Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
File:                     DvgMyei0RaB_7srAr8WeQtxxAmM.mft (raw, json)
Hash identifier:          hdxwf7Q3STYPUMzKWa09xpLl5PvZLkYYgeP1tAHdmuE=
Subject key identifier:   B0:2F:05:13:76:CC:25:6D:71:37:48:3F:86:E6:CD:5F:63:6C:55:32
Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Certificate issuer:       /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Certificate serial:       01A0C4EA178F58BAFA629F42AC6E001F5DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
Manifest number:          07B6
Signing time:             Mon 21 Sep 2026 17:01:10 +0000
Manifest this update:     Mon 21 Sep 2026 17:01:10 +0000
Manifest next update:     Tue 22 Sep 2026 17:01:10 +0000
Files and hashes:         1: DvgMyei0RaB_7srAr8WeQtxxAmM.crl (hash: +FR0LVZt16kz42yeLHeEwPArIKhfCPfpcfBEy20dGDw=)
                          2: Xm1NyxAzrsVfmOit8GLDJIUr3T4.roa (hash: FBeGZgtFYVn2jU+qekRgjUacFdjECcP1nPbLiXskECw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:ea:17:8f:58:ba:fa:62:9f:42:ac:6e:00:1f:5d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
        Validity
            Not Before: Sep 21 17:01:10 2026 GMT
            Not After : Sep 22 17:01:10 2026 GMT
        Subject: CN=b02f051376cc256d7137483f86e6cd5f636c5532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:55:15:63:17:5a:07:d4:41:c9:ad:70:f7:a8:
                    bd:c2:62:18:e2:31:f9:91:ae:ea:19:2d:3e:34:9a:
                    9b:13:6d:66:9b:49:65:87:c5:95:ba:24:47:05:b6:
                    0a:e4:af:fd:2c:6c:1c:47:95:ef:f6:f6:54:65:d0:
                    30:34:14:22:36:1e:07:a4:ce:03:6a:63:16:45:f6:
                    71:23:5b:e3:8f:43:b0:69:da:0a:bb:29:81:3c:89:
                    17:b2:4a:13:cf:86:0f:f0:4d:48:0f:b2:98:51:f2:
                    00:fe:ec:a2:3b:d6:15:4a:db:8d:9a:88:c7:ed:f3:
                    4e:cf:2d:82:2d:e5:b2:83:50:3e:1a:6e:22:0a:09:
                    5b:14:5f:be:cb:32:51:c3:aa:8e:69:2a:3b:cf:3a:
                    6e:35:53:ae:a3:90:ae:fb:9c:d3:43:6b:8d:57:2f:
                    13:eb:11:66:67:e7:39:26:bc:9f:c0:ce:f8:b0:9f:
                    ac:3a:8b:f9:0a:53:b0:96:f0:0a:f6:a9:33:04:8c:
                    19:16:a4:2f:83:fa:40:62:96:15:c4:6f:d3:d4:a1:
                    7b:80:7f:c2:f6:0d:c9:57:bf:26:81:2e:8a:93:72:
                    8a:76:13:86:93:c2:bc:3c:fb:a4:91:a7:58:c1:37:
                    6e:52:25:c2:74:50:2f:a8:b8:ee:a7:f8:fc:81:14:
                    4b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2F:05:13:76:CC:25:6D:71:37:48:3F:86:E6:CD:5F:63:6C:55:32
            X509v3 Authority Key Identifier:
                keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b1:db:7d:cd:09:54:8b:e3:36:ef:dc:df:b6:fb:8f:5e:af:
         7f:a7:17:e9:81:c6:51:c0:b4:ea:8b:0c:ac:08:6e:4c:03:5c:
         e2:9e:9a:bc:03:f0:32:66:18:88:6c:3c:ba:c6:35:25:9b:4a:
         00:2b:2c:5d:ad:a6:61:08:0e:34:7e:55:e5:21:88:31:29:2e:
         5d:cd:17:48:6e:3f:ef:ea:b7:a7:ea:79:8b:15:39:66:5b:ef:
         2b:37:4b:d2:a0:64:f8:15:f4:ef:29:99:4d:67:0f:72:16:cd:
         15:7c:87:74:40:2e:da:5d:36:bc:12:53:9b:28:ff:db:5a:1a:
         f3:f4:d5:cd:29:5f:bf:84:1c:c9:ae:4d:4f:5c:29:1f:78:72:
         7d:63:87:7c:16:d0:24:1d:46:61:f4:39:fe:ea:5b:0f:f3:98:
         31:f7:36:6a:c6:6e:e4:9a:40:53:31:83:d8:b8:5e:5d:e3:cd:
         82:4d:11:d0:95:78:2f:69:2d:a1:e0:cf:fb:84:df:81:6a:9e:
         d4:4c:e2:64:2c:e6:5b:61:38:52:a1:7b:d5:3c:8f:26:94:92:
         61:df:7f:f6:b0:ca:79:08:eb:0c:96:55:22:8a:fa:92:5e:71:
         58:e4:e4:44:8f:43:37:7b:d1:24:11:58:94:88:3d:3d:19:a2:
         d2:6a:63:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:39:16 2026 by rpki-client