Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
File:                     DYGcnS5S2Ereot5MLeZLd4mFjrI.mft (raw, json)
Hash identifier:          Wl774LwdNOMECLuh4X2sv1EIgo3l2Opv3T3pMFV5kBw=
Subject key identifier:   DB:6D:B3:54:EE:A4:F1:86:4F:62:C8:FD:19:93:5A:01:34:EF:C2:1E
Authority key identifier: 0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2
Certificate issuer:       /CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
Certificate serial:       019CACB564884BC4C9A47E2DBE2F122AD077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
Manifest number:          0BA4
Signing time:             Mon 02 Mar 2026 04:01:34 +0000
Manifest this update:     Mon 02 Mar 2026 04:01:34 +0000
Manifest next update:     Tue 03 Mar 2026 04:01:34 +0000
Files and hashes:         1: 4mvw711lnQzyvs4Hvdkp66DN8WA.roa (hash: cOfCZrF6cE78BmpoYXmsaMPC6thd3G27U3oDjezLwXY=)
                          2: DYGcnS5S2Ereot5MLeZLd4mFjrI.crl (hash: BpQETR3uN8mWWDLZuF4QmLJoURsRcTGHSThLT8tlKO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:b5:64:88:4b:c4:c9:a4:7e:2d:be:2f:12:2a:d0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d819c9d2e52d84adea2de4c2de64b7789858eb2
        Validity
            Not Before: Mar  2 04:01:34 2026 GMT
            Not After : Mar  3 04:01:34 2026 GMT
        Subject: CN=db6db354eea4f1864f62c8fd19935a0134efc21e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:75:2a:51:3f:54:5d:a1:29:5c:55:eb:d5:0f:
                    38:db:a1:1f:cc:2d:a9:ab:7b:4a:df:a0:c0:02:c7:
                    03:47:08:d8:b2:81:51:51:d8:92:7b:04:6a:8a:2c:
                    4c:0f:09:52:8c:e4:86:66:83:06:37:5b:48:3b:9a:
                    df:e1:ff:09:83:df:71:df:df:6b:1e:10:02:82:b7:
                    43:87:23:85:85:dc:d7:a0:54:7b:65:76:50:54:44:
                    d3:47:3a:c2:a8:ac:98:3b:08:94:02:67:9f:74:da:
                    0e:c0:16:b8:43:2f:49:26:8b:65:bb:40:3d:3e:6c:
                    82:28:af:a0:ec:3f:bb:7b:5d:6f:21:87:b4:e5:a0:
                    92:37:ef:f8:ce:29:7d:2e:c1:5b:28:c9:85:43:4a:
                    7f:7c:3c:50:e1:7a:cf:70:86:46:8a:f0:a8:71:34:
                    f4:7f:31:b9:97:84:4d:ff:13:ae:73:ac:b0:38:ed:
                    7d:e2:9e:a9:1b:a1:12:3c:64:84:fe:45:20:be:21:
                    e8:7e:7e:d7:ae:dc:9a:ae:40:5e:66:b9:6b:0d:13:
                    fe:ad:52:62:ef:a7:f1:ac:e6:04:1e:e4:f6:28:fd:
                    b1:00:d0:8d:c5:d4:d4:4d:ab:d5:bd:f7:9a:02:90:
                    59:ca:d3:23:d0:a4:ea:fe:76:43:78:2a:4c:c1:ca:
                    36:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:6D:B3:54:EE:A4:F1:86:4F:62:C8:FD:19:93:5A:01:34:EF:C2:1E
            X509v3 Authority Key Identifier:
