Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File:                     DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier:          GD7IB0FPfMUdNYhL0nDFMhRwIj1ac75OaKIyQcGS6y0=
Subject key identifier:   76:F9:12:21:C8:F3:16:BA:9A:F9:7E:C1:D4:CC:C3:29:6D:C2:B0:D0
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer:       /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial:       019F9022E696C715879FECD2C72EE371504F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number:          01D1
Signing time:             Thu 23 Jul 2026 18:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:33 +0000
Files and hashes:         1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: JdO58DsIiCOqJpWJ84pb9SrJoUYx6wyLgRTwfQK9yEA=)
                          2: G9qGP36oJL7nzstx5pUN2QUXe2Y.asa (hash: OGl/tgYi5QcUB5NdTXjApN3cJOZKiO0NBdSGKteHoOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:e6:96:c7:15:87:9f:ec:d2:c7:2e:e3:71:50:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
        Validity
            Not Before: Jul 23 18:00:33 2026 GMT
            Not After : Jul 24 18:00:33 2026 GMT
        Subject: CN=76f91221c8f316ba9af97ec1d4ccc3296dc2b0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4a:16:41:0d:3f:51:62:79:9b:76:7e:7d:00:
                    5c:3f:5f:57:bf:7e:53:ff:86:b8:2d:04:ed:a7:ae:
                    f4:a9:c7:69:5e:26:00:6d:82:10:ae:f4:fe:88:44:
                    2a:dc:a1:ad:dd:47:d2:30:8f:57:96:9a:97:31:1c:
                    dd:5d:0d:e1:78:f2:9d:8d:1a:75:63:05:c2:65:7a:
                    a1:c7:f5:5b:1e:95:8b:a0:c6:bf:0b:5a:84:32:eb:
                    7c:f9:ba:b5:0e:d4:3c:e4:fd:c3:d9:a1:63:e7:35:
                    0f:b7:3a:30:fe:f1:be:63:81:89:97:1e:f8:91:47:
                    6f:2f:09:30:39:47:5b:17:4a:60:cc:a9:1c:9b:4e:
                    ef:b7:3f:16:86:84:67:bf:e2:9a:66:ad:26:ce:90:
                    a8:ba:c9:8d:32:e4:e0:09:c2:96:e5:8e:f2:65:49:
                    a6:5a:66:f8:fe:ef:3e:39:e1:f5:db:dc:e2:6d:3d:
                    94:10:a6:35:81:c4:4c:8d:91:d0:3b:8a:0b:52:9e:
                    73:db:11:4a:5d:a4:20:c8:f1:68:a3:99:7a:a8:71:
                    59:30:54:11:fc:44:5d:12:de:d8:03:8d:c6:e6:cb:
                    83:f2:9c:49:57:16:fa:16:71:99:f2:e3:16:2f:35:
                    e7:cf:3c:74:ad:d5:92:13:58:36:02:e8:c6:89:0d:
                    a4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F9:12:21:C8:F3:16:BA:9A:F9:7E:C1:D4:CC:C3:29:6D:C2:B0:D0
            X509v3 Authority Key Identifier:
                keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d4:99:b3:a1:d4:53:b1:56:f7:05:06:2f:58:12:e3:4d:5c:
         0e:e6:78:81:f4:69:2c:a3:36:95:8f:92:41:c8:31:19:43:d1:
         88:55:74:c1:03:f5:66:df:43:7d:9e:72:21:40:7e:b6:b0:19:
         e8:bf:2b:b2:92:18:82:f4:ec:6f:06:1b:e9:b3:19:6e:13:87:
         0e:62:16:7a:2a:0d:72:9b:1f:30:20:47:dc:8f:76:04:d5:73:
         80:a8:fd:80:34:68:69:7c:14:ed:33:81:8a:8d:f5:e0:89:c2:
         38:d6:64:60:8f:7a:76:38:fc:08:61:9d:2a:45:50:fa:6e:2d:
         5b:a9:1d:77:2e:be:73:69:57:c4:a9:a7:21:e1:37:8d:8b:6f:
         53:e8:61:95:fc:15:34:36:8a:28:31:3b:e8:2a:98:1f:3a:c4:
         fd:a7:bc:a1:ab:7b:4f:6c:4c:8d:75:e0:ba:b2:7a:a1:8b:11:
         54:62:fc:8a:7e:f7:c3:b4:58:a2:ba:b5:4d:b0:60:5a:8a:f7:
         88:f3:47:7b:01:73:b9:47:0a:de:92:a1:d8:07:f7:61:dc:c8:
         bc:a3:43:4f:22:71:23:5f:ea:f4:d0:d5:13:41:c7:ba:b1:ac:
         9a:a6:9d:84:36:c9:3a:a4:98:43:13:ff:0e:4a:cc:69:ad:50:
         72:4e:5f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:46 2026 by rpki-client