Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
File:                     DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft (raw, json)
Hash identifier:          ogen4LdwIujElGvEejPxuZx+Vuv57cGdtsQsw51HoRI=
Subject key identifier:   43:3B:95:85:DB:D9:8A:D1:CD:97:AF:C4:EE:36:59:0E:44:D4:25:B9
Authority key identifier: 0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3
Certificate issuer:       /CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
Certificate serial:       019F94DC40671EB3CBD4CCFB64449DF28430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 16:01:30 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:30 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:30 +0000
Files and hashes:         1: DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl (hash: ZrnAwz84PmX9NSrc17s63D4QDu1SZwSxO2P8eM0s6Rc=)
                          2: xRmmdqH1-j--sEXPtnNY3Z-R5Zo.roa (hash: 3OUa7VjiPRdUyQdSMo547+vkOocCdI86key02w1U7/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:dc:40:67:1e:b3:cb:d4:cc:fb:64:44:9d:f2:84:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2625bdffa9437dc2b96d8ae023100bc88e6fe3
        Validity
            Not Before: Jul 24 16:01:30 2026 GMT
            Not After : Jul 25 16:01:30 2026 GMT
        Subject: CN=433b9585dbd98ad1cd97afc4ee36590e44d425b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:32:a2:d2:ff:ce:ed:e8:4c:9c:6f:13:98:
                    f8:e2:78:95:54:23:c8:18:df:1b:38:67:9b:b0:20:
                    b6:70:dd:3b:64:69:31:63:fe:13:b9:50:53:f2:b5:
                    10:ef:2a:4a:ea:24:50:88:ae:2a:90:b2:1f:22:d5:
                    0a:00:3b:9f:40:dd:0c:b5:61:ba:c8:db:12:fc:88:
                    f0:94:1d:cb:2c:52:f2:cd:d8:02:c7:40:e6:00:35:
                    de:44:2d:f0:b9:b6:f1:17:60:a2:b2:8d:58:92:53:
                    4f:8e:7b:cd:c6:81:80:50:c9:73:7c:f3:3e:ac:dc:
                    94:a5:3e:52:ce:b9:f1:5a:c7:1f:3e:cd:f1:ec:6a:
                    2c:1c:30:66:88:9c:a2:9d:d9:30:e3:02:22:27:a2:
                    9c:e1:af:a5:29:57:c9:f7:6c:50:09:6a:60:72:ac:
                    23:f6:7d:08:5e:34:5a:d0:d4:b8:c9:ee:32:be:d5:
                    12:4e:69:3e:34:29:cf:2d:9e:71:42:bc:7f:3c:0d:
                    37:5e:76:0a:24:1c:a5:3c:51:a0:e0:30:99:86:26:
                    15:2e:cb:5c:a3:65:c9:30:a1:57:0f:0e:3c:24:b9:
                    b5:2f:59:bb:22:34:df:fd:71:54:be:5b:92:c0:bd:
                    7e:2f:b8:d4:c4:8d:a3:9e:8d:0d:11:89:d5:66:96:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3B:95:85:DB:D9:8A:D1:CD:97:AF:C4:EE:36:59:0E:44:D4:25:B9
            X509v3 Authority Key Identifier:
                keyid:0C:26:25:BD:FF:A9:43:7D:C2:B9:6D:8A:E0:23:10:0B:C8:8E:6F:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCYlvf-pQ33CuW2K4CMQC8iOb-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/9c78b9-da39-450f-bb96-07804aff490f/1/DCYlvf-pQ33CuW2K4CMQC8iOb-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:84:c3:81:f3:93:78:fb:02:eb:82:9d:e1:38:2c:7a:fe:a3:
         34:8c:a6:9b:d5:e8:69:5d:ea:07:e8:6c:a4:21:45:6b:92:a0:
         5c:f7:9a:1a:5f:99:69:cc:c0:4c:5f:6e:67:aa:d9:f9:f4:0a:
         01:4c:9c:1c:ec:25:cf:ed:c7:db:47:66:b3:9d:d0:c8:0c:8a:
         53:d5:17:81:34:f7:18:23:88:01:30:d6:ba:d9:2f:03:9e:03:
         0a:1b:22:7c:dd:c7:96:78:47:c8:f6:7c:74:c5:ce:d0:41:a3:
         c0:57:7e:01:d1:48:71:a4:ef:2a:d4:fb:ca:ac:af:9d:c4:6c:
         c6:96:e6:76:1b:c9:00:48:b8:be:0b:3f:7a:cd:6b:ad:dd:a3:
         8f:fe:bf:fe:1d:e6:ed:c2:48:17:c2:f5:4b:4e:22:67:71:ac:
         71:75:26:c9:14:73:ea:e6:c2:c6:a3:e8:41:e6:91:99:3d:2c:
         0d:aa:a4:e8:12:50:d3:0d:72:99:dd:aa:97:17:ea:34:07:df:
         21:43:0d:a9:bb:85:fc:95:a7:51:3d:ac:4f:c4:86:6b:9c:ad:
         e3:8f:b0:00:f6:64:79:5f:b8:61:ff:2c:6b:ef:2e:b0:47:29:
         44:1c:c2:49:54:59:61:46:b5:40:59:0b:10:3a:89:a1:af:5b:
         63:0f:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:22 2026 by rpki-client