Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
File:                     dkcGam8eUnJLJzFHdNk2k8FV8Og.mft (raw, json)
Hash identifier:          dneUF5jYjprfZ8h0hFieRenH/4tN4oZ+h9RAE40MGaY=
Subject key identifier:   CA:90:48:9B:81:67:1C:EA:C0:D6:1E:ED:42:69:FF:13:0B:C4:A9:73
Authority key identifier: 76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
Certificate issuer:       /CN=7647066a6f1e52724b27314774d93693c155f0e8
Certificate serial:       01A0C47B6151775E32B9D2A021D5DA4D9983
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
Manifest number:          DF
Signing time:             Mon 21 Sep 2026 15:00:15 +0000
Manifest this update:     Mon 21 Sep 2026 15:00:15 +0000
Manifest next update:     Tue 22 Sep 2026 15:00:15 +0000
Files and hashes:         1: dkcGam8eUnJLJzFHdNk2k8FV8Og.crl (hash: quZEtLIWhtdI4YnGLjL/mJ+5H29aV2zZi9gY5DGbSqc=)
                          2: i9Nq0--gwc6aMhEBRcW9umVjIDg.asa (hash: +TjLueIMBfVDAHW/6ohVxjiAuWPC/TrJyQ1e+Bkvo8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7b:61:51:77:5e:32:b9:d2:a0:21:d5:da:4d:99:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7647066a6f1e52724b27314774d93693c155f0e8
        Validity
            Not Before: Sep 21 15:00:15 2026 GMT
            Not After : Sep 22 15:00:15 2026 GMT
        Subject: CN=ca90489b81671ceac0d61eed4269ff130bc4a973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:0d:82:8e:04:d2:5c:12:6c:fc:93:a2:98:
                    67:13:bd:3f:f8:b9:01:30:7b:ce:12:59:fa:43:6d:
                    02:54:42:fd:7d:64:75:0b:6b:87:4e:da:71:be:b4:
                    ef:90:ea:d6:46:89:da:0c:97:cb:e2:5d:cb:eb:94:
                    43:3e:3e:2f:43:b9:59:0c:3d:17:a5:c0:32:5a:88:
                    91:68:78:ee:e8:b1:c2:c0:98:46:6d:d1:18:a8:1f:
                    99:60:96:4e:2c:89:c9:f2:77:4e:8e:95:74:e1:3f:
                    cc:99:db:8d:0f:f9:62:eb:95:c7:0f:65:00:4d:0f:
                    7c:6e:72:1b:7b:9e:40:d6:f0:0c:0a:d3:d4:a7:b5:
                    fb:42:4d:3a:d8:95:19:e8:df:6e:b1:7d:a3:65:21:
                    ef:23:61:32:f7:e8:f6:95:c1:5c:05:18:cb:8a:15:
                    01:61:4c:c8:9a:e5:fe:36:3f:f7:3a:59:2e:8e:a7:
                    ae:47:83:85:b9:3b:f2:90:f4:21:d4:bf:64:77:78:
                    ef:d7:92:0b:29:f0:f1:f4:e3:2b:cb:16:56:9c:53:
                    75:c0:ed:9c:b5:69:af:b4:ed:e6:47:8c:c1:db:ea:
                    d6:ad:ab:ed:be:49:58:e4:a1:d7:1e:9a:f3:c9:f1:
                    0e:b8:fc:d6:47:b3:7d:4a:be:18:f9:3e:7b:df:ee:
                    2c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:90:48:9B:81:67:1C:EA:C0:D6:1E:ED:42:69:FF:13:0B:C4:A9:73
            X509v3 Authority Key Identifier:
                keyid:76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:cb:2b:5f:de:a4:74:7c:14:2b:fa:da:07:a1:89:10:ad:49:
         c0:ad:e4:0e:3e:2b:d0:40:ae:89:58:8a:d7:48:20:4a:83:ce:
         2d:1d:64:ff:31:5c:90:bd:52:f5:11:02:96:4d:c5:b6:30:80:
         07:d2:76:fb:f1:ca:71:07:c2:5d:02:d0:17:7d:07:7c:15:d3:
         26:f8:d6:ef:8f:5b:cd:f8:42:8d:44:9d:16:2b:a7:5c:e5:ae:
         4c:70:4b:14:ec:fb:29:9c:26:46:cd:98:68:4c:b7:44:9c:84:
         46:96:34:dd:f8:4d:55:7e:79:ca:68:07:9d:77:48:06:68:dd:
         1d:c4:86:16:17:aa:01:dc:86:e5:61:9e:8f:5b:7d:b1:f4:c7:
         50:d2:0d:6a:b1:a3:72:b7:4a:79:c0:da:29:8a:ac:06:8f:e9:
         43:53:2a:8a:38:ce:9f:98:30:6b:1e:da:40:7c:c4:38:08:db:
         04:ba:4d:09:12:7b:7b:1a:0e:ad:61:21:da:a5:ed:d7:17:a3:
         c8:88:2b:fc:5d:53:64:68:26:fa:7a:18:70:56:19:f1:2e:bd:
         c2:35:47:e0:c2:72:fb:b5:b7:c8:14:62:26:18:ec:91:88:a3:
         c8:4e:9d:ab:be:1b:bc:c0:91:81:bb:b6:23:f2:08:a0:36:7d:
         70:24:4a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:54:17 2026 by rpki-client