Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
File:                     DBATeUToh60HVp7U1BKEZzLQr3A.mft (raw, json)
Hash identifier:          uxiU9PC++Lbt6lo/SRmdUcmxm2VaUTzpJpaolBPtZzw=
Subject key identifier:   4C:64:F0:18:92:F6:C9:F5:5B:B9:2C:2E:1C:1E:13:BA:7B:0A:6E:5E
Authority key identifier: 0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70
Certificate issuer:       /CN=0c10137944e887ad07569ed4d412846732d0af70
Certificate serial:       019E1F117751CE7DCF0958436F7833CC6227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
Manifest number:          10E6
Signing time:             Wed 13 May 2026 02:01:38 +0000
Manifest this update:     Wed 13 May 2026 02:01:38 +0000
Manifest next update:     Thu 14 May 2026 02:01:38 +0000
Files and hashes:         1: DBATeUToh60HVp7U1BKEZzLQr3A.crl (hash: aGR+MjAFzN2BU03T4dgsmxJn3g0fdOHBA7iBzXnpzRo=)
                          2: VOGa2OgWjgky6pjaze0aKigA4Xw.roa (hash: AEeSZ9408PCHxw0xHDJSkG2Qd0qqfMOh4o/RtotNNi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:77:51:ce:7d:cf:09:58:43:6f:78:33:cc:62:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c10137944e887ad07569ed4d412846732d0af70
        Validity
            Not Before: May 13 02:01:38 2026 GMT
            Not After : May 14 02:01:38 2026 GMT
        Subject: CN=4c64f01892f6c9f55bb92c2e1c1e13ba7b0a6e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fe:98:e6:e5:fb:ae:d6:f8:b6:c1:26:02:51:
                    9d:79:ff:e2:58:42:5e:2c:e0:cb:52:20:8c:78:7b:
                    94:b7:1d:17:03:ec:eb:47:e4:2e:77:04:0b:52:67:
                    82:1a:df:13:08:f3:de:53:b6:80:67:ab:15:bc:e1:
                    1c:9d:6d:c4:3e:bf:e0:af:9e:f7:94:d7:15:77:af:
                    06:f9:11:d5:ee:7c:69:f5:a5:8f:fe:b8:09:95:f0:
                    2e:e1:34:20:55:1a:55:bd:4a:80:cf:cf:40:14:3c:
                    91:81:8c:f8:6c:40:6b:9e:a6:ae:ec:e2:4c:00:ee:
                    36:d2:1d:36:85:1a:59:8b:4c:54:4e:35:7e:22:f0:
                    cd:73:22:0c:da:f3:a8:4f:42:b8:5b:c7:11:cd:9a:
                    53:bc:7f:09:97:d2:62:94:24:45:88:bf:89:c4:19:
                    10:48:94:84:83:14:40:1e:19:f0:7c:60:74:98:0c:
                    2a:f9:3c:18:3d:0e:bb:63:ee:32:7c:a0:06:fb:ad:
                    7e:55:3d:c5:25:4b:d7:44:55:9a:da:51:25:a1:45:
                    b5:78:e0:c4:56:05:ae:73:2c:4d:e8:66:bf:f7:29:
                    96:6b:6f:2f:46:9f:5b:42:ce:91:b9:aa:75:93:1f:
                    f6:b2:4f:bf:1c:6e:73:49:23:4a:3d:b8:27:58:ed:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:64:F0:18:92:F6:C9:F5:5B:B9:2C:2E:1C:1E:13:BA:7B:0A:6E:5E
            X509v3 Authority Key Identifier:
                keyid:0C:10:13:79:44:E8:87:AD:07:56:9E:D4:D4:12:84:67:32:D0:AF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBATeUToh60HVp7U1BKEZzLQr3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/584a46-3fdc-425b-b2b6-f03aae13032f/1/DBATeUToh60HVp7U1BKEZzLQr3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d4:c1:74:f3:8d:c5:10:af:f9:da:5e:4f:8f:c4:f6:ba:04:
         e6:22:c4:88:68:e5:90:62:71:9a:2b:48:8d:45:a6:a2:5e:89:
         ca:a5:3b:61:da:81:1c:12:5e:5e:20:94:fa:fc:0d:13:b6:b9:
         a8:f9:08:4b:58:9f:54:b5:6f:91:4e:f0:fb:ec:23:bc:4c:00:
         9b:ea:de:31:b5:48:4b:6b:f5:2e:fe:8d:40:70:3e:ba:e0:99:
         ee:0e:f3:50:f7:eb:7a:79:06:72:e4:01:e8:44:bb:4c:1e:c0:
         37:0b:2f:ae:ba:d5:e8:a7:99:fc:7e:07:ea:10:d3:96:71:b0:
         fc:9b:75:3a:6f:3f:23:5f:dc:0b:f1:c0:a1:87:ce:90:b7:82:
         a4:ce:b3:2d:92:12:a2:b8:b9:3b:a4:76:54:99:2d:05:3f:6b:
         69:c6:b5:5a:ca:4c:af:3c:5a:93:2f:44:2b:d2:10:82:ac:5c:
         4a:18:92:df:56:09:81:02:d9:92:a4:19:ed:ac:2e:9d:6f:81:
         02:30:f3:03:8d:4e:d0:cb:74:b4:b4:62:4f:b2:67:fc:ea:3f:
         ad:6a:5a:99:00:e6:bb:6e:22:97:d5:3c:16:63:e0:a0:16:6d:
         97:e4:cb:25:2d:84:b4:3b:2e:e9:09:bf:09:e0:a7:2f:3a:e3:
         b7:4a:5a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:12 2026 by rpki-client