Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
File:                     Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft (raw, json)
Hash identifier:          GM8h3a+oHxEOkPxcMQ0zneUWV6IrgWav/OhwPhf6Tvw=
Subject key identifier:   28:9E:8B:E7:79:33:55:8A:B6:10:A4:49:54:C2:1A:16:F1:92:AE:9A
Authority key identifier: 0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
Certificate issuer:       /CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Certificate serial:       01A14FF5DF12B800FB8B3854E426C38A3B61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
Manifest number:          0129
Signing time:             Sun 18 Oct 2026 17:01:15 +0000
Manifest this update:     Sun 18 Oct 2026 17:01:15 +0000
Manifest next update:     Mon 19 Oct 2026 17:01:15 +0000
Files and hashes:         1: Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl (hash: bgYD1YgcTfhMPCrsejwULXwTWlFki+9jF+zI4TcCZ5A=)
                          2: P0TSUa_O2R0WqImkYTbqNvp_xSA.roa (hash: FdEGT+YAusCANOcQeGpBhtrd2xw82WN4CDsU+y058Uk=)
                          3: _Q5u_aa4oQ-ih3YeJ-eiQhiEGDA.roa (hash: R9XukPe4DSAWpgSPkCL5g1hxeUwcjBv75r2z5QRzV8A=)
                          4: fz3IBcPUYgyEi3HKy3o15CbAZtg.roa (hash: Xf1iCJJHpif2NVYysmUBCRlEjnut8UfGRj8zHdLVVNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:f5:df:12:b8:00:fb:8b:38:54:e4:26:c3:8a:3b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
        Validity
            Not Before: Oct 18 17:01:15 2026 GMT
            Not After : Oct 19 17:01:15 2026 GMT
        Subject: CN=289e8be77933558ab610a44954c21a16f192ae9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:14:82:61:84:2f:8e:65:87:d6:bf:4d:4d:
                    ca:50:b3:8f:5c:6d:86:7b:04:e7:7e:f2:da:6f:24:
                    40:e4:4c:3f:23:d0:ad:80:12:ca:c7:e4:fd:80:03:
                    62:a3:c2:cf:92:4a:77:e0:dd:30:d0:89:a5:d8:a6:
                    ed:07:03:f0:27:2f:77:47:77:16:a1:90:ba:14:90:
                    9a:4a:02:87:16:06:ae:da:9e:1a:fb:72:8c:c7:d0:
                    2c:e8:e5:a7:26:b4:94:5f:7e:9b:7d:2e:8d:1e:ce:
                    a0:41:63:9b:6a:da:07:2e:46:35:f6:2b:f6:4d:20:
                    a7:60:6a:aa:87:ff:a8:66:17:40:1d:82:7e:ba:71:
                    a8:8a:25:d1:51:38:68:88:80:d8:c4:c7:da:4a:ee:
                    98:ca:56:a9:0e:42:dd:57:10:f5:97:49:8b:b4:96:
                    c7:04:c5:46:b0:fb:f7:7e:b0:e9:f8:26:1f:68:be:
                    a7:4e:98:e4:b7:82:cf:1e:d4:20:f2:8a:f1:35:6b:
                    09:e1:b8:d0:08:50:0e:7e:98:cd:e8:ff:0b:7d:ea:
                    22:ae:4a:0e:6c:6a:2a:67:f1:75:41:af:30:18:4b:
                    91:22:d3:2f:30:66:9d:4d:b3:cc:fc:dd:87:7e:e1:
                    f5:6b:07:9c:53:b1:dc:07:e2:d6:12:7d:e2:ef:21:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9E:8B:E7:79:33:55:8A:B6:10:A4:49:54:C2:1A:16:F1:92:AE:9A
            X509v3 Authority Key Identifier:
                keyid:0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:43:ff:78:c8:e8:11:09:a9:06:b2:14:39:db:d3:72:c2:00:
         30:50:d4:b2:89:f5:d4:03:ec:65:b2:e1:c1:cf:93:c7:53:ef:
         16:c5:cf:5d:3c:90:53:a8:ab:31:73:cf:38:f4:46:a4:9b:4f:
         3c:63:33:0c:fd:47:44:cd:53:fd:7e:04:00:1d:80:5a:ea:4a:
         8b:07:1e:ce:81:17:20:4c:3e:86:de:6c:70:a7:1b:ee:00:31:
         51:78:54:ba:45:10:5b:3b:1f:6f:25:e4:65:51:75:77:14:31:
         c6:9b:85:f6:98:48:d2:0e:eb:40:98:fa:87:fe:f8:b9:65:89:
         b1:57:31:89:ae:bc:c7:21:6d:6a:cb:7a:3c:45:96:c1:98:53:
         2d:6e:c9:c9:ed:9c:c5:e0:2c:2d:65:37:7c:a9:ef:3c:25:cf:
         7e:27:ae:bd:58:fa:a3:ee:fd:69:43:63:16:53:6a:5e:e2:6b:
         0f:43:91:eb:cd:e8:6e:aa:59:e1:1d:a0:90:0f:e7:5b:a0:7f:
         b6:72:d2:6e:80:b8:4d:80:70:8f:89:af:51:cb:b5:56:c6:24:
         ef:08:b2:9d:3f:30:cf:28:8e:28:a8:68:f1:16:a2:32:9b:9a:
         66:75:bc:00:eb:80:fd:0e:fb:5a:5c:a8:57:9d:0a:46:42:18:
         3e:cc:68:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:44:42 2026 by rpki-client