Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
File:                     DyKg7jvG4y2JLt3iV8u3mRefLNY.mft (raw, json)
Hash identifier:          wL06fvVksOfVk4UGP8ICIBMt+dMwt8CGha4UGfot2Wo=
Subject key identifier:   03:15:44:C0:2E:EC:AA:3D:B3:DF:DB:F0:02:12:49:15:DF:9A:52:7C
Authority key identifier: 0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6
Certificate issuer:       /CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
Certificate serial:       01A00093EF03BF4B3EAC7D7EE08ED9A9BA41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
Manifest number:          0B6B
Signing time:             Fri 14 Aug 2026 14:01:29 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:29 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:29 +0000
Files and hashes:         1: 6anxR7oWcscDd04QL41XaD9H2mI.roa (hash: HOaKAJ+9l8ZBJN2kLFM0Go13VYLLmXxM5vLOU8G4dHg=)
                          2: DyKg7jvG4y2JLt3iV8u3mRefLNY.crl (hash: U1Mw1rV9qaz2CMzVmMb1zY0AjbkOk2HV/yoHh5h0T3Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:ef:03:bf:4b:3e:ac:7d:7e:e0:8e:d9:a9:ba:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f22a0ee3bc6e32d892edde257cbb799179f2cd6
        Validity
            Not Before: Aug 14 14:01:29 2026 GMT
            Not After : Aug 15 14:01:29 2026 GMT
        Subject: CN=031544c02eecaa3db3dfdbf002124915df9a527c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fe:03:32:c7:89:1c:fb:1c:b1:ec:32:3f:69:
                    83:36:30:72:bf:24:76:76:c6:3b:f2:1a:ab:b3:ad:
                    67:dd:15:0f:9c:ab:d8:d4:f9:1f:5f:93:ce:74:77:
                    40:55:8f:c1:40:42:4e:f6:47:70:ac:1c:e6:17:95:
                    30:a6:03:5c:2e:b9:7e:34:f3:e0:b9:0b:06:03:c6:
                    c1:7f:b1:3b:90:89:39:49:04:06:b2:46:c6:44:dd:
                    0e:b8:ec:4f:e8:ff:03:18:4e:8b:e4:cb:8e:15:c6:
                    b8:4d:64:5e:b6:8f:6f:04:c0:d9:39:d7:30:59:82:
                    81:c7:a7:6a:28:f8:0f:5a:4e:86:83:22:22:5d:52:
                    87:c0:12:ac:54:1a:01:2a:5a:4e:33:47:a7:96:78:
                    62:f7:ce:11:65:fc:81:54:7e:3e:a5:aa:0b:9e:d4:
                    61:7d:7f:a9:7c:b7:1f:ea:09:cd:ce:eb:8f:52:2b:
                    1e:a2:78:a6:d4:9e:e3:46:1e:47:b4:64:01:7a:92:
                    3a:5a:df:e7:b5:a9:c6:78:1f:61:1e:50:a6:f2:df:
                    98:48:68:4c:72:8c:d0:07:16:e9:3a:ba:30:84:ee:
                    97:c8:88:f7:7e:45:29:0c:29:f8:53:d0:8e:7e:d5:
                    4f:c2:f2:4f:af:eb:6f:dd:5e:65:21:d6:0a:e9:a7:
                    31:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:15:44:C0:2E:EC:AA:3D:B3:DF:DB:F0:02:12:49:15:DF:9A:52:7C
            X509v3 Authority Key Identifier:
                keyid:0F:22:A0:EE:3B:C6:E3:2D:89:2E:DD:E2:57:CB:B7:99:17:9F:2C:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyKg7jvG4y2JLt3iV8u3mRefLNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/3084de-b159-4e54-9ed7-42d67840944d/1/DyKg7jvG4y2JLt3iV8u3mRefLNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f6:9e:74:0c:1b:a1:f4:c5:20:f4:8c:9d:a1:a3:a3:0e:95:
         34:e1:79:70:fa:3f:4c:ff:94:f2:87:1c:60:c3:a6:c8:ff:70:
         02:74:07:2b:f4:d7:d3:82:cb:25:57:2c:03:bb:c9:f9:b4:8d:
         97:70:85:35:ef:53:ed:04:6e:08:92:e8:f3:85:28:41:f1:f4:
         93:91:1e:79:75:3a:55:ea:24:e4:bc:bc:3e:94:58:45:20:df:
         74:f6:c0:6e:50:4b:06:14:67:69:47:c7:0f:dd:71:21:9b:34:
         8e:aa:bd:0e:86:2e:e5:ee:f0:b4:7b:ea:02:c5:54:b7:73:47:
         9e:dc:2d:44:ad:a8:c3:e1:67:25:d4:ba:c3:c7:e1:02:93:f6:
         a2:7f:6e:35:05:ec:84:bb:22:38:9c:49:e3:70:84:74:f5:18:
         6c:35:e2:3a:0d:d7:02:a5:78:38:1c:db:32:30:f7:ed:ea:35:
         4a:a9:c7:66:e5:69:c7:57:ad:d2:ea:d3:40:bb:52:93:12:25:
         72:68:6c:67:fc:ea:8f:43:39:63:0d:bf:b0:35:54:f5:ef:8f:
         7c:cc:bc:29:5b:63:25:cb:e2:c1:de:f0:2b:23:3a:ec:f2:9e:
         be:1b:5a:30:06:89:28:42:a5:4c:72:6b:56:4e:3a:3c:c2:95:
         40:87:4e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:54 2026 by rpki-client