Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File:                     DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier:          xJ9wGeHCX6ZkNaZbiaqzSTbLUBCRT+C6WaKrymRNA4o=
Subject key identifier:   D6:F0:70:9E:E8:58:F7:CC:8D:3A:09:B9:B1:6F:CF:4E:5D:AD:B4:F9
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer:       /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial:       01A001DD367A5B75E21219BC884BCD1D5766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number:          130D
Signing time:             Fri 14 Aug 2026 20:01:09 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:09 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:09 +0000
Files and hashes:         1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: RL3gGZy+zuq9JEgjIzlARJPXJoYe3V5eyCjqoNmTvj8=)
                          2: SxljHk2cGiaCqx7oBYorH1FyNLM.roa (hash: X0K5Gb0sXyJIajhaLNptLUdlUrzJv1KHea1ZlF2NI+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:36:7a:5b:75:e2:12:19:bc:88:4b:cd:1d:57:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
        Validity
            Not Before: Aug 14 20:01:09 2026 GMT
            Not After : Aug 15 20:01:09 2026 GMT
        Subject: CN=d6f0709ee858f7cc8d3a09b9b16fcf4e5dadb4f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f4:d6:2e:ce:61:3f:97:ce:10:16:36:cf:dc:
                    af:e1:0c:29:cc:62:e6:36:eb:0f:54:f1:f2:f4:e7:
                    82:1b:68:bc:70:83:1c:09:43:a2:54:48:9a:d0:4b:
                    0a:3f:46:1c:76:92:41:a3:c6:bd:f7:4a:92:87:2f:
                    8f:e9:78:f3:ee:51:77:cb:f0:3f:f0:e1:5e:b0:25:
                    28:8b:1d:55:52:dd:94:ed:b5:02:2b:9a:d9:83:38:
                    ea:38:99:1a:64:84:43:5b:22:06:98:88:51:f4:b8:
                    db:95:5d:49:56:8f:8f:65:84:d6:a3:3c:db:c1:ec:
                    e3:20:4d:c7:36:d5:5a:8a:27:0f:64:12:25:ab:6c:
                    d1:64:2d:e9:22:48:d0:3d:10:d6:36:95:5a:68:af:
                    df:f4:f8:08:31:a7:93:20:01:d0:ff:74:40:75:b7:
                    96:7f:0f:e3:77:79:e6:1a:46:ed:aa:d5:02:31:67:
                    e2:0f:ee:20:8e:41:de:16:32:36:80:12:61:e6:80:
                    fb:0b:2b:19:b9:70:32:ba:e1:14:fe:cd:07:f6:6f:
                    2a:e2:bf:04:9a:85:2a:3f:1e:a0:83:7d:db:75:3d:
                    13:89:d7:d7:7e:f5:1f:f2:8e:c7:76:50:61:8a:5c:
                    9e:0f:56:bb:a4:88:a9:eb:8a:98:30:1d:07:1b:69:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:F0:70:9E:E8:58:F7:CC:8D:3A:09:B9:B1:6F:CF:4E:5D:AD:B4:F9
            X509v3 Authority Key Identifier:
                keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:73:cb:88:26:f2:25:94:b7:1f:2a:98:62:2f:ba:f2:53:0d:
         1e:8c:55:41:80:60:9d:78:cf:22:c4:58:e3:e0:82:f4:1d:8a:
         69:76:d3:6d:4d:9a:97:85:4b:b0:b4:3c:44:7f:02:17:72:ba:
         b4:a6:42:d3:7a:97:3f:fe:3e:c0:6e:4c:5f:1f:00:de:a4:01:
         7d:78:65:ca:1d:35:49:19:60:e3:42:56:15:a8:f0:bb:e9:b0:
         a6:8c:1a:1f:44:8d:c2:16:2c:ab:ba:c5:c2:2e:74:2b:b3:0e:
         7d:b6:80:34:22:55:06:40:02:bd:35:0f:86:0b:8e:c8:8c:3c:
         19:ed:2c:c5:a2:5f:cc:0e:15:21:1e:bb:c8:cd:23:44:3d:67:
         35:3c:60:bf:cd:57:b2:ba:38:8a:e5:97:2c:57:ba:5a:b2:e9:
         8c:1f:31:34:78:43:5b:35:b8:6a:fa:ee:37:ec:b9:6d:a1:96:
         20:6c:41:a0:90:1e:31:4d:11:2c:94:bc:66:af:23:99:28:70:
         55:91:36:70:cb:9b:22:e9:f9:f4:d8:7c:59:bb:5f:3f:05:cf:
         fd:10:51:da:9e:98:81:ef:71:c1:13:33:9a:54:b4:58:d3:ee:
         f4:29:0f:a9:ea:db:72:37:27:db:10:32:76:d2:9b:0b:94:16:
         b9:0e:0e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:28 2026 by rpki-client