Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.mft
File:                     dnvDZOY8eqV5U_s-SlF447Q8H28.mft (raw, json)
Hash identifier:          3dWfZzp41lD4zJrhFM2L7MjNFdY/1HTSHh4CqZNdHn4=
Subject key identifier:   8B:47:FA:39:3E:5A:DA:22:EF:BF:3B:DE:93:88:27:4A:86:E4:93:2C
Authority key identifier: 76:7B:C3:64:E6:3C:7A:A5:79:53:FB:3E:4A:51:78:E3:B4:3C:1F:6F
Certificate issuer:       /CN=767bc364e63c7aa57953fb3e4a5178e3b43c1f6f
Certificate serial:       019E1F478934B1A86A46C45B4B691708109B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dnvDZOY8eqV5U_s-SlF447Q8H28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.mft
Manifest number:          21
Signing time:             Wed 13 May 2026 03:00:42 +0000
Manifest this update:     Wed 13 May 2026 03:00:42 +0000
Manifest next update:     Thu 14 May 2026 03:00:42 +0000
Files and hashes:         1: 5AE7_O4mI7-H6Wv-ZhNYnselqaU.roa (hash: ZU8q9mKfymGsv/1D2pNr1VbfbTiFUrL0MjqiBD7DHmM=)
                          2: dnvDZOY8eqV5U_s-SlF447Q8H28.crl (hash: R8m3c/N97S/bYQOFspOo7cCADMLd4TxfdZaYTlAaQvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dnvDZOY8eqV5U_s-SlF447Q8H28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:89:34:b1:a8:6a:46:c4:5b:4b:69:17:08:10:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767bc364e63c7aa57953fb3e4a5178e3b43c1f6f
        Validity
            Not Before: May 13 03:00:42 2026 GMT
            Not After : May 14 03:00:42 2026 GMT
        Subject: CN=8b47fa393e5ada22efbf3bde9388274a86e4932c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:89:4f:5e:4f:fc:90:8b:9e:75:85:c6:9e:
                    aa:92:2b:03:af:47:f1:81:b5:b1:4e:26:cc:7d:8f:
                    c8:4c:0c:19:14:59:73:97:a1:74:dd:d6:a0:88:19:
                    b0:15:4e:a9:87:4d:41:6a:39:41:49:e2:d7:3b:e8:
                    78:48:bf:35:7b:a2:e1:4b:db:66:1a:33:a1:d6:32:
                    e7:01:15:d3:86:e7:a6:1b:a1:c3:2a:fe:a1:3c:7f:
                    e2:d1:be:f3:28:cb:90:24:b6:a8:45:8f:ae:46:9c:
                    5a:4e:40:b5:af:c1:58:a8:d5:fa:8e:8e:a3:73:36:
                    75:cd:44:39:6d:87:48:ca:0a:1d:49:f3:22:30:22:
                    05:a7:87:f2:54:6b:97:7e:5e:b6:c8:ff:b2:22:0a:
                    cf:8e:19:64:18:20:e7:8e:63:54:dd:1f:b9:d4:a8:
                    1e:8d:10:ea:0f:88:c0:68:e9:86:2d:da:6f:14:5f:
                    97:59:6d:eb:e7:70:91:37:13:cf:75:84:85:34:77:
                    b4:22:cd:6b:02:62:a4:fa:a1:89:fc:72:6d:30:41:
                    0e:2c:af:6a:08:f2:a4:2a:d0:df:f4:6b:5d:a8:48:
                    be:d5:3f:dd:67:2b:32:2c:7e:a1:40:eb:72:07:4c:
                    42:ba:e6:bb:69:aa:1d:d8:f4:49:cf:bc:05:9a:9a:
                    56:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:47:FA:39:3E:5A:DA:22:EF:BF:3B:DE:93:88:27:4A:86:E4:93:2C
            X509v3 Authority Key Identifier:
