Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File:                     DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier:          kpFWvyC8rCrzrJamuF13tkWMu7FdgZJnrJuYGanRhcA=
Subject key identifier:   DE:C9:B0:87:D5:7C:C6:86:8E:CD:73:39:AC:36:92:F0:87:E1:ED:E4
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer:       /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial:       01A0EA0A284B7A1A8F12E8C7FADA5921D48C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number:          1768
Signing time:             Mon 28 Sep 2026 22:02:09 +0000
Manifest this update:     Mon 28 Sep 2026 22:02:09 +0000
Manifest next update:     Tue 29 Sep 2026 22:02:09 +0000
Files and hashes:         1: 5gzt4CwT9bvsp9z_Y1cddIfWsTM.roa (hash: m2Bvt7q0tdHrQ2fSHkOtVmTU4O14Tj93KaqVZHF85bA=)
                          2: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: 3+gInjxsaqDcAP7OSG2w3Tld0HjmTEoxbeko1Cqs5EQ=)
                          3: Gj7_HCZCEIEaaQcIOB8I26hpXJo.roa (hash: dna5HeCv7m+irZ9B9MRHtXXyokNwB7b4uG9bBJzKQjA=)
                          4: bQJIzpgstJ6tgK975t_kJvHhfnE.roa (hash: YZ8X60mNl9Zz2ZurQqorVTzia/8zSz3Bam727LiZpFA=)
                          5: mzAUafPNCTUpOi1xeAIAHgnqncg.roa (hash: 75EGQ43BZx3fMNqmy/B+uHn1YHc0mh0ZnJonJs36Ezs=)
                          6: ozr_7U6YddsAki_u1IviseVnGr8.roa (hash: A2gLyHJgOlcq2fhQNul6Az4HfqR7wlY8G6yuIpKn2sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 19:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:0a:28:4b:7a:1a:8f:12:e8:c7:fa:da:59:21:d4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
        Validity
            Not Before: Sep 28 22:02:09 2026 GMT
            Not After : Sep 29 22:02:09 2026 GMT
        Subject: CN=dec9b087d57cc6868ecd7339ac3692f087e1ede4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f8:14:ef:3b:75:80:4c:0a:a2:ae:6f:3d:e2:
                    86:4d:41:08:e0:55:be:cb:11:0c:6f:4f:56:6b:09:
                    02:5e:f9:88:b6:a7:50:c8:52:96:3e:2e:d6:81:cc:
                    27:64:ba:17:a1:26:2a:2a:78:29:b0:19:19:52:28:
                    a8:c6:a6:d8:0e:52:32:f0:26:c9:10:fb:e6:81:e8:
                    97:96:31:f1:97:dc:5d:ca:ee:ab:0a:1e:e4:60:bb:
                    1a:53:ea:f7:31:9b:d3:f0:ec:1d:93:82:ac:20:8b:
                    2e:3c:75:eb:46:ba:c5:67:47:4c:db:54:c6:88:b7:
                    31:a4:d1:01:9a:92:6b:43:12:ea:1a:0d:9e:82:d2:
                    99:b9:18:b0:3c:a2:a4:b2:81:56:2e:19:84:45:8f:
                    d2:ad:dd:27:fe:d0:34:16:67:83:54:3a:55:f7:f4:
                    b1:34:18:05:5b:6c:c9:93:27:92:80:8a:b9:e6:60:
                    e0:7e:ff:8e:1f:55:b8:b2:73:6f:6b:b7:83:29:66:
                    5f:16:4e:5c:11:26:80:e3:a2:ea:6c:e0:d6:a8:51:
                    b1:80:e3:d5:95:ba:05:9f:0f:9e:88:8c:29:81:6e:
