Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File:                     dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier:          N3ZIbDaYQchx6k40U6FTf6bNjCWgMQ3TM/yKnfxiM94=
Subject key identifier:   B8:8B:47:13:FC:BB:1C:6D:EE:03:51:EC:AC:6B:A8:BF:07:16:79:9E
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer:       /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial:       01A0B6898B69439CF10EE19290D419D93BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number:          153A
Signing time:             Fri 18 Sep 2026 22:01:02 +0000
Manifest this update:     Fri 18 Sep 2026 22:01:02 +0000
Manifest next update:     Sat 19 Sep 2026 22:01:02 +0000
Files and hashes:         1: B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa (hash: nyiUF3Zt9sMp6+mzeEZ8PMtjO/iACI+KfmNy9BotXDk=)
                          2: D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa (hash: dH6am4VhkjdQhWRQqbXQ4D/HbErjXar5HVgXeANi9W0=)
                          3: Lp0vHH3sV5CmRox_CW0AyUEO49A.roa (hash: HnRMr5r2HkpjEYviPbeXFZfwzUunRvvI+wgZvCnFlCc=)
                          4: c6nKpma73pYWxvMGKppaadDfEFw.roa (hash: vhO0PPLdQXMMpfgBSaG37tdr8r6MbA4mP7J/LJzhZao=)
                          5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: txAQOtrbfwnhpyAD9tpYUc4GnA/D3h6qdhiYStak1UI=)
                          6: jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa (hash: K41n6g6IzXx6vx3vFplymreUJX4uIZoX2K6TNqcNUyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 22:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:89:8b:69:43:9c:f1:0e:e1:92:90:d4:19:d9:3b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764928a97be955377013d382c62940e950dd212b
        Validity
            Not Before: Sep 18 22:01:02 2026 GMT
            Not After : Sep 19 22:01:02 2026 GMT
        Subject: CN=b88b4713fcbb1c6dee0351ecac6ba8bf0716799e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:37:37:a8:4b:a4:37:bb:d6:2b:f5:79:12:
                    8f:4e:dd:e9:f4:d9:db:54:ba:c5:c6:a5:71:8a:1d:
                    47:72:0c:e8:37:d1:97:8a:b4:ab:61:ad:e0:40:1e:
                    cd:db:c0:23:c4:a4:80:14:78:bf:f3:2b:cd:4a:27:
                    36:da:ff:ad:f9:3a:57:f9:6b:11:ad:3d:7f:76:a6:
                    f3:50:f1:52:77:1a:e5:95:d5:cb:01:83:84:54:53:
                    3d:48:0c:77:1b:6f:f9:c6:38:03:32:f8:61:ad:a0:
                    92:15:25:25:88:7e:07:93:ff:d2:60:12:a2:4b:be:
                    71:aa:39:84:64:60:10:df:d7:02:4d:ac:09:eb:35:
                    8a:31:cd:d8:38:f9:f4:33:48:ba:6f:b5:c3:59:b3:
                    dc:3d:a9:bd:dd:58:f9:5d:66:21:12:97:86:84:80:
                    79:89:a1:96:4d:99:21:d6:88:00:90:04:5b:6d:c9:
                    30:21:f6:12:cb:f7:bb:5d:60:fe:10:1d:cc:6b:a4:
                    e3:d6:90:8b:4f:23:56:fa:cb:ca:dd:5f:61:e3:33:
                    07:97:a4:e0:de:b9:c2:ed:d4:4d:3f:37:6f:ca:ec:
                    3f:60:65:67:c2:3f:ea:99:fc:73:e8:61:e9:de:e6:
                    1d:fd:a9:14:47:22:07:65:2d:11:cb:fd:26:4e:d1:
                    fa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:8B:47:13:FC:BB:1C:6D:EE:03:51:EC:AC:6B:A8:BF:07:16:79:9E
            X509v3 Authority Key Identifier:
                keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:1a:6c:d1:cb:0b:20:ac:2b:78:b3:6a:27:fd:57:0d:76:f8:
         04:82:1e:60:2e:2c:a6:fc:4e:20:ec:e9:c1:37:df:41:26:b2:
         4c:32:71:79:45:81:a5:29:fa:93:01:0f:6f:4f:d8:e0:87:53:
         a6:3a:c6:1f:6e:a5:f6:a1:64:d9:e9:a3:df:29:1e:4c:bb:37:
         2f:90:3d:58:6b:c4:32:82:4b:b5:d6:49:9d:07:c8:05:4b:14:
         93:60:ee:d1:c7:4e:d2:71:63:28:fb:5c:73:5a:1d:86:cc:f7:
         f1:bc:e3:9c:d0:19:6d:61:ac:79:55:bb:f8:c0:8b:cb:ef:7e:
         0c:a6:9b:52:87:da:2e:95:ea:d2:94:b1:d8:f4:de:15:2b:6c:
         71:8e:99:80:c5:9e:db:92:a5:87:63:e1:52:4c:a4:28:2e:92:
         5d:8e:e2:24:fa:d0:d2:d1:52:d9:d4:db:4c:23:d1:c5:95:ec:
         d7:98:e4:e6:66:0f:10:13:b3:00:9f:d5:71:f6:f9:21:af:a4:
         8b:0a:be:5a:c2:97:7e:64:8c:ac:c1:19:b7:c3:b7:3e:6d:90:
         78:49:46:1c:3c:13:94:7c:90:45:ab:b2:b6:d8:61:17:67:be:
         59:e3:b0:2c:a2:df:fb:db:31:98:24:c4:c4:6a:85:ad:2d:a5:
         a8:33:ee:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:13:41 2026 by rpki-client