                keyid:76:7B:C3:64:E6:3C:7A:A5:79:53:FB:3E:4A:51:78:E3:B4:3C:1F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnvDZOY8eqV5U_s-SlF447Q8H28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d6a5e8-469f-4c27-87b3-3c6dd5e3e935/1/dnvDZOY8eqV5U_s-SlF447Q8H28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:62:e0:c3:f6:b8:5f:d5:cc:28:7f:78:e4:af:01:59:c5:04:
         5e:2b:63:eb:2f:32:29:1c:e7:4f:1c:0f:06:0d:36:3f:f8:7f:
         9a:d1:8a:27:ea:11:e1:64:9b:1a:74:38:fe:d1:a7:a0:d2:23:
         5a:01:10:b3:7d:bd:8f:2f:8d:71:31:01:18:dc:c8:e6:71:85:
         e3:36:d5:86:cf:91:fb:cd:de:d3:86:01:f1:fe:cf:8e:c8:46:
         94:30:97:cb:06:a1:b9:c5:55:43:89:ca:be:be:0e:94:1a:5b:
         47:1f:48:0b:0f:44:57:28:da:79:80:ea:57:70:27:f4:84:28:
         7b:7c:8b:79:fc:55:c8:9d:af:97:7f:e6:78:84:36:3c:50:e6:
         5b:55:31:7c:dc:e7:36:5d:f3:71:02:b4:2a:51:9f:40:78:47:
         93:f4:61:2a:87:3b:12:85:fa:fb:bc:52:c3:8b:2b:e9:fe:ee:
         31:30:ce:3d:bf:00:42:b5:2e:64:89:7d:a2:10:af:24:16:f3:
         e9:d7:35:af:d5:c6:fe:89:6f:4e:c4:8d:0f:64:0e:dd:3e:6a:
         39:c5:e7:b6:32:b4:c8:f1:7b:46:03:d7:9e:8a:18:e0:7a:4d:
         1c:5d:0b:3b:3a:3b:17:f4:7a:af:79:f8:7f:76:8d:04:e2:6e:
         54:67:e1:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR4k0sahqRsRbS2kXCBCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2JjMzY0ZTYzYzdhYTU3OTUzZmIzZTRhNTE3OGUzYjQz
YzFmNmYwHhcNMjYwNTEzMDMwMDQyWhcNMjYwNTE0MDMwMDQyWjAzMTEwLwYDVQQD
Eyg4YjQ3ZmEzOTNlNWFkYTIyZWZiZjNiZGU5Mzg4Mjc0YTg2ZTQ5MzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUKJT15P/JCLnnWFxp6qkisDr0fx
gbWxTibMfY/ITAwZFFlzl6F03dagiBmwFU6ph01BajlBSeLXO+h4SL81e6LhS9tm
GjOh1jLnARXThuemG6HDKv6hPH/i0b7zKMuQJLaoRY+uRpxaTkC1r8FYqNX6jo6j
czZ1zUQ5bYdIygodSfMiMCIFp4fyVGuXfl62yP+yIgrPjhlkGCDnjmNU3R+51Kge
jRDqD4jAaOmGLdpvFF+XWW3r53CRNxPPdYSFNHe0Is1rAmKk+qGJ/HJtMEEOLK9q
CPKkKtDf9GtdqEi+1T/dZysyLH6hQOtyB0xCuua7aaod2PRJz7wFmppWKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItH+jk+Wtoi77873pOIJ0qG5JMsMB8GA1UdIwQY
MBaAFHZ7w2TmPHqleVP7PkpReOO0PB9vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG52RFpPWThlcVY1VV9zLVNsRjQ0N1E4SDI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kNmE1ZTgtNDY5Zi00YzI3LTg3YjMt
M2M2ZGQ1ZTNlOTM1LzEvZG52RFpPWThlcVY1VV9zLVNsRjQ0N1E4SDI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kNmE1ZTgtNDY5Zi00YzI3LTg3YjMtM2M2ZGQ1ZTNlOTM1
LzEvZG52RFpPWThlcVY1VV9zLVNsRjQ0N1E4SDI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGLgw/a4
X9XMKH945K8BWcUEXitj6y8yKRznTxwPBg02P/h/mtGKJ+oR4WSbGnQ4/tGnoNIj
WgEQs329jy+NcTEBGNzI5nGF4zbVhs+R+83e04YB8f7PjshGlDCXywahucVVQ4nK
vr4OlBpbRx9ICw9EVyjaeYDqV3An9IQoe3yLefxVyJ2vl3/meIQ2PFDmW1UxfNzn
Nl3zcQK0KlGfQHhHk/RhKoc7EoX6+7xSw4sr6f7uMTDOPb8AQrUuZIl9ohCvJBbz
6dc1r9XG/olvTsSND2QO3T5qOcXntjK0yPF7RgPXnooY4HpNHF0LOzo7F/R6r3n4
f3aNBOJuVGfh/Q==
-----END CERTIFICATE-----
Generated at Wed May 13 06:01:22 2026 by rpki-client