                    9a:a0:e3:32:95:01:a7:6f:c0:70:dd:ea:45:8e:ed:
                    93:01:54:bb:4b:31:5a:9f:16:ae:39:b2:6e:51:10:
                    76:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C9:B0:87:D5:7C:C6:86:8E:CD:73:39:AC:36:92:F0:87:E1:ED:E4
            X509v3 Authority Key Identifier:
                keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d1:4e:bf:76:ae:6d:12:b6:48:a2:2c:16:76:02:b7:d7:e4:
         ad:62:49:50:03:a6:af:67:6a:a8:0c:14:86:62:59:fd:78:91:
         19:4f:d2:88:91:ab:50:8d:65:01:45:a4:b7:71:89:5c:50:97:
         d6:86:68:48:99:8e:03:6c:60:50:8a:62:aa:5f:bb:08:e8:5e:
         93:0e:df:61:b2:73:63:ff:43:e3:57:f9:4e:50:87:92:8e:f6:
         be:1e:50:d7:1c:8d:60:71:cc:55:af:9b:31:59:fa:66:2f:bd:
         01:42:f8:7a:49:da:b7:41:cc:1a:02:9f:f1:a0:fb:35:e5:f6:
         46:8e:97:44:bc:c5:f8:06:7e:7f:c5:99:b4:32:35:f6:eb:37:
         48:72:b1:5e:77:f4:5f:2d:08:cc:1b:64:cd:d6:a0:cc:d1:d1:
         bf:59:42:b2:80:29:90:72:59:38:c6:05:c8:25:ad:26:b9:8d:
         11:e9:a2:fb:b3:5f:7f:6c:45:a1:c1:8a:80:3c:6a:f5:21:20:
         a0:4a:d9:75:c9:11:60:ed:6e:aa:6b:fb:68:dc:92:a6:05:eb:
         8a:a0:8d:32:b9:d0:9d:3e:7e:f9:45:0c:cc:79:4d:c0:58:ee:
         e8:da:56:a4:40:15:cb:ef:07:7a:48:28:0b:27:b7:d3:a3:38:
         e2:55:bc:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqCihLehqPEujH+tpZIdSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOTFkZTE3NDM3YTAwMjVmZDFlZGUxMGY3MTBmMTdhMzA4
MGIzYWIwHhcNMjYwOTI4MjIwMjA5WhcNMjYwOTI5MjIwMjA5WjAzMTEwLwYDVQQD
EyhkZWM5YjA4N2Q1N2NjNjg2OGVjZDczMzlhYzM2OTJmMDg3ZTFlZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfgU7zt1gEwKoq5vPeKGTUEI4FW+
yxEMb09WawkCXvmItqdQyFKWPi7WgcwnZLoXoSYqKngpsBkZUiioxqbYDlIy8CbJ
EPvmgeiXljHxl9xdyu6rCh7kYLsaU+r3MZvT8Owdk4KsIIsuPHXrRrrFZ0dM21TG
iLcxpNEBmpJrQxLqGg2egtKZuRiwPKKksoFWLhmERY/Srd0n/tA0FmeDVDpV9/Sx
NBgFW2zJkyeSgIq55mDgfv+OH1W4snNva7eDKWZfFk5cESaA46LqbODWqFGxgOPV
lboFnw+eiIwpgW6aoOMylQGnb8Bw3epFju2TAVS7SzFanxauObJuURB2cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7JsIfVfMaGjs1zOaw2kvCH4e3kMB8GA1UdIwQY
MBaAFA6R3hdDegAl/R7eEPcQ8XowgLOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUt
ODhlYmJmOTk3ODBiLzEvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUtODhlYmJmOTk3ODBi
LzEvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNFOv3au
bRK2SKIsFnYCt9fkrWJJUAOmr2dqqAwUhmJZ/XiRGU/SiJGrUI1lAUWkt3GJXFCX
1oZoSJmOA2xgUIpiql+7COhekw7fYbJzY/9D41f5TlCHko72vh5Q1xyNYHHMVa+b
MVn6Zi+9AUL4eknat0HMGgKf8aD7NeX2Ro6XRLzF+AZ+f8WZtDI19us3SHKxXnf0
Xy0IzBtkzdagzNHRv1lCsoApkHJZOMYFyCWtJrmNEemi+7Nff2xFocGKgDxq9SEg
oErZdckRYO1uqmv7aNySpgXriqCNMrnQnT5++UUMzHlNwFju6NpWpEAVy+8Hekgo
Cye306M44lW81g==
-----END CERTIFICATE-----
Generated at Tue Sep 29 01:19:50 2026 by rpki-client