Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
File:                     0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json)
Hash identifier:          JEsVgC0qgS0wJqQWLIa18itu5w2eko3ARz7/5KQh0GU=
Subject key identifier:   C2:58:3E:14:FB:9D:3F:4A:36:19:EB:C3:99:1F:D2:88:3D:F9:DF:FC
Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08
Certificate issuer:       /CN=d010ee78bbd487d39d79cb198085e984f702a208
Certificate serial:       019F916D48F2D3396E68E4E3AE7895DA910F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
Manifest number:          0CB9
Signing time:             Fri 24 Jul 2026 00:01:26 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:26 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:26 +0000
Files and hashes:         1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: ual8UDJFtPTyxsUpFK2KUpz8QSbUD3GkG8Rz22TPJlY=)
                          2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:48:f2:d3:39:6e:68:e4:e3:ae:78:95:da:91:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208
        Validity
            Not Before: Jul 24 00:01:26 2026 GMT
            Not After : Jul 25 00:01:26 2026 GMT
        Subject: CN=c2583e14fb9d3f4a3619ebc3991fd2883df9dffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:91:b8:32:cc:1c:04:e5:ab:1f:34:d4:b8:
                    6f:f5:bf:a2:44:84:32:25:13:29:ab:94:1e:7b:f3:
                    6a:5d:4c:4b:99:26:b0:f7:ac:85:19:26:e8:b5:a5:
                    aa:42:14:43:06:2b:b6:40:4f:3e:ec:45:44:d3:47:
                    55:2a:7a:3c:1b:ab:85:11:a2:c3:4a:a4:73:e3:ae:
                    3d:83:a2:72:b8:20:30:3a:ad:28:80:d6:88:d2:a9:
                    96:fe:ae:b9:49:a1:78:b5:37:45:a1:2b:38:1b:95:
                    5c:8d:49:98:f3:87:a6:19:7d:51:94:e9:c7:ef:bd:
                    9b:1b:94:b4:d2:7a:7a:91:13:ac:3c:5f:53:21:85:
                    3e:19:d5:24:95:05:21:24:cd:88:60:17:c3:1c:90:
                    56:72:fe:6a:57:f4:b4:da:55:f7:e5:86:c1:cc:73:
                    d1:f3:97:fd:91:46:76:69:86:dc:3f:86:93:2e:cf:
                    63:74:15:87:ff:3f:a4:57:39:08:b7:f5:b8:1c:51:
                    40:8f:98:76:be:16:4a:50:19:4f:eb:4b:e6:f3:ad:
                    86:09:7c:c6:a8:07:59:f0:f3:9e:1e:07:03:bd:9f:
                    02:d2:ef:fd:40:22:e9:00:f0:97:ff:a9:b9:c3:1a:
                    b9:6a:d0:13:f9:fa:c3:d4:9d:aa:8a:bf:09:60:35:
                    43:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:58:3E:14:FB:9D:3F:4A:36:19:EB:C3:99:1F:D2:88:3D:F9:DF:FC
            X509v3 Authority Key Identifier:
                keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f8:2f:57:f8:ac:75:f5:c4:3f:31:0c:c4:00:bc:58:8a:a9:
         23:ca:6f:c0:cd:2e:16:1f:5a:43:6d:ac:cc:17:71:8f:b8:ed:
         09:96:0e:52:b9:53:a4:fa:e1:24:1a:8d:64:06:7a:6f:ae:a8:
         5e:ac:26:fe:6a:d1:c8:ae:cc:4b:8c:e6:f2:9a:ed:df:3b:bd:
         89:88:6f:52:87:4f:ed:c3:68:12:c8:07:70:42:66:4e:10:89:
         63:64:55:11:5f:05:eb:84:b9:38:9e:c4:be:98:85:18:81:ef:
         e6:6d:32:51:1b:c5:df:c9:fe:e1:b7:4d:9e:c6:09:68:8a:2a:
         21:a9:f4:52:ce:92:67:20:3e:89:89:1f:80:17:43:72:8f:e3:
         4d:ae:12:f4:22:d5:3e:6a:8c:de:59:11:6f:77:8b:d4:5d:d4:
         a1:75:a9:f9:2a:68:ac:47:26:6e:f7:73:2f:85:42:6b:ca:68:
         33:72:29:dd:3d:66:c7:e8:de:22:65:db:0f:e5:f3:36:c4:b8:
         60:ae:b8:4a:ec:3a:78:9e:88:71:e3:bd:60:7b:0a:7c:54:7e:
         eb:43:58:9f:f4:a5:13:8b:c9:99:06:29:12:1c:a2:25:20:ed:
         33:59:d7:e1:15:3c:e6:3b:66:8d:43:2d:7b:74:15:88:b3:dc:
         2f:33:30:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:09:25 2026 by rpki-client