Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File:                     dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier:          09ogMydr8Psx5qtLT3/OEf1giXIRMRnh1Eklu0mx9sA=
Subject key identifier:   D7:D6:0A:B3:53:2C:23:46:6A:C2:AE:3C:11:BB:C7:69:7E:5A:D6:61
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer:       /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial:       019F935B8A91AF1CB3A3C3585FDF675B107B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number:          0DAE
Signing time:             Fri 24 Jul 2026 09:01:17 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:17 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:17 +0000
Files and hashes:         1: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (hash: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0=)
                          2: FLA5zAJXuRYhVvLbMvHegLVx03k.roa (hash: ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=)
                          3: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (hash: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs=)
                          4: TSfqyIUxAgfu2d6E5vUEde-a71w.roa (hash: m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=)
                          5: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: QNVBC6QSEqne5mkTkbnxvj0Sv/bJ/IvI1lLiBRtPI2o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:8a:91:af:1c:b3:a3:c3:58:5f:df:67:5b:10:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
        Validity
            Not Before: Jul 24 09:01:17 2026 GMT
            Not After : Jul 25 09:01:17 2026 GMT
        Subject: CN=d7d60ab3532c23466ac2ae3c11bbc7697e5ad661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:28:61:b2:45:1f:3b:a3:95:de:96:f1:56:65:
                    b7:7d:e2:a4:d5:c3:8b:ed:72:74:e5:5e:92:5d:98:
                    d3:c3:5b:dc:60:ac:ee:c7:24:8c:43:17:d0:43:78:
                    8e:08:26:52:c1:83:43:cc:eb:a9:d7:21:ed:2f:b1:
                    87:73:98:08:1b:67:ad:4c:93:13:8a:46:9c:bc:03:
                    3f:50:7f:8a:2f:fe:45:c6:79:bb:45:34:fc:fa:03:
                    aa:8e:1e:1b:92:85:97:27:e7:4e:55:d3:f3:66:83:
                    3d:21:8b:30:f0:31:34:4a:9c:e9:9a:0a:0f:c0:89:
                    31:04:74:71:04:43:87:07:64:89:fb:8f:0b:50:84:
                    91:60:52:b4:32:26:da:a9:f4:dc:a0:2b:55:80:4d:
                    b5:f3:76:a5:b6:40:0e:ed:4e:ed:87:2a:fc:be:c9:
                    cb:c1:07:d4:b4:c1:00:e4:92:45:03:19:59:0c:fc:
                    c9:82:6c:37:d9:d8:8d:ae:35:21:fe:d0:c4:95:d4:
                    f7:1f:99:2a:af:3e:4f:c2:29:ac:3c:22:d1:cb:86:
                    47:d5:00:f0:53:53:ee:7c:9f:c4:99:bd:d9:f7:aa:
                    c0:4c:c2:61:23:8b:5f:17:4e:11:48:70:45:00:68:
                    50:48:4e:d1:60:f1:1e:60:fc:e0:60:58:7c:0b:a9:
                    01:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:D6:0A:B3:53:2C:23:46:6A:C2:AE:3C:11:BB:C7:69:7E:5A:D6:61
            X509v3 Authority Key Identifier:
                keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:97:89:60:08:e1:b5:a6:f3:9e:c3:9f:b2:8f:0c:46:f4:45:
         58:85:ab:2d:b0:7c:73:c2:48:34:f8:9d:3d:05:99:e4:0c:94:
         f6:0b:d6:30:6f:01:a8:1f:1d:57:0c:ad:e7:2f:c5:66:84:0d:
         f0:33:1c:6b:2d:9f:8c:8a:c4:2e:db:ab:79:5a:54:db:52:26:
         ec:ff:31:44:52:51:09:8c:11:62:7f:e1:e5:91:f9:a6:02:ab:
         9d:45:11:9b:f3:dd:a7:a0:90:7e:2e:3a:9a:fe:29:af:ea:81:
         7d:19:d7:8d:c3:61:30:cb:93:4b:ca:42:7f:15:08:d1:6e:11:
         ee:1a:55:c5:96:38:c4:c5:03:da:78:27:a9:9f:0f:e2:cb:3d:
         30:f6:5b:b7:7d:02:94:ab:24:a4:1e:21:bd:c9:47:ed:f2:55:
         1a:fa:70:33:5f:63:af:98:8b:a0:b5:1b:61:5f:61:16:1c:1e:
         a2:0a:5e:01:f9:4f:c7:00:50:86:fd:b4:29:0a:c2:d8:7e:68:
         e9:b5:07:a2:24:34:ae:e8:75:1d:55:36:21:95:7a:44:05:5e:
         2c:9e:a1:c8:3d:1b:eb:73:a2:65:0d:d5:15:67:f9:ae:8d:a8:
         5a:88:28:e7:9a:20:cf:ca:98:48:89:b8:97:73:e0:de:92:93:
         e7:a8:97:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:43:21 2026 by rpki-client