Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
File:                     dYYhYjrGyrj2veVSbnopMdYm_ow.mft (raw, json)
Hash identifier:          SOERk6Z1Br1GfWUXKqX6dgOsyIyAUDPRB0rEct5ut+E=
Subject key identifier:   38:6B:4D:15:2D:8F:D0:06:E4:59:B5:13:9E:15:77:9E:6D:D0:12:62
Authority key identifier: 75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C
Certificate issuer:       /CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
Certificate serial:       01A130A1FE934E9CDA43CCFF2D35BD9FD882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
Manifest number:          1A31
Signing time:             Mon 12 Oct 2026 15:01:25 +0000
Manifest this update:     Mon 12 Oct 2026 15:01:25 +0000
Manifest next update:     Tue 13 Oct 2026 15:01:25 +0000
Files and hashes:         1: EXopuR5ESiK7_JfMXbRvvwemOwM.roa (hash: /csuVRW3pPg52UWTPGC8VigLMZFh8XPz4sQJGV29ruU=)
                          2: dYYhYjrGyrj2veVSbnopMdYm_ow.crl (hash: XK9ejTR/4dAc5qKhM/1KMY4xHlUcgq+JHXpqLe2TXr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:a1:fe:93:4e:9c:da:43:cc:ff:2d:35:bd:9f:d8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=758621623ac6cab8f6bde5526e7a2931d626fe8c
        Validity
            Not Before: Oct 12 15:01:25 2026 GMT
            Not After : Oct 13 15:01:25 2026 GMT
        Subject: CN=386b4d152d8fd006e459b5139e15779e6dd01262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3f:6b:84:78:a0:7c:0f:3d:0d:98:6b:58:37:
                    7c:cd:30:ad:a4:67:fa:36:ad:0c:e3:17:34:8d:8f:
                    da:de:10:e6:6f:6e:4a:1b:18:ba:f4:c0:eb:80:30:
                    de:28:42:6a:26:68:e1:d6:59:18:77:88:bf:b5:5f:
                    b8:0f:66:e5:42:00:f8:92:bb:f2:2c:8a:ab:4c:c1:
                    59:f3:1a:02:f8:d2:80:e7:2e:4a:19:f7:c9:4b:33:
                    1f:8f:c4:39:9f:d8:82:20:5b:54:99:20:64:fb:6d:
                    b8:48:04:41:10:7e:90:48:50:89:c0:9c:99:f6:af:
                    ae:ea:68:0d:7e:04:fa:a3:23:70:9b:7e:cd:24:bb:
                    5e:d2:1c:5c:fc:8b:6c:21:69:d1:c6:4e:8c:5b:f1:
                    92:9a:95:01:c2:87:e8:30:cb:81:72:e8:a5:6c:a1:
                    55:92:91:9c:18:5a:89:7c:51:c7:cb:08:32:d0:fb:
                    0f:e8:3b:b2:32:0a:01:a1:cf:8f:5e:28:1d:2e:f3:
                    6e:56:d8:2c:fe:ef:57:c1:59:0b:8a:aa:0c:ef:40:
                    e8:8e:e6:ec:b1:bd:f3:f8:d8:27:ea:a7:bc:47:fe:
                    fa:3e:cd:a6:b2:d5:09:5b:df:4d:89:70:d5:2d:d9:
                    f7:8c:53:47:f3:89:e3:32:43:10:9e:01:26:6a:cb:
                    ce:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6B:4D:15:2D:8F:D0:06:E4:59:B5:13:9E:15:77:9E:6D:D0:12:62
            X509v3 Authority Key Identifier:
                keyid:75:86:21:62:3A:C6:CA:B8:F6:BD:E5:52:6E:7A:29:31:D6:26:FE:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYYhYjrGyrj2veVSbnopMdYm_ow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/36708b-d66b-407f-9547-f02116226a88/1/dYYhYjrGyrj2veVSbnopMdYm_ow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:db:39:09:c6:d0:3d:c2:92:3a:4c:04:ce:fe:2c:07:51:c2:
         87:10:46:7e:56:c7:65:64:c4:ee:2c:a2:7e:6f:ac:7c:92:1e:
         f5:68:71:9f:21:3b:83:ce:b7:fd:0b:f5:79:10:b2:5f:f3:ca:
         db:d7:7c:e4:f7:2f:8f:51:d8:f7:a0:b7:7f:e9:ba:53:3d:39:
         1b:58:66:8e:91:dc:93:f3:da:d4:ba:f6:8a:3b:a2:cb:91:76:
         53:3c:b5:f2:4a:e0:d9:5e:d6:0c:7e:a5:9d:49:ed:42:dc:b8:
         a3:9e:60:aa:83:a3:0d:33:04:da:a7:41:45:19:45:a5:da:0e:
         d7:40:10:b0:76:78:6e:86:97:a3:2f:3a:51:b5:8e:4a:93:fc:
         9d:c0:48:d7:92:17:f8:37:fc:f4:e9:03:2b:7a:d1:a5:7e:3f:
         aa:aa:1e:6a:b4:92:ca:67:65:af:63:01:73:7d:8b:6b:f5:65:
         92:8d:0a:74:4e:13:5a:e0:b4:da:ce:7c:a4:1a:f8:63:1e:89:
         06:45:2a:2d:1b:2b:21:1a:37:89:25:bb:48:59:3c:ba:de:a6:
         cb:38:46:28:cf:01:17:2f:ed:39:33:df:41:bf:a4:3c:b1:2b:
         bc:7d:73:5e:c7:9d:bc:21:3f:ed:cd:57:98:ab:8c:5d:6f:05:
         33:45:9e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:55:30 2026 by rpki-client