Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File:                     D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier:          h+7uEUvr0mfRgWth6l7NdvgyIjL3HWxotJodwvihqac=
Subject key identifier:   7A:36:64:3E:23:35:76:23:8D:EF:37:99:F8:D6:76:E6:1E:4B:0C:61
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer:       /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial:       01A140B9FD7A49DE83D367EF4ABFB310B482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number:          1995
Signing time:             Thu 15 Oct 2026 18:01:33 +0000
Manifest this update:     Thu 15 Oct 2026 18:01:33 +0000
Manifest next update:     Fri 16 Oct 2026 18:01:33 +0000
Files and hashes:         1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: mp63nvyYKPe4C0WM3dWvfOO33ZkJcRuXjktKvAAfwDc=)
                          2: aitD5UH29rGUG8_oXWsc-YfKHvk.roa (hash: fXAcocJ6AW36LCgsDsOqq0Ar/nfeKZ+crNQ7BTk4Lec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:b9:fd:7a:49:de:83:d3:67:ef:4a:bf:b3:10:b4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
        Validity
            Not Before: Oct 15 18:01:33 2026 GMT
            Not After : Oct 16 18:01:33 2026 GMT
        Subject: CN=7a36643e233576238def3799f8d676e61e4b0c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ff:1a:56:23:c2:46:e8:c4:36:be:f0:d1:ab:
                    db:78:f5:4a:4c:e7:89:19:3d:26:9e:a8:5c:76:f0:
                    41:15:41:21:43:6b:e5:ce:ce:bc:c6:83:ad:00:f7:
                    fb:ff:79:de:61:86:1f:3c:83:a6:55:6f:a5:26:fc:
                    28:47:0c:29:d3:e0:4c:22:62:11:13:00:21:47:34:
                    47:61:8d:06:3f:16:32:ee:7d:fe:2e:f0:f9:6f:7e:
                    ba:26:0f:cc:11:83:bb:5b:5b:67:d8:22:45:46:af:
                    60:71:44:10:0a:62:9b:51:45:e1:80:ee:62:34:46:
                    b4:c4:e3:33:6e:03:6c:ba:95:31:ad:e3:d0:3f:4e:
                    8a:df:55:11:cc:75:72:a0:59:81:d4:ec:4e:a6:66:
                    13:43:85:47:44:9f:b5:0c:3f:2d:ad:8f:b3:cc:1d:
                    d6:81:f3:55:04:d7:6d:ce:7c:0f:5c:bd:28:81:d2:
                    f8:71:53:5a:bb:70:ed:0a:6b:ee:4b:70:58:0c:81:
                    b7:96:7f:d5:d9:1b:7b:3b:45:38:12:d4:a2:f0:3d:
                    5e:38:12:f8:36:eb:bb:a5:14:7c:f6:54:17:dd:94:
                    86:fd:7f:66:ed:6b:33:9e:a6:ec:23:a6:ae:a8:32:
                    ea:b0:f2:a4:80:16:77:8d:5a:7d:5e:04:e2:bd:72:
                    24:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:36:64:3E:23:35:76:23:8D:EF:37:99:F8:D6:76:E6:1E:4B:0C:61
            X509v3 Authority Key Identifier:
                keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:3e:cb:2c:5a:17:62:08:2a:39:af:e3:ed:55:d8:3b:ac:53:
         65:7b:43:1e:2e:47:a9:59:05:ec:f9:d8:2a:d1:6c:85:7b:ba:
         f0:5f:97:01:8b:72:68:00:a0:a8:16:6d:b6:a8:c0:6d:25:0a:
         58:7d:58:72:75:69:a1:dd:09:fa:4a:43:be:f0:20:12:84:2e:
         d3:22:63:b7:8b:45:22:db:a5:9c:71:10:a6:40:5b:8f:d7:8b:
         cc:9f:e9:3e:b2:dc:83:17:bc:b0:e1:71:c9:b7:b0:ed:13:8b:
         f2:28:6e:c1:cc:b6:83:c7:18:69:a9:73:10:48:05:70:3d:9b:
         f9:61:05:dc:c4:ea:25:c2:cf:c3:12:db:be:ca:a3:fc:e6:fd:
         4e:c0:ab:22:cc:48:62:fd:63:15:c0:c8:cf:64:18:79:be:c8:
         0d:3a:68:25:0a:66:43:e9:19:7b:c8:a0:49:86:6d:ea:1b:b3:
         51:a7:2e:65:7c:f0:62:ff:78:4c:e9:e7:4e:d7:bd:00:26:a2:
         a3:ef:e3:6c:4b:ed:6a:23:97:06:31:18:62:26:a6:c0:cb:c9:
         07:c4:b2:ac:13:67:74:8c:4f:50:fa:aa:4f:32:a9:58:41:91:
         df:e5:e9:38:9e:fe:76:85:d1:7b:ab:9a:99:53:fe:93:16:d5:
         19:86:f3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:41:54 2026 by rpki-client