Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
File:                     DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json)
Hash identifier:          0VVgaIieUunzomFWx35deGiq9g5upaSZsPygcsGhh40=
Subject key identifier:   F7:2E:1F:A4:6E:27:77:FC:8C:51:0F:69:DB:EB:2A:8B:C7:CA:F9:17
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Certificate issuer:       /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial:       019F916DB9294CEDF0B359999A1339AF0345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 00:01:54 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:54 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:54 +0000
Files and hashes:         1: 1-KiwJ7_SOfhMSL1wh3lOIzJdqf0.roa (hash: Q/Tsqdd7rd4T6xRRkiE1SIt+/mkcRs5YGJIeO2ihizo=)
                          2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: Xp5tdWz4S9X5Sf5P9eherc9b+A9S9rQg67YL1vNeeXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:b9:29:4c:ed:f0:b3:59:99:9a:13:39:af:03:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
        Validity
            Not Before: Jul 24 00:01:54 2026 GMT
            Not After : Jul 25 00:01:54 2026 GMT
        Subject: CN=f72e1fa46e2777fc8c510f69dbeb2a8bc7caf917
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8d:57:b9:2a:52:28:2b:c6:1d:c5:74:c8:21:
                    ad:a3:bf:b0:c9:4e:a7:4a:fd:bf:4e:6d:d2:51:9d:
                    1e:a9:6a:30:d0:59:8e:3b:29:0b:6c:1b:52:b1:13:
                    50:ba:c6:95:c4:d4:3c:55:75:16:f8:b8:b2:12:38:
                    c5:3a:4e:6c:db:13:cd:80:41:cb:db:29:93:50:7a:
                    8e:33:25:98:90:64:7b:60:94:06:1a:5d:45:c4:dd:
                    73:3a:c9:df:fe:9e:27:8b:68:71:09:3a:b7:db:05:
                    65:aa:99:e2:53:51:aa:29:3e:43:d5:21:53:ce:5c:
                    01:dd:e9:10:7e:f2:07:b5:51:aa:f8:59:98:ca:2c:
                    b5:96:75:08:71:8f:dd:eb:47:6f:95:4a:c5:6e:c4:
                    0e:e3:5e:5d:d7:f8:00:de:2f:a8:01:a0:e2:d3:16:
                    f8:ae:f1:5b:d4:3b:7d:1b:89:8f:66:7d:c2:4f:86:
                    16:31:73:54:2e:f0:62:88:41:1b:03:48:66:a8:55:
                    f7:40:5d:56:c4:36:e0:ee:bf:6b:74:8d:eb:94:00:
                    d8:30:7d:cb:21:86:90:25:65:82:51:15:ef:24:44:
                    23:03:1b:52:c0:4f:13:f7:03:52:9e:a8:03:ef:89:
                    0c:cc:41:3a:56:1e:f8:83:55:87:81:c9:78:88:84:
                    03:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2E:1F:A4:6E:27:77:FC:8C:51:0F:69:DB:EB:2A:8B:C7:CA:F9:17
            X509v3 Authority Key Identifier:
                keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:54:f6:b8:ac:15:0d:fc:50:71:ea:21:5a:e5:da:b2:d8:04:
         77:aa:f4:7c:67:93:37:c1:da:f0:61:7f:20:dc:8b:ad:ae:83:
         e3:3b:1d:6c:2c:be:96:78:f8:87:6f:41:e2:85:07:9e:84:8b:
         d5:6b:98:e6:7b:06:7c:47:ec:03:ec:44:74:c7:76:d5:ac:d0:
         2c:49:49:c0:76:ea:78:65:2c:14:8f:a9:cf:1a:f3:81:5b:51:
         55:24:15:7f:2e:fb:08:27:60:d0:e1:5a:d7:d9:52:96:dc:65:
         18:4e:f8:0a:26:cd:6a:59:75:7b:0f:77:5e:b3:79:31:18:80:
         1b:bd:f0:4d:0c:f9:ec:d6:bb:3c:0f:22:f1:83:2b:bb:2c:c0:
         42:e9:92:bf:52:a0:6e:1c:8f:03:da:b0:e3:e0:85:a9:4c:4b:
         e1:1a:92:b6:d2:55:70:7a:91:dd:f0:69:bf:76:03:21:61:52:
         ac:ae:e3:6d:10:85:1c:ff:a6:3e:6d:7e:e8:5a:b7:37:5a:86:
         bf:13:bc:13:d6:b0:92:74:40:7c:dc:12:0b:9d:a8:ba:3f:54:
         3d:58:4e:5f:09:ba:f1:00:45:12:19:25:18:f4:99:4a:96:2e:
         4a:70:0a:f5:39:3a:15:89:9a:80:c3:fa:1f:fd:de:4e:2e:f1:
         3e:5d:a0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:34 2026 by rpki-client