Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
File:                     DGhZ_rp4NMkyK3xva9gb0771zlE.mft (raw, json)
Hash identifier:          ZLuiANOyfr5DTLAaVYknBAtRigrebQ2YwkAA+kCsBrM=
Subject key identifier:   C7:97:92:D2:AD:6B:C3:AF:E4:EA:B1:6F:33:98:10:8A:48:EB:24:18
Authority key identifier: 0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51
Certificate issuer:       /CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
Certificate serial:       019CAB6B685D5839B787581BE6ABDA3D52E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
Manifest number:          06EB
Signing time:             Sun 01 Mar 2026 22:01:08 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:08 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:08 +0000
Files and hashes:         1: 3oD6UkoDNe0rtJWj8HxpE6jlak0.roa (hash: R/cwbFv0lOGUpDjFofG3nbPlnQvyiD5HE3kAtqBG9wA=)
                          2: DGhZ_rp4NMkyK3xva9gb0771zlE.crl (hash: ZdrRoxzzb2bnabr5Ie67snzGLUmhhIOOA947LwYmfVQ=)
                          3: i1-MRvdMDpnMLALR5PXvq3Ies1U.roa (hash: HEuTRcWCE5Yae2e9tc9P+E6KpceFFBapRR9OHKeJssE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:68:5d:58:39:b7:87:58:1b:e6:ab:da:3d:52:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6859feba7834c9322b7c6f6bd81bd3bef5ce51
        Validity
            Not Before: Mar  1 22:01:08 2026 GMT
            Not After : Mar  2 22:01:08 2026 GMT
        Subject: CN=c79792d2ad6bc3afe4eab16f3398108a48eb2418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:2f:17:ff:98:d3:15:b6:2e:7b:0b:6e:9c:
                    5e:97:d8:ad:a8:77:f9:c5:24:97:97:93:37:ea:1c:
                    9c:bc:13:e3:a1:49:f9:75:5c:1a:0f:83:d6:6e:22:
                    6b:89:ec:13:d8:5d:18:81:18:da:5e:51:41:34:24:
                    10:73:df:55:b2:07:00:b1:5d:b1:af:f9:40:50:92:
                    6b:b2:33:5a:bb:7e:58:a7:6f:e6:17:9d:1d:26:0c:
                    c5:fb:37:a7:7f:0d:1b:e2:e8:30:67:f5:f5:90:f0:
                    27:58:a4:ee:f1:66:c3:bd:f3:f1:7b:79:e3:68:e7:
                    3e:77:86:12:0a:6f:df:2e:ed:99:1f:da:b8:69:24:
                    5a:10:d4:7c:52:e1:4c:22:b4:c3:5c:0c:bf:1b:30:
                    f9:56:e2:fb:16:95:21:2f:3c:0c:6f:09:03:f2:00:
                    d2:ba:85:f9:68:96:9e:13:79:34:d8:96:bd:3a:16:
                    6c:42:31:8c:20:a4:93:91:4c:69:34:ad:bd:40:1d:
                    be:d2:48:89:61:48:e0:96:cc:c2:b0:80:8f:da:ac:
                    4f:ea:9a:5e:18:a8:fb:46:ee:a4:ea:ad:57:ed:a2:
                    41:2e:44:77:e5:2e:37:70:88:78:62:f7:7a:36:24:
                    f6:18:c6:95:ab:31:af:c6:2a:d4:41:bf:5a:26:40:
                    c5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:97:92:D2:AD:6B:C3:AF:E4:EA:B1:6F:33:98:10:8A:48:EB:24:18
            X509v3 Authority Key Identifier:
                keyid:0C:68:59:FE:BA:78:34:C9:32:2B:7C:6F:6B:D8:1B:D3:BE:F5:CE:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGhZ_rp4NMkyK3xva9gb0771zlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8c3a8b-9171-4620-b1e0-77fca7a30b9f/1/DGhZ_rp4NMkyK3xva9gb0771zlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0e:32:49:26:df:04:df:a8:c5:a1:e6:c0:cd:29:9c:7d:b7:
         50:25:a1:14:f6:17:7a:36:ab:c5:60:1c:e3:65:cf:da:d6:ae:
         71:96:24:b5:f5:73:02:7c:dd:bd:16:f3:36:8f:0e:5d:12:8b:
         99:86:aa:ec:df:e2:bd:0c:31:1c:55:ee:dc:eb:cf:de:8c:4f:
         f3:e4:11:b1:ed:ca:97:2b:dd:2b:d9:71:01:74:6f:59:21:1d:
         ff:10:ea:17:dd:7b:a0:4b:0a:5c:f3:52:a2:82:5c:1c:3f:fd:
         f2:18:a3:2c:ec:2b:bc:70:f2:39:ae:65:49:c1:ff:b8:fe:ca:
         fe:3a:e2:49:62:45:09:5b:bd:6c:ab:34:b0:8f:d3:e2:d7:f0:
         7f:10:c2:5d:dd:56:05:f9:13:3c:02:2b:8f:d6:68:01:aa:05:
         7a:75:ae:02:cd:d6:52:36:4f:7f:8f:3b:2d:28:9f:88:36:c2:
         ac:f6:42:a9:52:19:5a:96:f1:79:6e:c3:26:66:90:24:24:c7:
         43:08:66:df:81:e2:bc:03:34:bb:2a:47:4e:b7:40:3b:b2:82:
         e1:ba:a6:50:b9:63:7c:61:48:a6:4e:80:47:97:ea:c8:38:08:
         d6:94:60:a0:5b:75:c4:69:a7:75:a4:51:52:20:20:e4:bb:2e:
         f7:43:43:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:53 2026 by rpki-client