Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File:                     DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier:          Zxay/50Sl2GO736AG9INwSSg8pp+/6Vf6nzmAa2zLvo=
Subject key identifier:   1B:A3:E0:05:FF:F5:87:80:A8:C6:88:76:17:E7:89:1D:43:D5:61:04
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer:       /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial:       019D98BDC7CA250920F633C41C1740CF0C01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number:          0DCC
Signing time:             Fri 17 Apr 2026 00:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:07 +0000
Files and hashes:         1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: s/DqKlBkWLZzZchELBrS7RCr001wNxlU+oY+jxz4INg=)
                          2: utyeED3clQkm3ZphFz4r6XrH5aM.roa (hash: 1/LGmMoXZvPyyNB1HdA73Zq1ZKG58JPMftBJCzzv2rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:c7:ca:25:09:20:f6:33:c4:1c:17:40:cf:0c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
        Validity
            Not Before: Apr 17 00:01:07 2026 GMT
            Not After : Apr 18 00:01:07 2026 GMT
        Subject: CN=1ba3e005fff58780a8c6887617e7891d43d56104
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:a6:07:14:b2:00:a7:41:79:d6:73:89:06:
                    3e:80:e9:bd:01:39:e7:b1:f2:21:79:3e:90:16:fc:
                    20:df:d6:9a:47:f4:ed:72:4b:f6:45:f0:1a:82:c6:
                    a1:0e:c9:30:15:b2:1c:a7:98:98:87:7a:51:a5:98:
                    a5:85:71:c6:26:f0:0f:e8:f0:61:7d:9d:6f:df:46:
                    80:d1:a3:ae:7c:11:bd:97:86:11:f5:b6:e9:0e:91:
                    9d:f3:46:82:24:2f:1a:54:27:d7:ee:8c:b9:5e:6f:
                    76:95:fa:24:57:fb:9a:f6:3a:af:b6:fa:97:41:45:
                    b9:38:37:3b:4f:7f:eb:5f:12:c3:33:96:9a:e6:c9:
                    48:51:00:d9:ae:3a:06:d7:16:77:5c:f8:0e:2f:bf:
                    7f:e9:76:71:3a:c7:6c:2a:15:9b:9d:31:7c:95:16:
                    cc:5a:2b:f6:a8:10:94:d4:a9:99:70:e3:63:a4:d2:
                    bb:31:fc:be:66:92:23:0f:1f:0e:4a:9f:06:ed:a3:
                    5c:b2:81:bf:34:c6:ce:23:32:2b:4f:74:08:38:6e:
                    0a:95:0d:be:3a:fa:91:07:d2:20:ba:92:fc:d7:03:
                    97:ab:91:c4:b6:23:02:ff:a2:1b:0d:81:f1:49:c2:
                    d2:92:3b:da:50:91:98:21:c4:cc:36:05:af:7b:f2:
                    04:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A3:E0:05:FF:F5:87:80:A8:C6:88:76:17:E7:89:1D:43:D5:61:04
            X509v3 Authority Key Identifier:
                keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:14:a9:4a:09:44:52:eb:a5:56:ef:a8:e7:db:74:45:fe:1a:
         cf:c4:85:72:2b:b5:f0:9a:08:4b:34:e8:75:d3:45:7d:18:d8:
         5e:da:c0:9c:dd:82:7f:7a:53:33:58:47:53:d6:6b:a9:96:c2:
         3f:37:6f:dc:63:bc:35:40:58:15:8a:e0:f9:21:ec:3c:6c:e6:
         c5:2d:7c:66:69:8b:fe:96:4f:50:86:86:2c:10:00:1c:c5:27:
         5d:cc:fd:4f:03:cb:da:df:c1:a2:82:fd:0b:9b:19:f2:69:ad:
         59:88:3a:cb:f6:5c:da:06:4f:2f:1e:9b:dd:7b:f2:46:14:18:
         a7:46:d0:3e:e5:a3:55:3d:e1:9b:1e:44:bd:6d:e1:de:45:dd:
         90:cc:f7:30:d4:4c:ea:5e:e8:15:b7:14:52:be:a5:bd:ee:94:
         0e:ed:6d:cd:23:f9:d4:e6:ce:67:dd:a6:dc:63:a6:dd:c0:96:
         15:8c:c6:ba:d1:fb:57:14:b7:16:f1:67:f9:79:50:12:c8:ab:
         b7:f4:49:fe:75:50:ee:ac:02:08:c0:33:21:25:47:44:43:58:
         ec:c3:b0:8f:5d:a7:73:75:ba:97:5f:e5:af:2a:24:f5:a3:a3:
         00:07:a3:9b:ff:1c:83:f0:b4:51:7a:dd:8b:24:1d:e9:76:ce:
         b0:d5:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:20 2026 by rpki-client