Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File:                     DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier:          p5PR+XQ0AMcYEwgMqjMEh7YK7/PhbftvjPt/+WbI2ao=
Subject key identifier:   BC:D9:1F:6E:1F:CA:58:3B:79:9C:5F:BA:CE:AF:A6:EC:71:74:30:9A
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer:       /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial:       01A0B5E45282927C283DE86B99C1140AC607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number:          0DBB
Signing time:             Fri 18 Sep 2026 19:00:34 +0000
Manifest this update:     Fri 18 Sep 2026 19:00:34 +0000
Manifest next update:     Sat 19 Sep 2026 19:00:34 +0000
Files and hashes:         1: 4mvw711lnQzyvs4Hvdkp66DN8WA.roa (hash: cOfCZrF6cE78BmpoYXmsaMPC6thd3G27U3oDjezLwXY=)
                          2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: T28scpljMOflpLr4F53PhcvGYv0RIi1CaMdMDHi7cvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:e4:52:82:92:7c:28:3d:e8:6b:99:c1:14:0a:c6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
        Validity
            Not Before: Sep 18 19:00:34 2026 GMT
            Not After : Sep 19 19:00:34 2026 GMT
        Subject: CN=bcd91f6e1fca583b799c5fbaceafa6ec7174309a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:fb:96:ec:4b:51:45:9d:ce:4f:e9:49:d5:
                    69:92:91:87:bc:0a:fc:b0:40:1d:f8:4c:c4:56:72:
                    92:f2:19:c3:b6:2b:1d:ce:49:ab:95:e7:6e:f1:11:
                    49:4c:6a:58:4e:dd:7d:aa:6a:3e:13:54:ca:06:f3:
                    6d:31:91:86:24:13:d3:6a:ec:db:4e:73:13:05:00:
                    13:99:03:8d:c0:83:61:b4:7c:66:d4:4a:f3:ca:a7:
                    15:73:5c:1b:7e:db:f2:40:67:4b:6d:b9:d9:2e:81:
                    1d:c2:19:30:1d:8e:da:73:14:fa:d1:8f:46:e0:1f:
                    0b:e0:34:b1:f5:25:f1:21:a0:9b:86:26:83:ab:4a:
                    6f:87:54:75:15:1a:ed:89:69:05:99:a7:ba:c8:85:
                    eb:1d:6c:cb:23:61:47:70:89:3d:47:e3:ea:1e:ec:
                    6e:a3:fb:63:3e:f5:e7:32:af:d8:6b:06:d5:8a:19:
                    eb:0f:13:db:cb:65:e0:c2:df:7b:a1:8f:4d:29:ec:
                    09:f9:c9:35:e5:ff:64:6a:ac:4a:35:89:c5:ad:08:
                    3c:8b:39:c5:2b:b1:09:d1:37:4c:9a:eb:96:04:7c:
                    19:b8:a6:1e:f0:5b:0a:95:97:65:c2:97:ed:82:bb:
                    e0:b1:a1:0b:63:03:c3:e1:1b:09:8a:32:fd:c2:2c:
                    fa:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D9:1F:6E:1F:CA:58:3B:79:9C:5F:BA:CE:AF:A6:EC:71:74:30:9A
            X509v3 Authority Key Identifier:
                keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:8c:90:3d:da:75:ce:4d:11:48:34:4d:bf:1b:5b:d7:3f:0e:
         88:ca:1a:91:80:89:0a:65:da:9e:83:48:8e:dd:60:ec:fe:d9:
         44:7d:53:6b:05:d5:63:a3:63:b8:e5:a2:db:a0:35:68:54:e9:
         e1:06:93:77:b0:c6:33:d3:ef:db:e9:16:49:6b:64:ce:ca:25:
         6a:0a:db:51:2a:21:42:9a:b7:8f:bf:a4:33:bc:06:3b:60:e4:
         80:a9:c9:27:04:30:cf:24:d2:19:8c:0f:b1:6b:40:5c:15:c0:
         0f:93:a3:e1:1e:89:3b:8c:61:52:d6:d7:2c:6c:0a:06:cc:55:
         bd:5a:ec:3b:c4:3c:ea:ad:a8:f3:83:d4:e1:8f:bd:9a:25:81:
         cd:9d:3d:be:42:b6:e8:84:df:c9:17:06:70:96:0a:f1:cd:79:
         86:0b:62:4c:70:f2:40:5f:f1:ba:ab:63:9a:05:8e:15:b9:a0:
         49:f0:e0:82:ef:7d:45:9a:36:fa:80:ef:b3:43:64:54:a2:f6:
         45:09:ac:a8:6a:43:68:4c:f2:d7:54:43:e4:0f:e2:82:a6:a5:
         bd:cd:90:09:c2:c0:67:f6:1f:59:30:44:29:41:84:80:0c:d7:
         0d:87:8b:b3:34:b5:cf:54:14:27:b8:ce:5b:7e:ce:9a:d2:f6:
         75:05:98:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:10:24 2026 by rpki-client