Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
File:                     DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft (raw, json)
Hash identifier:          u63RZkph7MgQPRYzAnnDoKfC0I+JVbQ9RgwB7UiSaWs=
Subject key identifier:   57:F6:CB:3C:76:20:C0:07:04:B8:67:72:D0:FC:B6:8D:07:22:B0:BB
Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6
Certificate issuer:       /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
Certificate serial:       01A0046FCF81948E4863F98D003B77E134DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
Manifest number:          1A0D
Signing time:             Sat 15 Aug 2026 08:00:31 +0000
Manifest this update:     Sat 15 Aug 2026 08:00:31 +0000
Manifest next update:     Sun 16 Aug 2026 08:00:31 +0000
Files and hashes:         1: 38zDD4es76pMYfxWO9Kebz-WjWM.roa (hash: XhOYbvn2vBE0qAcPQlydDXoWbTL6inMfuQq3MWi5org=)
                          2: 47ifkKzolp3We1XOZB7ABGdtz3o.roa (hash: ZOzWEMjHn4XkxA4iw//kHkM6kX8r7Mzovz1lPBYdzEM=)
                          3: 52hDP3-ByQHgxfz5k5nyAXlJACs.roa (hash: CRx9eNE+otK+xDf1eK31D30RGTui93OxIqmdpwAHeSI=)
                          4: Bcg7UAJvSkwZBrcUqv0x5Az49IA.roa (hash: 0ozhX8g/mw0yc94TISX70eWBPdkOuJmTnBUgWffqex8=)
                          5: DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl (hash: b73PCuaV5fbmz/SdkRbmD9Y52fehFEBfuYVaD8q3UKk=)
                          6: DrB4t_1xkvp2Dgm6O07Z6v2FWEE.roa (hash: zuCZB/urT4sKiPYtjrx8fYkL4fyeLc675iKf1n7+I0c=)
                          7: EVC6qGwfCrszAWIa6NrJgfF3FOc.roa (hash: DCMsxDwhcj1FYGt8tzMR5PXLqtpUWyGhfgYmt4MalDo=)
                          8: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (hash: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4=)
                          9: IHH1-9eElmx6vzHS6CSeWaasjPI.roa (hash: 8l2d1ctkyvi2wD+52VfoZuD0gMg1JAj8dTjXtq4Gejg=)
                          10: OTrcuVgT2KGth-4ao2nFNpPxJV8.roa (hash: kDRTc7zw5QdnfyH9tTiJIXGOA8WOGvBsDzJJaWbcK+c=)
                          11: PhY8VpVCs-zI4pzSl1AlpcBUZyA.roa (hash: 0G8y+xYpap3HjnisbsPxH+9qWeTV3B8A8wt6Q+7UoOw=)
                          12: Y1OMIxkXJrvMhItcpsB6ZaRauGE.roa (hash: nR0JpFQFbz7bh4jT2eomGOeCYKnUB5v4/GBk+24NYXw=)
                          13: adgxxWCr4tdHIRHz-5o7Cl2CeCw.roa (hash: j73P2J+Eqx3LN/ksUURMXjJE1GVIstHtsDxZoQlR3lI=)
                          14: dhIuimCZB4PO82Y4wVepjTgpJks.roa (hash: 9kt45hDGOHdn87okzKM6GN9rkhMMHrV6hwVUBlGJ+Zg=)
                          15: jkqGxR1193tH-HpG6FCidOMGlew.roa (hash: m1WsC0zkTDIRW5PeFfcaixOxVBhdNi36TSkJPA9LJqw=)
                          16: lxiAgfluoVaNRQVi4iLsO1-qGug.roa (hash: oZ2uHGzF3a+GhzLpFCrGatkEqX80eZc8lpHPq5xBtlA=)
                          17: q3rbGoECoqVzoiEg67F8Le7vz1Q.roa (hash: u7wuzSzxMHXwNLDoDAPzL65dXF8XL5bh5VXZVXeIDP0=)
                          18: rYFpWuZruIrOhwpWXMP_IZ4tVUw.roa (hash: /VBan9NMmf+zcxvPCNJlk8CtUTHsxz+gzK37fTWPJe4=)
                          19: v47skhEQE84BTabypqito2-aQcw.roa (hash: CxzVAARRwuzZYbxF0QwhrV2Mn+y9yUJX8XBehR9owUI=)
                          20: wDIPiFcpX1Nx1PnbgyJVudeaXoI.roa (hash: +eCQgpLGESeuv6nhdrhJ0WB9Ii8OiFx4YDBKHXoFeBE=)
