Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
File:                     DNwH_ab01Vt8gYLJKaPErDwKgv0.mft (raw, json)
Hash identifier:          2jSpRy4iRDJZ+tCN9kWmZ6PQ78g9Ov8d/v4tWCZrjgQ=
Subject key identifier:   6C:8E:4C:EE:4B:92:1E:18:C3:86:79:A0:7E:BF:EC:BB:09:4D:13:D3
Authority key identifier: 0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD
Certificate issuer:       /CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
Certificate serial:       019F8FECCEB945C9C9BED0024B6A033F6FBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
Manifest number:          16F9
Signing time:             Thu 23 Jul 2026 17:01:29 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:29 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:29 +0000
Files and hashes:         1: DNwH_ab01Vt8gYLJKaPErDwKgv0.crl (hash: 4vrG1WPOBYFMt4G+q4gdTzLa1BCYQ7gwJeTM1MDygSo=)
                          2: sr6kvtXsb97tIbo9gPMbe0i0jnQ.asa (hash: 1+yPxlGMsWOqTyAekCP/j6iLEoAlX6ESpcfSvvIHtOo=)
                          3: ywVzjPA1JlKTUm2ojiiIqywQkjA.roa (hash: Efr8yAzRIBUZFz+Fjffxu8b2LYG9UYl0V4c7dQtT9tU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:ce:b9:45:c9:c9:be:d0:02:4b:6a:03:3f:6f:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdc07fda6f4d55b7c8182c929a3c4ac3c0a82fd
        Validity
            Not Before: Jul 23 17:01:29 2026 GMT
            Not After : Jul 24 17:01:29 2026 GMT
        Subject: CN=6c8e4cee4b921e18c38679a07ebfecbb094d13d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:72:4c:7a:d7:89:f0:0c:8a:da:4b:c2:5a:a0:
                    25:70:24:f2:0f:df:61:0c:fe:20:d0:3f:09:9f:6f:
                    66:17:5d:9b:37:10:76:1f:e2:fd:39:7c:ec:85:e4:
                    93:40:a3:17:f2:fe:44:e7:6f:48:f1:fa:dd:81:59:
                    3e:08:38:93:2d:1f:2b:71:4c:f6:7a:52:20:e1:2d:
                    4f:14:26:55:0e:93:55:c0:ad:cf:e7:22:dc:3f:de:
                    18:1c:f5:c9:36:f4:d3:d2:9f:3c:78:af:d5:54:a4:
                    22:90:2e:19:0c:00:07:f6:22:0a:3f:a6:44:19:e8:
                    86:5c:1f:a5:f6:f6:17:90:5f:09:31:d8:61:f2:05:
                    dc:5e:c8:dc:47:88:82:57:c0:c1:8d:64:3d:df:35:
                    bb:b8:f8:ea:b5:7c:a9:b6:a6:b7:1a:89:11:a5:12:
                    11:44:1f:ec:e8:2a:08:c1:3e:ce:07:03:6d:1a:14:
                    fb:9d:e3:a8:06:e1:43:cc:63:d2:e2:0e:b3:3b:e9:
                    3e:48:5e:44:b2:1f:47:76:a0:fb:64:a8:92:5d:35:
                    28:aa:bb:03:ef:7b:ad:66:d2:73:ed:9f:63:ef:7e:
                    cb:94:8a:9c:35:01:50:eb:04:92:54:25:10:c2:5c:
                    25:32:65:ad:5c:82:ca:8d:92:37:6c:ea:d3:ca:25:
                    2c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:8E:4C:EE:4B:92:1E:18:C3:86:79:A0:7E:BF:EC:BB:09:4D:13:D3
            X509v3 Authority Key Identifier:
                keyid:0C:DC:07:FD:A6:F4:D5:5B:7C:81:82:C9:29:A3:C4:AC:3C:0A:82:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNwH_ab01Vt8gYLJKaPErDwKgv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/ff1078-d196-46a5-a741-ed31e43f1e08/1/DNwH_ab01Vt8gYLJKaPErDwKgv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:eb:c6:1e:7a:8d:e5:d6:b5:bf:81:da:d9:5a:31:4d:01:d3:
         c9:7f:16:e4:3d:d3:90:0d:a2:b4:ab:c3:7a:fe:c8:ea:e6:f8:
         4c:1b:05:c5:e9:32:67:1c:8a:38:c2:5d:12:19:30:de:68:f9:
         44:97:fe:81:9b:13:d9:a3:d4:96:79:1c:a2:3d:02:75:66:7c:
         d4:93:09:75:0d:54:18:f2:31:1a:ab:f3:29:ef:d9:33:99:7e:
         15:d5:8b:9b:38:f7:87:7b:09:d8:a3:91:1b:f4:3e:74:a6:43:
         a6:91:35:0e:6d:6f:50:68:10:a8:ff:92:70:71:c5:22:82:d8:
         22:3c:9b:63:09:b7:99:3a:2f:3c:8f:83:58:34:79:7f:3e:84:
         3f:3c:10:21:28:43:f8:e2:48:d2:f0:40:ad:42:73:5c:dc:eb:
         08:2d:07:54:ab:bf:68:03:8f:c8:15:c6:7d:29:b2:1d:81:73:
         ad:97:2d:8a:64:c1:05:f8:da:9a:3c:0b:5d:b1:c6:a7:19:1f:
         3b:5e:32:82:ae:4c:f8:ad:03:3e:7c:ba:75:cc:57:3e:c4:0b:
         3b:3e:fb:6b:a5:be:79:7f:98:46:8f:0c:a5:6f:9d:5b:31:7f:
         5b:c4:31:a3:db:00:d4:8f:a8:4b:6a:b4:92:2c:71:69:20:cf:
         7d:81:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:13:06 2026 by rpki-client