Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.mft
File:                     DIJ0v2gypdgiDeLq6Gm6SvNWOfk.mft (raw, json)
Hash identifier:          cABF2Mde7uMvVVUGfzhjv6VfvuPaDEPswyzoBxLVkaY=
Subject key identifier:   44:8E:28:F8:32:CC:89:3D:2D:D8:38:62:11:26:A8:F8:B9:C7:67:1D
Authority key identifier: 0C:82:74:BF:68:32:A5:D8:22:0D:E2:EA:E8:69:BA:4A:F3:56:39:F9
Certificate issuer:       /CN=0c8274bf6832a5d8220de2eae869ba4af35639f9
Certificate serial:       01A0CE2366B729385ED09829DC32241F3368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 12:00:21 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:21 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:21 +0000
Files and hashes:         1: DIJ0v2gypdgiDeLq6Gm6SvNWOfk.crl (hash: H3GkwTEZ8h+OkaMj8PkGya+WmHfrl2HjT1ck5XA/Sjg=)
                          2: VktBJoJUVLsV4Fhdae-N5iKyV_M.roa (hash: qTtYxiyPtAWx3c3xC9fJLqpzGh+4lBcaN0sDlshomAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:66:b7:29:38:5e:d0:98:29:dc:32:24:1f:33:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c8274bf6832a5d8220de2eae869ba4af35639f9
        Validity
            Not Before: Sep 23 12:00:21 2026 GMT
            Not After : Sep 24 12:00:21 2026 GMT
        Subject: CN=448e28f832cc893d2dd838621126a8f8b9c7671d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:1c:c6:f0:22:88:78:bd:35:c8:be:cf:53:
                    57:43:25:7c:ee:af:a3:76:0f:ca:af:46:83:d0:b3:
                    96:6d:9d:73:c7:a3:90:b2:8b:a6:8c:b3:19:b5:ee:
                    a5:f7:cd:e5:7c:92:94:ab:1c:0c:7d:23:6a:f5:bf:
                    c2:41:04:d2:f2:0b:25:03:82:c1:e4:d1:77:c5:ea:
                    fa:71:9c:7e:e3:a6:c3:80:28:33:58:ff:58:da:d4:
                    1e:59:f1:96:92:91:7c:87:76:69:93:50:c3:45:3e:
                    33:1e:6f:c4:5b:08:07:48:64:24:33:0d:51:cf:31:
                    15:cf:df:21:c8:16:5b:05:c2:ea:c5:b2:cc:53:23:
                    f6:66:51:9f:46:26:b7:0a:cd:5e:93:ee:ae:d5:29:
                    41:35:76:bd:f4:d7:18:7d:ca:a5:77:5f:67:84:b2:
                    7c:1e:70:52:60:62:a6:a4:34:25:06:ff:d3:f8:be:
                    3a:2a:7a:5f:34:de:5e:1e:6e:a3:35:3d:2b:7d:f2:
                    a2:8c:33:28:b4:b1:24:da:e5:7c:b5:45:ef:24:53:
                    64:1c:80:7f:fc:7a:fe:88:de:ba:fd:17:a0:28:bf:
                    b4:36:35:10:94:47:fa:a4:e1:1a:b8:86:bf:59:db:
                    72:3f:65:2e:cb:91:2c:10:1f:d8:c7:87:db:92:1c:
                    f1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8E:28:F8:32:CC:89:3D:2D:D8:38:62:11:26:A8:F8:B9:C7:67:1D
            X509v3 Authority Key Identifier:
                keyid:0C:82:74:BF:68:32:A5:D8:22:0D:E2:EA:E8:69:BA:4A:F3:56:39:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:07:1d:63:6b:d7:89:81:80:44:14:68:34:48:4a:db:37:2b:
         07:d5:ca:56:d4:86:bd:b4:c1:bb:c3:54:75:66:51:bd:b9:6f:
         f7:f8:bb:86:7f:57:1d:b5:d7:eb:29:1a:1d:0b:c1:52:ef:7f:
         0e:5f:82:6e:94:1d:65:9e:9a:4b:f1:4a:2a:5e:cc:88:33:63:
         6a:08:18:46:fc:f5:2b:58:80:79:8e:6a:94:68:5a:4a:50:54:
         a6:eb:8a:0b:43:84:6e:92:f4:b6:40:5f:73:6c:b5:8a:b4:b2:
         4c:83:47:6e:ef:f9:b9:94:0f:48:af:48:dc:81:db:19:5d:94:
         9b:f4:94:71:1d:02:a2:6d:a4:a4:e8:85:94:98:88:d2:d3:b6:
         2c:68:ad:0c:53:c8:8d:4c:3f:11:1a:f0:07:05:39:0d:e5:4f:
         41:34:52:d0:42:e0:c0:df:51:50:8c:3d:8e:a4:70:cb:9e:bb:
         dd:b2:3f:70:ec:70:10:51:3d:a8:4c:e5:5a:d9:a9:36:8e:d2:
         d9:77:4f:1a:12:45:94:b7:6b:42:3c:33:f7:51:f6:52:5e:27:
         1b:f5:b8:d9:e8:ec:46:50:19:b4:16:de:a8:30:d6:a9:96:59:
         95:ff:7c:7f:06:29:b8:e0:ff:26:e8:c5:08:51:67:05:06:88:
         86:0a:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:26:17 2026 by rpki-client