Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
File:                     DLvQEU2XGWdQ1IxeElbtBVpeniw.mft (raw, json)
Hash identifier:          TrHGpFyFLdrSLhsvtw55AgDfIQezxcNoI/W/6C9ui2g=
Subject key identifier:   4C:E5:06:B3:78:8B:F9:DE:9D:4A:10:B9:1C:7B:D9:91:A1:A0:5A:2D
Authority key identifier: 0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C
Certificate issuer:       /CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
Certificate serial:       019F905A7D8B2EA38726CB1C79589C2D47F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
Manifest number:          0E1E
Signing time:             Thu 23 Jul 2026 19:01:17 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:17 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:17 +0000
Files and hashes:         1: DLvQEU2XGWdQ1IxeElbtBVpeniw.crl (hash: 2YuvCC1UmCIZHnanyTcZ+KcFqadhm+xdjrVOMya5JkM=)
                          2: zTRd4Rg7f52eGJE9IBoR1ppNzbw.roa (hash: 1Wo48c+UEPKDWWzPD4uCsXMeUU5ZpLq6o6j7k+pojVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:7d:8b:2e:a3:87:26:cb:1c:79:58:9c:2d:47:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cbbd0114d97196750d48c5e1256ed055a5e9e2c
        Validity
            Not Before: Jul 23 19:01:17 2026 GMT
            Not After : Jul 24 19:01:17 2026 GMT
        Subject: CN=4ce506b3788bf9de9d4a10b91c7bd991a1a05a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ad:88:81:b2:df:39:b0:60:35:1a:88:03:85:
                    e4:28:99:b0:1e:fb:1a:b5:7f:41:22:71:7f:3f:87:
                    0a:1c:6d:10:a9:6f:44:15:88:15:43:29:c4:1d:8d:
                    e9:cb:c7:76:9c:e6:a5:bd:6e:c9:6a:67:26:d4:ee:
                    d0:14:3c:02:a1:14:2b:9d:01:55:95:2a:5a:1a:5e:
                    e0:87:11:9c:1e:89:b5:87:af:a7:f8:c2:8b:9e:c5:
                    e1:02:cb:f1:f7:f1:6c:11:0c:08:81:f4:d9:02:63:
                    35:5c:b4:d1:94:d4:53:46:c6:30:e2:ae:63:f3:24:
                    03:30:b7:b6:8f:72:00:d6:bc:34:54:24:63:8a:98:
                    ec:05:47:ac:7d:eb:10:56:7d:91:2b:bf:b2:06:0b:
                    32:d0:c5:99:1b:a4:ac:02:3f:74:ad:7e:69:d7:31:
                    e8:40:cd:b9:ac:e8:a4:3b:59:e6:b8:0f:c4:1c:07:
                    32:73:68:bc:87:8b:b5:82:55:e2:66:22:94:c8:ef:
                    bd:14:62:42:00:dd:0a:5a:4f:ca:e5:be:71:98:87:
                    75:25:cf:3e:d1:cd:d0:a2:1a:c4:43:23:9d:f5:d5:
                    47:13:48:b1:3b:7a:33:40:46:21:fb:16:ae:75:5a:
                    e3:c0:8f:a8:5f:1d:e8:55:e7:4b:ef:61:6f:89:e3:
                    6b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E5:06:B3:78:8B:F9:DE:9D:4A:10:B9:1C:7B:D9:91:A1:A0:5A:2D
            X509v3 Authority Key Identifier:
                keyid:0C:BB:D0:11:4D:97:19:67:50:D4:8C:5E:12:56:ED:05:5A:5E:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DLvQEU2XGWdQ1IxeElbtBVpeniw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2a1b4e-d754-443c-a360-afb566cdfac6/1/DLvQEU2XGWdQ1IxeElbtBVpeniw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0a:f7:f0:03:cb:f7:c1:b2:57:0b:d7:2d:36:bd:5c:0b:d2:
         7d:23:a6:41:e0:1a:6a:b9:b0:e2:3b:3e:fe:da:dd:3f:57:bc:
         09:69:e5:6a:84:77:c2:2c:52:68:7d:ee:6a:0d:98:39:8a:24:
         66:89:2e:50:21:f0:d8:eb:9c:65:66:b6:70:e3:1e:46:1b:81:
         7b:0c:da:c5:e0:14:e0:23:d3:20:de:86:dc:22:60:cc:21:90:
         4f:63:d5:03:ab:b8:58:15:c3:7e:0b:80:42:21:99:56:57:a3:
         36:9f:53:07:9f:3c:7a:ae:fd:64:25:87:f7:8d:25:f2:4c:7a:
         19:7f:82:6a:c5:4b:f9:8a:f7:15:9f:b5:36:00:e1:0c:54:db:
         e0:3d:c9:d7:b6:3d:8e:4c:49:10:42:9e:27:e9:88:a0:9d:74:
         e9:99:4a:d7:b0:ea:46:06:47:64:d1:00:22:ab:67:de:bd:8e:
         0c:a9:89:81:1c:c4:24:0e:00:e5:b1:d9:a9:7d:09:a9:48:2f:
         e3:34:ae:f0:52:56:af:18:d9:ca:a3:01:75:41:94:9c:3f:e6:
         0c:14:f2:09:8b:9f:f3:13:a3:b8:63:7d:67:4b:fc:58:1a:64:
         81:7d:00:e2:88:8d:1a:34:45:9e:ae:02:ee:dd:9b:cf:b2:7d:
         f2:b5:31:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:44:57 2026 by rpki-client