Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
File:                     DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json)
Hash identifier:          9TIiB2IB3KJlffK+5Gj0GCLgMtpkvVqHa9y0HPVpu1s=
Subject key identifier:   C5:A9:DE:EA:39:5B:30:C4:18:EF:DA:C4:AB:4B:5B:00:68:71:7B:44
Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
Certificate issuer:       /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Certificate serial:       01A0C1B179EA8DBA31F435CEC26FA5F586DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
Manifest number:          1768
Signing time:             Mon 21 Sep 2026 02:00:28 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:28 +0000
Manifest next update:     Tue 22 Sep 2026 02:00:28 +0000
Files and hashes:         1: C-78xmWgZqJn-98KCnx2cK8W2iw.roa (hash: kvyCi4+DSBTeslNasxxFTjOtFWjXLr4uWpv3Fg7ByZw=)
                          2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: 2bnOfcu3EDAD5NIRc+lMdfot/6uMxdOM8nP1rMbIJWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 02:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:b1:79:ea:8d:ba:31:f4:35:ce:c2:6f:a5:f5:86:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
        Validity
            Not Before: Sep 21 02:00:28 2026 GMT
            Not After : Sep 22 02:00:28 2026 GMT
        Subject: CN=c5a9deea395b30c418efdac4ab4b5b0068717b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b4:a3:1a:86:7e:8d:2a:5c:62:24:7e:75:56:
                    8f:35:fe:38:51:91:fc:50:9c:02:d1:50:56:f1:32:
                    8a:9b:8f:fa:d7:10:d8:4a:be:d6:7c:d8:1f:1d:ad:
                    20:12:c9:4b:e9:c6:41:e7:e1:2c:92:6c:a2:4e:2f:
                    32:54:c9:23:0b:71:dc:aa:d7:33:91:19:01:da:bb:
                    fc:65:b3:9c:4e:be:ce:2b:ac:07:70:7c:b3:a8:b7:
                    b1:db:48:2d:fb:36:3f:ec:3e:fc:a1:89:a2:91:c8:
                    56:82:01:89:07:f4:c7:25:ec:ec:f6:a4:dd:63:fd:
                    16:7c:fc:75:62:ad:b9:98:16:b1:d0:a9:76:2e:b6:
                    4c:45:31:6d:13:36:fe:90:44:00:23:eb:9a:d4:af:
                    35:af:99:d5:cb:e3:18:9c:ce:ea:bb:81:84:f0:07:
                    67:58:a3:ea:ea:14:43:42:24:f2:16:ff:bc:1e:00:
                    24:76:67:71:63:e8:1d:16:d0:c6:ae:df:45:0c:94:
                    d1:a2:b5:d9:34:86:f7:b8:6f:10:98:0c:40:2e:91:
                    fa:98:cc:d7:72:c2:d0:68:ba:8e:e2:1f:9b:d7:de:
                    5d:eb:2e:4d:17:d8:e6:df:5a:c3:f6:d9:7d:b1:9f:
                    8a:b3:2a:3c:ae:e9:e4:79:95:a0:5c:a2:18:83:0c:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A9:DE:EA:39:5B:30:C4:18:EF:DA:C4:AB:4B:5B:00:68:71:7B:44
            X509v3 Authority Key Identifier:
                keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:19:db:8b:d8:29:41:93:15:fe:91:c8:10:7c:34:cd:d6:
         6d:dd:ba:90:4c:4c:4b:ee:dd:2e:3f:60:a7:d0:11:b3:16:0f:
         8a:1d:05:88:3c:aa:8f:d9:e3:0f:58:54:06:65:25:47:e8:0d:
         ea:a6:72:d4:03:3b:05:09:f7:d8:ee:82:b2:50:29:04:bc:d7:
         4c:b4:d3:eb:fc:9b:43:92:af:78:5c:a2:96:6e:d0:be:c7:38:
         34:4c:f9:12:1e:9d:17:14:40:27:d1:3b:84:36:2e:a7:4f:9b:
         c8:0f:cd:ea:09:fd:19:72:78:bb:7d:bd:7d:1c:e0:49:62:52:
         aa:aa:74:4f:f3:a3:30:7d:5c:6b:ea:e3:60:ac:53:32:ad:8f:
         a4:d1:1a:24:b5:98:25:46:e5:7a:a6:64:f5:6f:a0:c6:49:36:
         8d:37:f9:a9:83:17:d4:06:09:1b:ed:96:b0:11:23:c7:19:38:
         73:4f:22:15:12:8a:e0:8e:41:b9:eb:1c:41:3c:11:31:15:4e:
         7c:24:c9:7c:11:cd:c8:81:0d:2a:f3:65:5c:ec:33:8c:7c:7e:
         06:3b:8e:9b:55:a8:b3:a5:aa:fa:f0:a7:0d:bf:23:52:38:51:
         33:6e:c6:6f:66:08:d3:6a:44:e2:28:75:e5:f6:99:5c:7d:30:
         7f:d3:42:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:23:51 2026 by rpki-client