Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/DYF3e7d91YluoSHDPq0dO4_E0BM.mft
File:                     DYF3e7d91YluoSHDPq0dO4_E0BM.mft (raw, json)
Hash identifier:          ReEtnX33N0Ibl5ypR0xZ2uY391RJiEt71hQIFvkXfNk=
Subject key identifier:   08:3A:36:39:3F:4A:8C:CE:4C:95:42:2C:B1:99:AB:89:34:4C:00:31
Authority key identifier: 0D:81:77:7B:B7:7D:D5:89:6E:A1:21:C3:3E:AD:1D:3B:8F:C4:D0:13
Certificate issuer:       /CN=0d81777bb77dd5896ea121c33ead1d3b8fc4d013
Certificate serial:       019F935B6BC0D93752A63191A8556538C9EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYF3e7d91YluoSHDPq0dO4_E0BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/DYF3e7d91YluoSHDPq0dO4_E0BM.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:09 +0000
Files and hashes:         1: DYF3e7d91YluoSHDPq0dO4_E0BM.crl (hash: aJSJSc+k9PPcKIBA5mgFNYQ+vj53jytbdnEIKy+8czw=)
                          2: _JEuNfn3kHKfJWMSP98isAPX-Sg.roa (hash: NAFPRSh1rihOy3m6DNxQpfPzR/5xoFfYiQ3FDrwhV9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/DYF3e7d91YluoSHDPq0dO4_E0BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/DYF3e7d91YluoSHDPq0dO4_E0BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYF3e7d91YluoSHDPq0dO4_E0BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:6b:c0:d9:37:52:a6:31:91:a8:55:65:38:c9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d81777bb77dd5896ea121c33ead1d3b8fc4d013
        Validity
            Not Before: Jul 24 09:01:09 2026 GMT
            Not After : Jul 25 09:01:09 2026 GMT
        Subject: CN=083a36393f4a8cce4c95422cb199ab89344c0031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d5:63:a8:2c:4b:7f:79:ba:70:fe:3e:b0:4a:
                    f5:d8:b3:85:b3:13:74:21:54:6d:74:a5:37:c6:0f:
                    4a:ea:ca:c7:6c:a9:73:19:19:49:4c:01:08:5b:96:
                    af:27:ea:ae:2d:fb:dc:a3:94:d3:44:4b:3a:04:9f:
                    88:97:d4:e1:11:ef:37:67:13:7a:dd:b3:02:53:ca:
                    60:ac:60:68:c6:a2:cf:af:b8:0e:b5:86:43:9a:41:
                    cf:aa:1f:6b:a8:79:78:e0:87:25:05:6e:01:d8:35:
                    5e:05:ea:5d:43:de:91:53:e4:cb:00:5f:a3:63:f2:
                    b4:46:fa:8f:06:b5:53:33:da:76:e6:f0:7a:49:99:
                    5b:99:e6:3e:08:9b:4d:8e:55:01:8d:67:49:e8:71:
                    97:62:1a:ac:df:2c:20:94:01:ac:2c:fc:74:a2:65:
                    a9:1d:47:b9:81:7d:39:03:0b:69:01:e5:40:70:13:
                    d5:57:30:13:d4:01:18:4b:cc:9e:f2:df:8c:d3:ab:
                    40:89:32:8a:90:87:3a:33:22:2e:59:b1:5b:dc:82:
                    69:47:4c:4a:b3:5f:a2:2e:53:1e:67:d4:a7:37:9b:
                    06:12:a3:f7:c4:09:79:0e:af:07:e4:90:08:19:5c:
                    91:be:42:9d:eb:16:b7:2d:28:37:61:3e:12:90:87:
                    fd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3A:36:39:3F:4A:8C:CE:4C:95:42:2C:B1:99:AB:89:34:4C:00:31
            X509v3 Authority Key Identifier:
                keyid:0D:81:77:7B:B7:7D:D5:89:6E:A1:21:C3:3E:AD:1D:3B:8F:C4:D0:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYF3e7d91YluoSHDPq0dO4_E0BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/DYF3e7d91YluoSHDPq0dO4_E0BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/DYF3e7d91YluoSHDPq0dO4_E0BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:50:f5:63:d0:2a:12:31:94:a1:da:3f:e5:8d:c6:f7:54:a7:
         99:25:62:ac:65:2f:9d:4f:b0:0c:9a:63:86:e6:b6:e1:3f:4a:
         7e:f0:6b:35:29:ba:1f:be:6a:4b:5a:ac:b3:39:e2:97:71:c8:
         bb:87:16:d6:d1:c9:68:c0:74:34:99:65:98:2e:c0:94:74:dd:
         c2:8e:74:db:ad:1a:3a:cb:c3:32:9e:0e:d1:c8:31:ec:67:ec:
         ce:f5:63:e1:68:3c:18:28:e8:46:ee:bc:a7:0a:e5:e3:6c:98:
         13:a0:25:df:03:cf:aa:0f:59:d8:ce:c7:6a:69:28:ad:9b:3a:
         a7:14:76:f9:e2:67:36:5d:7c:29:0b:b8:7f:19:5e:0a:67:ad:
         13:cd:2f:c7:7b:22:8a:b6:24:b9:4e:84:58:32:61:63:ac:63:
         cc:e1:00:b3:e5:af:72:76:d0:cb:e1:cb:08:4c:be:7c:df:a0:
         76:03:a5:b5:d3:bf:a5:40:d8:95:79:0f:9c:24:f7:52:85:48:
         a3:74:1e:d8:05:a3:62:c8:b1:3f:eb:54:47:39:e1:8d:88:4e:
         d6:d9:ab:9b:d9:58:1e:c7:fb:9d:2c:1d:02:84:a6:72:5b:4a:
         e7:65:ad:bc:fd:f0:82:0f:3d:bd:a4:15:2d:88:1e:25:dc:f0:
         1f:e4:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:39:24 2026 by rpki-client