Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
File:                     DY_I34T78qtAQS5tSt_3wbhKWy8.mft (raw, json)
Hash identifier:          3fByKGtiLA1A3cv2K9xvipoeQ3v33mzHh0yUJBY4KEA=
Subject key identifier:   F5:4A:11:DA:EE:6F:0C:27:E5:F9:90:FB:3D:16:D0:81:43:E4:F4:DD
Authority key identifier: 0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F
Certificate issuer:       /CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
Certificate serial:       01A09C24DFD0A915CB2A5ABE977B8592FEA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
Manifest number:          122A
Signing time:             Sun 13 Sep 2026 19:00:57 +0000
Manifest this update:     Sun 13 Sep 2026 19:00:57 +0000
Manifest next update:     Mon 14 Sep 2026 19:00:57 +0000
Files and hashes:         1: DY_I34T78qtAQS5tSt_3wbhKWy8.crl (hash: FBbpYPe1Wjl9u/7gB6MyK/jzCAHyh2x/EIgwJvtrRKc=)
                          2: EAp4uNAc6f0HymDOmRK8myDrjdo.roa (hash: pmfGtVbkHJrjhdQXgKEkAIluH1FlB2AL+HRSoa36574=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9c:24:df:d0:a9:15:cb:2a:5a:be:97:7b:85:92:fe:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8fc8df84fbf2ab40412e6d4adff7c1b84a5b2f
        Validity
            Not Before: Sep 13 19:00:57 2026 GMT
            Not After : Sep 14 19:00:57 2026 GMT
        Subject: CN=f54a11daee6f0c27e5f990fb3d16d08143e4f4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3c:2b:bf:86:c8:ea:ba:06:17:83:1d:e9:fe:
                    c0:43:ed:c4:19:3b:90:98:1d:03:9f:5b:38:70:04:
                    15:e5:c2:9d:c7:4e:87:04:b2:40:0b:69:cc:c9:c1:
                    ea:81:79:d1:b2:d9:b6:dc:98:9e:ed:93:dd:fc:91:
                    a5:6d:cf:24:2c:60:93:90:1c:b6:e9:bc:ce:0e:c1:
                    de:bd:72:11:eb:a3:0e:03:70:65:11:2c:9f:86:26:
                    49:84:51:5e:e7:2c:4b:0d:60:99:f4:87:fa:cc:42:
                    81:2e:1e:a1:13:49:bb:12:84:2f:1a:45:d3:62:ee:
                    c8:e2:df:aa:6c:ad:be:0b:1a:74:40:59:ec:60:7f:
                    8c:24:8b:11:30:c9:fd:73:ac:ea:91:ee:f5:80:bc:
                    64:6b:ab:30:43:44:81:22:f4:39:03:6f:cb:f4:b2:
                    9c:a0:72:65:08:04:7a:eb:c2:8e:96:c4:d1:0b:38:
                    ae:e9:bc:48:3c:66:d3:c7:a4:a4:50:83:2c:84:d9:
                    96:f1:08:db:88:ff:ac:5c:95:f5:e7:51:70:a6:6c:
                    8c:0c:94:0b:fc:d2:0d:b2:15:be:f6:1d:38:0e:48:
                    8e:f5:f6:07:28:4e:51:af:5b:f4:96:40:c9:dc:ac:
                    8f:50:11:ae:a3:d6:88:3d:0f:1b:e8:eb:23:33:8e:
                    04:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:4A:11:DA:EE:6F:0C:27:E5:F9:90:FB:3D:16:D0:81:43:E4:F4:DD
            X509v3 Authority Key Identifier:
                keyid:0D:8F:C8:DF:84:FB:F2:AB:40:41:2E:6D:4A:DF:F7:C1:B8:4A:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY_I34T78qtAQS5tSt_3wbhKWy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/ece2eb-83fa-476b-ab98-688762bb985e/1/DY_I34T78qtAQS5tSt_3wbhKWy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:9b:b8:02:75:ed:47:a7:4c:0c:fe:1d:7a:2f:19:35:35:08:
         88:d3:82:fb:b2:d2:c7:96:ca:3e:10:4c:0f:48:65:27:80:66:
         7b:a0:82:1a:52:5d:08:84:ff:6c:a9:3e:69:a6:08:12:33:45:
         fc:66:1c:20:37:98:1b:a1:a2:af:65:92:a6:4d:ab:d6:dc:e6:
         fd:cb:65:4c:f1:cb:a9:42:aa:c5:bf:26:02:94:6b:cd:d5:de:
         11:40:9d:22:58:bc:20:98:00:f5:e0:8a:cd:bf:95:02:6c:7c:
         65:28:35:82:3e:fa:e8:71:72:f8:08:bf:7e:be:53:d5:a8:14:
         da:f6:cc:56:3f:e0:0f:77:9f:45:f1:21:14:94:d8:b2:4f:42:
         36:ec:a2:33:b3:c3:c9:a5:67:c4:ea:b8:64:a7:c9:c7:0e:60:
         5b:e7:be:f1:a2:38:94:e5:28:5d:d3:67:18:b9:b3:16:3d:b6:
         55:b0:35:0b:e2:5b:55:9b:bb:df:2d:9f:8b:08:4e:ac:8b:01:
         75:71:e3:35:24:58:3d:ac:c6:de:9d:3d:a6:40:08:dd:10:99:
         c9:d8:61:da:84:15:84:21:f3:b0:90:b5:07:f4:29:ce:52:2a:
         b6:29:8f:25:51:b7:c6:b5:d2:22:7a:66:d9:35:a3:47:72:d4:
         a0:a7:00:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 00:40:12 2026 by rpki-client