                          21: wdOcXKO_nHug7XQx40TtUWzLUsM.roa (hash: Ueb9fAlff6oWbWvuQdTKkKgLret/3JZuhuE+MXfwQBk=)
                          22: zOhU8EUJw-jXT7oA8LDWtSHuNOw.roa (hash: qriExcmdT0xVkVAzyPuL6OCSHElFLzPBanJGO1rmv6A=)
                          23: zVjweoMYjQEop927xOWCjXM6xSw.roa (hash: AStpL3MDYMfeQtwUDgyamky+EYtSLylBM5r0UG73jzY=)
                          24: zvpbW0AJBnBw0bQshYm2MUX9XVk.roa (hash: 5lICS1+N8TUyxPCwI2DL37ljYI8YB9nq4jlyXqCwtCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:6f:cf:81:94:8e:48:63:f9:8d:00:3b:77:e1:34:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6
        Validity
            Not Before: Aug 15 08:00:31 2026 GMT
            Not After : Aug 16 08:00:31 2026 GMT
        Subject: CN=57f6cb3c7620c00704b86772d0fcb68d0722b0bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:d9:89:d3:db:a2:0c:a9:0a:d7:03:e7:15:
                    a8:0f:7d:1c:b4:4a:54:2b:1f:22:90:cb:21:2e:1e:
                    36:62:89:50:e0:5c:17:d3:d6:dc:a2:0b:72:a0:28:
                    05:58:c5:e8:0d:fe:10:b7:69:9b:0c:b9:f8:3e:a5:
                    7b:28:e2:01:b9:d5:af:fb:08:d9:46:8d:c4:b7:de:
                    1a:41:e3:05:1f:4c:be:2d:56:9c:c4:17:76:14:32:
                    b4:55:8c:92:b3:9b:e1:a3:ba:90:96:d5:21:87:d4:
                    f7:df:07:8c:f6:71:1e:77:ad:cd:a0:f0:28:3b:90:
                    36:9b:28:c7:aa:a1:2c:ee:41:32:61:24:c8:34:36:
                    11:2b:f6:26:dd:a6:9a:a4:d7:f6:d1:57:b2:fa:9b:
                    ac:8a:3a:ad:bb:a7:3f:56:83:44:c1:cb:eb:8d:4d:
                    a4:67:64:59:fe:19:95:ce:b0:f8:e7:11:db:1f:e8:
                    70:0c:1a:40:cd:d3:4f:20:00:73:a9:9d:27:2a:43:
                    97:cc:ab:b8:9c:38:3a:a8:82:8d:3b:99:77:70:c0:
                    44:ba:ca:d9:6b:75:5b:7c:65:5b:d5:3e:5f:80:ae:
                    d7:51:ef:42:5d:9f:6d:84:7a:28:a8:f5:e3:fd:dd:
                    5e:f7:25:bc:a4:63:62:9b:f1:de:23:a5:91:ee:4a:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F6:CB:3C:76:20:C0:07:04:B8:67:72:D0:FC:B6:8D:07:22:B0:BB
            X509v3 Authority Key Identifier:
                keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:09:4d:89:29:fe:eb:13:69:c4:77:a5:31:b3:d0:4f:36:e8:
         73:79:73:35:ee:59:f7:a6:15:38:95:53:a5:22:38:bd:70:f6:
         35:92:e0:b6:89:38:ea:f2:d2:ad:a3:a7:d7:f3:9f:4d:3d:95:
         71:88:2f:53:85:76:62:0f:71:0b:b9:29:3f:6d:73:83:65:03:
         43:57:34:f7:cf:88:cf:f2:9b:75:c3:f7:ef:a7:87:6b:ad:a0:
         d8:b8:c5:0e:44:a7:9c:be:02:5c:4d:81:98:8a:44:8e:e7:d0:
         b6:8c:6e:99:f2:3f:88:26:de:d2:36:b5:55:ff:0f:12:f2:44:
         c4:01:3a:41:72:e7:c0:ac:5a:31:08:de:2d:96:e1:7f:4d:c3:
         77:a8:71:0c:af:c3:f7:d0:da:9e:14:94:56:5d:03:fa:71:f3:
         49:07:32:fa:73:ba:dc:33:59:28:cd:2e:8f:c0:18:71:fc:0f:
         13:cd:94:9b:1f:43:5b:0d:f6:75:27:5e:8e:ae:dd:e2:39:70:
         10:04:cc:39:22:4e:d5:2c:9e:e9:97:fe:91:f2:e4:ca:43:4c:
         c6:3d:6f:4c:ba:ed:e8:92:7d:eb:9d:6d:0b:64:8f:04:0b:0f:
         e1:0a:a0:6b:4f:e8:95:67:72:81:e5:41:47:e1:96:27:8a:d3:
         07:5d:6a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:54:30 2026 by rpki-client