Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
File:                     DY087TLjYPzUbBY1Vt4oqigksZs.mft (raw, json)
Hash identifier:          zpIbEOP4KzwtbB3isqdotrvD9FupT/HJBm3M/Un7484=
Subject key identifier:   C0:A6:BF:2F:0F:BD:98:DE:C8:E7:09:88:7A:EB:56:DB:A4:88:FE:1A
Authority key identifier: 0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B
Certificate issuer:       /CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
Certificate serial:       01A0AF740FD22E53961020F2999815698644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
Manifest number:          0534
Signing time:             Thu 17 Sep 2026 13:00:14 +0000
Manifest this update:     Thu 17 Sep 2026 13:00:14 +0000
Manifest next update:     Fri 18 Sep 2026 13:00:14 +0000
Files and hashes:         1: 1-nukkIR6QW9cgqOuKheFLpvicPM.roa (hash: E0YmmZeDYH8nWMQd2BPTkT+OQ+zyRbNJxd4dp/aCenc=)
                          2: DY087TLjYPzUbBY1Vt4oqigksZs.crl (hash: kNixv7Jyxw3MMiDmgJNs5b4dgOoi29xfM6QwtarnHHA=)
                          3: rJtFAaihKwhTzfzLn9-a6P1w8XI.roa (hash: B8CZ2EbQTKFiK2knWInh1wLJvgTohC2zNRpfKKdNVRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 13:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:af:74:0f:d2:2e:53:96:10:20:f2:99:98:15:69:86:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8d3ced32e360fcd46c163556de28aa2824b19b
        Validity
            Not Before: Sep 17 13:00:14 2026 GMT
            Not After : Sep 18 13:00:14 2026 GMT
        Subject: CN=c0a6bf2f0fbd98dec8e709887aeb56dba488fe1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:bc:f6:9e:81:33:44:89:78:fe:e4:1f:3d:
                    79:70:90:da:0a:e8:fb:53:f6:2d:99:92:12:af:eb:
                    a1:a2:9f:b0:a4:c5:ae:31:c6:a3:3f:06:67:bd:64:
                    74:4f:bb:e8:43:5f:f5:18:14:98:80:38:0d:5a:8a:
                    50:68:46:56:52:ad:6a:ba:90:69:15:d3:bd:c9:eb:
                    27:78:55:1a:0a:fe:2b:b0:bb:2a:3a:0e:31:e0:74:
                    1f:f4:67:65:77:9a:3a:23:44:0b:92:d8:88:2f:b0:
                    e8:d8:dd:cb:3a:26:44:1f:eb:c3:02:67:6f:8a:19:
                    a1:49:c9:86:68:19:89:bf:3f:26:da:69:ed:e5:20:
                    7c:1d:40:2b:61:a1:36:7d:f8:88:f5:54:4c:0f:bb:
                    29:1e:ff:94:3e:f4:7c:3c:5e:4b:1b:0f:63:03:b6:
                    54:09:85:f1:89:59:61:50:65:d4:ef:60:b5:df:a8:
                    3e:8c:8a:f2:ce:c9:fe:36:d3:44:c4:2d:27:86:fe:
                    36:36:20:77:74:2a:d8:69:a1:e9:a4:1b:db:b7:5c:
                    ae:08:33:0d:f0:0c:8a:7f:21:3b:49:26:be:8f:54:
                    89:2d:ef:e5:ef:f3:7f:3a:79:98:56:e3:48:92:74:
                    de:4f:75:c5:f0:b8:ce:6d:2a:54:23:ce:a6:fe:92:
                    6b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A6:BF:2F:0F:BD:98:DE:C8:E7:09:88:7A:EB:56:DB:A4:88:FE:1A
            X509v3 Authority Key Identifier:
                keyid:0D:8D:3C:ED:32:E3:60:FC:D4:6C:16:35:56:DE:28:AA:28:24:B1:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DY087TLjYPzUbBY1Vt4oqigksZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cb6f7e-e3b8-4d0c-8293-a497b8cbf177/1/DY087TLjYPzUbBY1Vt4oqigksZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:09:14:04:11:a8:2e:8e:a8:55:43:a8:e9:41:d4:ca:86:68:
         75:e6:f7:4f:e7:e9:ef:d3:f2:77:f0:86:98:76:cf:49:a9:15:
         b4:98:dd:29:75:93:51:c7:f1:13:80:67:e9:f3:fe:4c:6f:8d:
         53:7c:1b:56:87:4c:6c:68:8c:69:a9:60:81:ed:07:8e:3f:2c:
         6b:7d:c2:97:60:39:63:7d:8d:c0:3d:d4:2f:58:e4:30:97:c4:
         b6:c5:03:a0:29:8d:69:90:0c:66:f8:1c:56:c1:13:b2:fa:d6:
         02:a5:fe:7c:c5:f2:2a:83:bf:8d:b7:64:f9:61:1b:dc:df:6a:
         bd:1a:2d:1e:8d:fe:71:7b:da:c8:7a:33:d3:24:ac:83:25:3f:
         e8:c9:c6:82:c0:82:8e:75:eb:d8:5a:1c:8d:4f:99:04:fe:1c:
         7d:5d:d2:f6:9e:77:b0:83:84:e5:a8:b3:da:7f:06:f0:9d:4d:
         2d:67:7d:73:28:72:01:34:d0:7f:79:5b:e7:48:65:76:8f:69:
         a7:e0:91:7b:0e:7b:42:1f:cc:be:72:f4:cf:62:a5:9c:fb:77:
         5d:0c:4e:0f:9c:ff:b0:9f:9d:13:bc:fc:85:15:b9:06:0b:2d:
         d7:b0:a8:aa:2a:7e:68:e0:9a:d1:30:cc:28:e8:c0:94:d2:82:
         3e:f0:c4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 22:42:29 2026 by rpki-client