3c:ab:3b:5d:ac:1a:
         1f:6a:2b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:30:53 2026 by rpki-client