Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File:                     DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier:          h4tmymU+BGsW8TXtM4PSQx6tqZmeLkaVxDN2JkQqGzk=
Subject key identifier:   DC:EC:EB:A9:21:9D:F3:97:A3:13:9D:3E:9E:74:5E:0B:75:7E:2F:08
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer:       /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial:       019CAAC60F37484FEF81EF32619A1D2D9EB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number:          1535
Signing time:             Sun 01 Mar 2026 19:00:32 +0000
Manifest this update:     Sun 01 Mar 2026 19:00:32 +0000
Manifest next update:     Mon 02 Mar 2026 19:00:32 +0000
Files and hashes:         1: 5gzt4CwT9bvsp9z_Y1cddIfWsTM.roa (hash: m2Bvt7q0tdHrQ2fSHkOtVmTU4O14Tj93KaqVZHF85bA=)
                          2: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: eyhPB8MziP81ZM9TJEvGrK4qGeZVjxObLg8Fggpy/uo=)
                          3: Gj7_HCZCEIEaaQcIOB8I26hpXJo.roa (hash: dna5HeCv7m+irZ9B9MRHtXXyokNwB7b4uG9bBJzKQjA=)
                          4: bQJIzpgstJ6tgK975t_kJvHhfnE.roa (hash: YZ8X60mNl9Zz2ZurQqorVTzia/8zSz3Bam727LiZpFA=)
                          5: mzAUafPNCTUpOi1xeAIAHgnqncg.roa (hash: 75EGQ43BZx3fMNqmy/B+uHn1YHc0mh0ZnJonJs36Ezs=)
                          6: ozr_7U6YddsAki_u1IviseVnGr8.roa (hash: A2gLyHJgOlcq2fhQNul6Az4HfqR7wlY8G6yuIpKn2sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:0f:37:48:4f:ef:81:ef:32:61:9a:1d:2d:9e:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
        Validity
            Not Before: Mar  1 19:00:32 2026 GMT
            Not After : Mar  2 19:00:32 2026 GMT
        Subject: CN=dceceba9219df397a3139d3e9e745e0b757e2f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:2a:79:25:23:3f:cb:b1:8f:2b:15:f9:88:
                    44:46:17:2d:5d:ce:59:fa:0f:b2:92:24:4e:bd:02:
                    74:49:72:e9:bd:f0:a0:b9:1b:dc:75:45:29:32:61:
                    d0:67:3a:12:f6:44:0a:9e:58:49:0e:ad:52:62:b5:
                    ba:f4:74:14:02:d4:aa:d8:dc:20:37:58:eb:e7:38:
                    16:fb:ff:1c:a8:98:20:97:4c:fc:57:1a:3c:63:32:
                    d2:93:2b:95:c2:f5:eb:b9:a6:89:1e:3e:b6:a6:a4:
                    53:8f:34:77:8e:32:51:f5:c0:3f:ad:a7:d3:5c:94:
                    59:c2:87:5e:d6:2c:8a:a6:92:2a:e0:70:cf:92:e6:
                    a2:5a:de:75:83:9b:c7:e5:c2:f6:86:bf:53:70:c1:
                    52:c1:51:33:76:3f:e3:b1:c5:e2:04:bc:88:a6:35:
                    78:08:56:2a:6c:1d:c1:2b:82:33:71:26:ac:bf:7f:
                    bf:49:33:e5:b1:d7:57:97:a7:6c:a3:2c:16:de:9b:
                    eb:19:03:bd:7e:f9:1f:97:ad:c5:4c:cb:05:60:5b:
                    89:5d:f8:1e:cb:25:02:a3:03:6f:fe:37:0f:38:a9:
                    76:69:9b:c8:8b:08:26:95:92:77:fc:f3:5e:8f:14:
                    49:ea:21:f8:ad:ad:1d:b5:7e:c7:ea:0c:3f:c2:e7:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EC:EB:A9:21:9D:F3:97:A3:13:9D:3E:9E:74:5E:0B:75:7E:2F:08
            X509v3 Authority Key Identifier:
                keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:86:19:b5:d2:62:85:7c:91:ce:4e:c2:9f:0a:54:f7:0c:da:
         36:c8:9e:1c:12:5c:a7:46:0d:a7:6c:00:e3:7f:31:ba:23:0a:
         bf:49:b1:78:e3:f0:db:55:85:b1:be:91:88:14:0a:31:7c:0a:
         7c:89:8d:df:e5:f0:be:d8:d3:4d:15:1a:66:9b:8b:87:7a:57:
         07:9e:60:7a:83:fd:01:d0:90:e1:b2:db:21:ab:d6:04:50:6e:
         8f:42:89:c1:15:e7:36:fe:8f:90:a4:2e:6c:12:f0:82:76:c0:
         52:bd:1a:1d:69:3c:20:28:df:98:4b:78:7f:a3:0e:f5:07:25:
         8d:76:9e:a9:52:0a:e6:6a:6a:66:43:f0:20:01:3d:e4:4a:8b:
         e5:9a:82:bd:31:b8:36:6c:c9:55:04:d1:37:67:c5:dc:ee:a6:
         5d:8f:a4:21:30:b1:e7:7c:b6:d5:48:9e:8a:ae:83:14:ba:a6:
         a6:24:2e:99:ca:3e:6d:51:6c:fa:d5:fb:64:95:81:92:4e:c4:
         ef:6d:69:4c:c9:51:4b:38:4d:ff:ce:2a:da:ce:dc:66:b2:26:
         c3:44:ca:3f:ac:41:d2:cb:1d:82:1a:bd:c7:ab:a3:17:30:6f:
         83:fd:be:64:c2:f0:88:4d:15:57:5b:a5:f9:eb:99:25:d3:5e:
         47:0d:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:45:12 2026 by rpki-client