Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
File:                     DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft (raw, json)
Hash identifier:          NGmuJ/QTaRewGQIhSXgUn22c4wv17WI0xAUjpxoUqfA=
Subject key identifier:   5A:0F:E4:29:A3:11:D7:27:E5:B2:45:D4:10:3C:DC:42:58:09:08:07
Authority key identifier: 0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7
Certificate issuer:       /CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
Certificate serial:       019F92EDB6FB4DF90E668096617AFC112FDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
Manifest number:          0164
Signing time:             Fri 24 Jul 2026 07:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:20 +0000
Files and hashes:         1: DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl (hash: U52H7s4lqMptAaamwQw2hRzY2HQghrnqWGtfYJSkkD4=)
                          2: u3zxwv8aiDPFhl4Oxz0_bf9g92U.roa (hash: wBX3vONdNDvp84LOZvpcknzsgcTIkj6k0n194mkJDS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:b6:fb:4d:f9:0e:66:80:96:61:7a:fc:11:2f:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
        Validity
            Not Before: Jul 24 07:01:20 2026 GMT
            Not After : Jul 25 07:01:20 2026 GMT
        Subject: CN=5a0fe429a311d727e5b245d4103cdc4258090807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1f:d6:bf:6e:11:5a:5d:74:a4:63:c1:ed:c9:
                    c9:ac:52:3e:15:38:59:b6:f7:88:3b:e2:9c:fe:48:
                    49:7d:34:f9:57:08:38:33:26:06:a5:77:c2:d2:8b:
                    c8:4f:f4:09:8e:67:93:fe:f0:82:0f:3e:52:6d:3e:
                    77:47:0e:06:19:b5:94:fe:f1:ab:f9:9c:18:94:10:
                    e5:e6:64:69:ef:a4:d8:03:39:07:b4:75:cb:42:1d:
                    62:cd:d2:5d:34:78:90:ed:14:b6:b5:3d:bd:ca:bb:
                    3b:61:1b:34:ac:c2:eb:1b:6f:81:d3:70:f5:90:76:
                    93:4d:3a:e5:d2:2d:c8:18:bd:cc:5c:3a:01:7f:4a:
                    f4:6a:0f:10:c2:27:a7:ec:86:d2:b9:ef:a5:d0:b5:
                    36:16:75:39:c3:de:04:3f:79:1e:79:f7:73:d0:69:
                    cf:ef:e0:83:85:e6:af:19:35:bd:f6:45:43:88:c1:
                    ff:14:0a:01:8f:29:34:b5:94:82:fd:d5:02:9d:9f:
                    66:b1:cc:f1:97:fa:a3:d0:77:26:94:60:4c:8a:f8:
                    63:e9:7f:42:ea:c3:43:8d:27:00:8c:dc:d8:a2:20:
                    bd:5c:9f:30:93:61:5e:d3:c9:f7:c5:40:54:f9:0d:
                    c4:e9:b7:34:af:0c:be:0c:4f:56:c2:be:94:cb:97:
                    de:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:0F:E4:29:A3:11:D7:27:E5:B2:45:D4:10:3C:DC:42:58:09:08:07
            X509v3 Authority Key Identifier:
                keyid:0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0b:98:1a:86:fb:d3:f5:e5:84:75:c0:71:87:31:cc:c7:91:
         12:d5:37:d9:6a:b5:09:f2:50:33:04:f4:53:bc:b7:a8:df:31:
         38:b5:6b:fb:79:ae:e0:85:a4:c8:50:b5:bc:a9:07:52:f4:dc:
         5f:a1:e3:f1:24:4a:2c:4c:d8:a4:d2:25:5e:67:25:5e:ac:9d:
         bd:bd:33:e4:35:2d:61:dd:14:b7:55:0c:35:f3:9a:55:39:40:
         ce:ee:c8:b2:7d:64:7f:e6:05:7f:a0:a0:60:34:81:74:ac:09:
         3d:fa:e8:4e:62:37:25:b1:40:8a:2a:49:b5:9d:5a:c1:73:d5:
         4c:65:45:84:51:47:09:fb:7d:0c:96:19:92:8b:3c:47:73:1f:
         db:8a:30:28:a0:f4:39:3d:4b:da:9a:2f:c0:aa:2a:8d:12:20:
         c9:f7:e3:3a:16:cc:0e:26:91:50:8e:e1:ee:8b:b5:7d:40:1d:
         33:85:71:80:0d:a5:d6:e5:2f:75:c8:4b:cc:93:fa:c7:ec:96:
         9c:22:18:1e:92:f7:92:a0:8c:91:4c:36:a7:f3:bc:d1:a3:d1:
         e3:da:7b:c1:58:56:96:5d:6d:28:80:cd:6b:30:79:14:4e:c0:
         47:dd:8f:6c:e4:67:56:db:7e:94:9f:7f:56:f2:1d:5f:b9:f8:
         13:b3:ec:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:08 2026 by rpki-client