Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
File:                     DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft (raw, json)
Hash identifier:          ZOTF5cL8o3FRsEpymlbV4mC0fb2KjcKvYd+qQ0E+c5Y=
Subject key identifier:   23:68:7D:EC:AA:EF:37:5B:A5:44:A8:5C:A7:72:E9:10:CB:E0:14:DA
Authority key identifier: 0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5
Certificate issuer:       /CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
Certificate serial:       01A119075C31F0B3A2991C50FD82789FB6EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
Manifest number:          1A27
Signing time:             Thu 08 Oct 2026 01:01:15 +0000
Manifest this update:     Thu 08 Oct 2026 01:01:15 +0000
Manifest next update:     Fri 09 Oct 2026 01:01:15 +0000
Files and hashes:         1: CbfPnzkIg630GLdNxKGZc9evepo.roa (hash: OlSSfeY+x6XajlxSO7XTBJeyZDwUAJ2psAjSHgtLxx8=)
                          2: DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl (hash: F7f3Q/8gSqUYu2BDQJiO9oIkz16/QyNzFTYEnu3/0i8=)
                          3: KaCfEz66BVobYaD4JAQbgoR-gKg.roa (hash: y8noCaUxD0ZZ36hzHL6X++bGHmSgDwDhVDPA3PlLSas=)
                          4: e48dFNX7wc3SQhgi8G26wWhECzY.roa (hash: XEOD2QcK006EDHPh16ax+CiiGNzK5DlFCvCqDs8JPY8=)
                          5: gQm12kL8qC8G8fld0ndxKWB7Le4.roa (hash: DZyw6qHuuDne2cu+Q2hXVAXkBqKQX9CgYl0ktuHs/9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:07:5c:31:f0:b3:a2:99:1c:50:fd:82:78:9f:b6:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21b78ce97b0f5fb3d88bf95cfbb08b2fbea8e5
        Validity
            Not Before: Oct  8 01:01:15 2026 GMT
            Not After : Oct  9 01:01:15 2026 GMT
        Subject: CN=23687decaaef375ba544a85ca772e910cbe014da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:66:37:c6:46:49:a2:e7:06:fa:0f:33:b2:8d:
                    0b:03:65:62:bb:c6:d9:29:a0:2e:2a:6f:1d:57:df:
                    3a:d9:31:1c:9b:46:60:01:ab:31:40:ef:fa:d6:bb:
                    9b:94:eb:f2:92:99:0f:ab:4d:90:0c:e9:da:7b:bc:
                    5e:c5:86:7e:a2:fa:85:e9:0c:b5:79:6f:b5:e8:ff:
                    bd:65:66:f1:00:d6:34:44:f4:77:64:29:e8:0e:ee:
                    97:01:12:2e:b4:55:dd:aa:cf:86:34:39:54:8b:d2:
                    28:69:17:cd:65:dc:44:87:80:6a:15:34:ea:e9:13:
                    ff:db:6b:07:03:30:c7:c2:eb:50:3c:2e:e7:cf:1d:
                    77:85:fc:80:77:11:0c:7c:98:e0:84:b5:c5:06:50:
                    98:a7:d9:f7:b4:45:7d:48:28:ed:db:63:bd:d8:10:
                    ac:4d:7c:ce:6d:47:10:b9:73:91:af:12:ef:80:98:
                    63:09:48:58:48:0c:d9:d7:e6:42:16:a2:fd:9e:3f:
                    56:50:82:d2:dc:70:3c:fa:fc:f9:86:83:9f:51:2e:
                    a3:79:df:6b:c2:5c:b9:ba:66:8b:5e:d2:37:4a:a5:
                    7f:f9:e7:7d:7d:12:4b:c5:d2:e8:45:69:60:d4:c7:
                    44:9a:5b:98:13:3c:b9:ce:e5:1a:78:97:5d:e4:79:
                    fd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:68:7D:EC:AA:EF:37:5B:A5:44:A8:5C:A7:72:E9:10:CB:E0:14:DA
            X509v3 Authority Key Identifier:
                keyid:0F:21:B7:8C:E9:7B:0F:5F:B3:D8:8B:F9:5C:FB:B0:8B:2F:BE:A8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyG3jOl7D1-z2Iv5XPuwiy--qOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0f7594-f048-473d-a39a-ddb9e4db98c6/1/DyG3jOl7D1-z2Iv5XPuwiy--qOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:88:25:0c:d8:e6:03:2b:fc:de:04:21:01:f3:ef:55:5c:92:
         ed:19:0a:1b:29:2b:4b:2f:5e:16:30:6e:f5:ab:a8:3b:f6:8b:
         27:09:9a:b1:fb:ec:82:8e:b0:ed:ab:51:74:4b:f2:47:dd:66:
         e9:8c:28:80:2d:bf:f6:49:66:d6:40:29:3e:60:38:24:13:74:
         27:31:0a:49:19:9d:8b:fb:7a:8f:24:82:d6:5c:bc:de:7f:97:
         6f:ab:1f:f4:c4:3a:01:ea:5d:38:36:3e:0d:ae:90:62:98:33:
         95:df:2c:84:25:09:9e:ef:1b:4f:8b:63:10:bc:94:32:e7:3b:
         35:4e:df:75:2a:fe:9c:b3:01:68:fa:67:62:6f:c1:4e:c0:90:
         50:9a:c4:eb:06:83:28:99:a7:d9:c7:e7:60:10:f4:55:01:f9:
         05:c4:bf:f3:6b:44:26:38:13:4f:fe:54:40:6e:a9:a9:26:06:
         5c:bb:7d:18:1c:4b:1f:65:0c:ed:51:19:b7:17:05:84:6d:97:
         29:f4:7d:1a:3a:13:4a:6b:56:a3:c5:84:b2:0b:7f:61:b6:bb:
         e9:d4:f1:b4:d4:f3:a7:0d:54:37:4a:93:41:d7:b8:51:b2:c8:
         1f:d6:47:8d:e8:eb:a9:69:1c:6f:4a:87:87:a2:18:5a:22:cf:
         ea:c8:43:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:56:23 2026 by rpki-client