Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
File:                     DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft (raw, json)
Hash identifier:          XzXVqNjQrpQ4bF4NK4Z5sYgC0IBZ7sR4g1v/m3wbRpU=
Subject key identifier:   68:50:38:1E:0F:EE:8B:7B:A0:CF:6C:26:00:41:12:F5:C2:90:82:99
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Certificate issuer:       /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial:       01A1DD9504B4F2557D3A462E7550650465D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
Manifest number:          1AF8
Signing time:             Sun 15 Nov 2026 05:01:32 +0000
Manifest this update:     Sun 15 Nov 2026 05:01:32 +0000
Manifest next update:     Mon 16 Nov 2026 05:01:32 +0000
Files and hashes:         1: DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl (hash: Dio/0pg2zp6e8wjTOf8zo+IhzPD2Y5QQs+lZOv1thHY=)
                          2: l_v8wGpeNwC9ZT28Ti32qejrz7s.roa (hash: SMCRXOwObktZBcmY0uS3btTgWRJHeqMmgvai6F7iLh8=)
                          3: yYMXkwFPkhHhnq27U9C0g2iVLLU.roa (hash: pG/nzOeAPQH1MO2qwEL/sb+3+IlzWBXcFvkEbi8UJZc=)
                          4: zGoiKUlSyXdnycFm21G7hznXNsk.roa (hash: KVMW287TjTdo6OcUlQjMIIqxnAjDO6zfQ6VauLmb8qg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 05:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:95:04:b4:f2:55:7d:3a:46:2e:75:50:65:04:65:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
        Validity
            Not Before: Nov 15 05:01:32 2026 GMT
            Not After : Nov 16 05:01:32 2026 GMT
        Subject: CN=6850381e0fee8b7ba0cf6c26004112f5c2908299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:05:c7:88:79:c4:a1:2d:ff:47:05:70:33:85:
                    95:dc:e1:f1:b9:2a:fc:ab:54:b7:8b:62:ce:52:7b:
                    82:d6:ba:ab:f0:51:e5:e6:76:b8:0c:b7:f4:dc:56:
                    27:7d:52:68:e0:22:40:77:6b:fe:2d:7a:8e:65:e7:
                    6f:38:0f:bf:74:b6:85:a3:d8:43:12:d9:0b:bb:a2:
                    f1:9d:25:42:9b:0b:8e:44:11:5d:c8:75:e5:34:b8:
                    b5:0f:10:e8:b5:3b:27:99:74:4c:6b:20:da:54:45:
                    5f:90:43:f1:ec:c8:87:94:62:8c:c9:ef:31:71:eb:
                    96:71:32:ec:d5:9d:bf:4b:86:23:f1:e4:39:a8:94:
                    ac:74:36:b1:97:fa:2a:46:5c:dc:b4:16:9e:64:37:
                    3c:80:51:dd:7e:3f:86:33:92:b9:73:df:9d:70:e7:
                    0c:23:b3:8f:ac:11:e2:ee:81:c8:b8:8b:01:6c:4d:
                    a0:a0:b6:1f:d7:82:d5:54:01:f1:81:32:eb:cb:13:
                    15:b0:f9:68:41:d1:6a:88:99:10:02:0d:40:45:17:
                    3d:e0:5d:a1:b6:a7:4d:d4:93:67:99:af:c4:ac:71:
                    ac:32:b0:28:66:09:90:b5:f8:e8:cb:28:6d:34:d0:
                    0d:90:46:16:9b:8a:40:57:b1:8a:d3:cc:56:b7:20:
                    c9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:50:38:1E:0F:EE:8B:7B:A0:CF:6C:26:00:41:12:F5:C2:90:82:99
            X509v3 Authority Key Identifier:
                keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:51:85:c9:4a:7a:90:bc:1a:fc:6d:4a:18:b7:be:64:be:7d:
         1f:ed:45:1e:e4:21:4f:f6:fc:d9:39:89:53:02:bd:eb:ce:34:
         39:a4:46:27:61:b1:45:0d:df:21:4c:36:85:82:80:59:c1:34:
         56:39:a4:4c:65:ba:49:66:be:5e:40:e3:dc:09:d9:af:3e:8d:
         57:ff:be:0a:7f:4f:57:6a:78:5a:e6:6a:5f:8a:9e:19:96:30:
         5a:43:6c:b7:81:59:ef:0d:f7:11:a9:c3:ca:1e:d8:c7:54:96:
         6b:07:1a:cd:1a:60:ae:5c:c6:7a:92:d2:2a:95:64:27:83:7b:
         88:ca:f9:6e:f7:4f:d2:0f:b3:83:c2:b5:a9:db:20:49:f7:eb:
         1e:7c:0a:7e:a4:86:ea:71:1e:fd:62:9f:06:6c:50:6e:37:44:
         fa:2d:00:38:0e:7f:b9:bd:1d:57:3a:7b:90:03:79:74:9d:40:
         2a:cb:bd:bd:93:21:92:3f:a8:91:6b:5a:4c:2d:41:b5:69:b7:
         bc:8e:74:a3:2c:8d:24:0d:83:ff:b8:4c:c5:45:75:40:e8:55:
         3c:04:0c:78:2e:d2:e4:fa:77:53:c6:89:df:3c:ce:60:33:25:
         8f:73:fe:01:d9:37:d7:25:f2:75:a5:78:93:2f:c3:7c:f4:24:
         36:3f:ba:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:33 2026 by rpki-client