                keyid:0D:81:9C:9D:2E:52:D8:4A:DE:A2:DE:4C:2D:E6:4B:77:89:85:8E:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYGcnS5S2Ereot5MLeZLd4mFjrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/877342-734c-471b-b3f9-02c37feb8a9e/1/DYGcnS5S2Ereot5MLeZLd4mFjrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:88:70:22:cb:a6:a1:7f:18:4b:8b:d3:b1:3e:f1:84:5d:27:
         3a:5e:88:10:3c:c3:55:94:a4:a1:01:97:b7:ff:22:0f:a6:8e:
         e5:39:a3:7c:3a:19:9b:ea:aa:70:a1:50:3d:14:61:f7:c9:8b:
         4d:87:f6:c3:3d:6f:5c:e3:45:fe:6a:10:65:aa:15:a2:39:7c:
         9a:59:1e:69:4f:10:96:87:21:da:cc:97:8e:22:62:3c:5b:d4:
         60:c6:77:87:db:8a:27:e7:d8:5b:24:2a:16:82:1b:67:68:b2:
         fc:69:6a:22:ad:ce:6b:59:3b:2c:0a:2a:43:2a:a6:07:66:f9:
         07:65:b2:70:07:92:6e:d3:52:d6:5e:5f:24:f1:03:22:f3:d6:
         c0:b0:db:40:c1:8f:80:1b:e5:6f:f5:a1:6f:b3:af:ee:93:12:
         2f:bd:22:b9:58:f1:fa:7f:f6:df:a4:8a:62:1f:bc:8f:72:21:
         5d:40:b0:d5:c2:d5:62:47:e7:ad:a3:d9:97:79:3d:80:8e:7c:
         8a:ca:d7:c1:46:7b:ea:2b:6e:85:48:bf:e9:c8:42:53:c6:e4:
         b0:af:6c:6d:5b:9c:d6:7c:a4:e9:fa:ca:c2:5b:1c:aa:01:18:
         24:05:14:3c:ad:4d:e6:f1:36:10:05:89:0d:ae:36:3e:d7:8c:
         a9:00:5e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystWSIS8TJpH4tvi8SKtB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkODE5YzlkMmU1MmQ4NGFkZWEyZGU0YzJkZTY0Yjc3ODk4
NThlYjIwHhcNMjYwMzAyMDQwMTM0WhcNMjYwMzAzMDQwMTM0WjAzMTEwLwYDVQQD
EyhkYjZkYjM1NGVlYTRmMTg2NGY2MmM4ZmQxOTkzNWEwMTM0ZWZjMjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHUqUT9UXaEpXFXr1Q8426EfzC2p
q3tK36DAAscDRwjYsoFRUdiSewRqiixMDwlSjOSGZoMGN1tIO5rf4f8Jg99x399r
HhACgrdDhyOFhdzXoFR7ZXZQVETTRzrCqKyYOwiUAmefdNoOwBa4Qy9JJotlu0A9
PmyCKK+g7D+7e11vIYe05aCSN+/4zil9LsFbKMmFQ0p/fDxQ4XrPcIZGivCocTT0
fzG5l4RN/xOuc6ywOO194p6pG6ESPGSE/kUgviHofn7XrtyarkBeZrlrDRP+rVJi
76fxrOYEHuT2KP2xANCNxdTUTavVvfeaApBZytMj0KTq/nZDeCpMwco2pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtts1TupPGGT2LI/RmTWgE078IeMB8GA1UdIwQY
MBaAFA2BnJ0uUthK3qLeTC3mS3eJhY6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjkt
MDJjMzdmZWI4YTllLzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS84NzczNDItNzM0Yy00NzFiLWIzZjktMDJjMzdmZWI4YTll
LzEvRFlHY25TNVMyRXJlb3Q1TUxlWkxkNG1GanJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP4hwIsum
oX8YS4vTsT7xhF0nOl6IEDzDVZSkoQGXt/8iD6aO5TmjfDoZm+qqcKFQPRRh98mL
TYf2wz1vXONF/moQZaoVojl8mlkeaU8Qloch2syXjiJiPFvUYMZ3h9uKJ+fYWyQq
FoIbZ2iy/GlqIq3Oa1k7LAoqQyqmB2b5B2WycAeSbtNS1l5fJPEDIvPWwLDbQMGP
gBvlb/Whb7Ov7pMSL70iuVjx+n/236SKYh+8j3IhXUCw1cLVYkfnraPZl3k9gI58
isrXwUZ76ituhUi/6chCU8bksK9sbVuc1nyk6frKwlscqgEYJAUUPK1N5vE2EAWJ
Da42PteMqQBeWg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:53 2026 by rpki-client