Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File:                     DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier:          DPI24syMlQMcY7VAZbZyZTEIhQ3tC3W5lCX6p0+U4E4=
Subject key identifier:   49:D5:9E:5B:7B:32:C3:75:C1:AA:1F:D2:45:1D:93:BB:21:0D:F4:FF
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer:       /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial:       019E1D91119321726B595E74F4F974DA1556
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number:          0453
Signing time:             Tue 12 May 2026 19:01:46 +0000
Manifest this update:     Tue 12 May 2026 19:01:46 +0000
Manifest next update:     Wed 13 May 2026 19:01:46 +0000
Files and hashes:         1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: o5Omm7rTTQkDzkbadrGx90fHFV2i3il1QiyFP/W5nOA=)
                          2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:11:93:21:72:6b:59:5e:74:f4:f9:74:da:15:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
        Validity
            Not Before: May 12 19:01:46 2026 GMT
            Not After : May 13 19:01:46 2026 GMT
        Subject: CN=49d59e5b7b32c375c1aa1fd2451d93bb210df4ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:d5:96:f9:a6:2e:05:e6:65:e6:27:ab:73:
                    98:43:be:98:d6:38:19:47:9b:39:5c:0e:b5:6d:74:
                    ac:20:bd:b8:39:17:08:56:6e:17:bf:58:e5:45:c5:
                    cf:45:2e:0c:36:d1:6e:6e:e0:34:14:80:e5:ec:99:
                    54:4c:7d:22:0f:eb:ba:91:ec:7f:3b:a4:fa:03:ac:
                    b3:3b:7f:1f:0e:c3:72:9c:8c:20:c2:b0:09:28:da:
                    48:b9:ca:79:31:7e:b6:b4:3f:a7:e6:2b:42:5a:08:
                    eb:7f:e8:22:d7:5c:ae:9b:37:68:7a:e6:ba:18:21:
                    bd:7e:29:d9:1f:b8:ee:0b:28:61:57:69:d4:b2:5b:
                    0f:19:fd:74:8d:eb:9a:aa:08:f5:a0:aa:ff:85:2f:
                    1d:eb:53:05:43:00:6e:d4:61:78:c3:58:6f:9e:64:
                    15:fa:45:be:dd:25:7a:9c:a4:04:70:39:a9:a7:1d:
                    6b:f6:43:92:b9:62:10:ec:60:ba:e7:9c:45:a4:37:
                    b6:70:11:cf:5d:9f:d2:1f:66:23:60:80:91:39:38:
                    1c:b4:b4:0a:ed:80:a7:7e:7e:37:38:c4:b2:fe:6e:
                    7b:d2:90:9a:42:30:9c:64:df:59:8b:26:6d:af:d8:
                    69:35:0d:84:48:06:88:37:d2:46:b1:df:8b:e2:31:
                    f6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D5:9E:5B:7B:32:C3:75:C1:AA:1F:D2:45:1D:93:BB:21:0D:F4:FF
            X509v3 Authority Key Identifier:
                keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:b0:3e:12:ab:aa:fc:e6:5b:dd:cc:4b:6e:69:7e:64:71:c0:
         20:79:03:9f:ab:12:aa:57:04:80:66:9b:10:d7:36:06:77:6f:
         83:02:42:64:6d:73:96:d0:1a:a4:15:dc:8f:3d:63:90:b0:b9:
         05:ef:b4:ef:c2:7e:b0:ff:61:6e:45:36:d1:d6:bb:c8:6c:e5:
         44:4c:65:f6:fd:7d:53:d3:c9:32:23:86:20:ad:fe:85:e5:3e:
         70:eb:ee:e6:65:1f:61:42:97:1a:33:c0:e7:4d:d1:33:84:4c:
         f7:b7:63:03:d3:6a:e8:ea:bd:e0:6c:cc:a5:cc:e8:02:7e:82:
         83:d9:d0:54:b7:7c:b3:20:ab:13:21:5f:a2:9f:86:12:a0:05:
         0e:5b:84:32:00:26:7d:97:15:5e:ba:c4:ec:97:a8:81:08:08:
         f6:f3:ee:13:2b:41:ad:77:5e:64:bb:87:b0:73:a7:36:e9:db:
         a7:70:c3:76:b0:2e:42:8f:e7:f4:ab:1f:98:e1:52:52:8a:a6:
         28:ff:a6:3c:a5:0a:de:6e:9b:e2:3c:26:60:73:5f:fe:5f:62:
         8d:77:23:f3:97:a3:3a:46:e3:4d:68:07:bd:b0:97:f6:fc:0c:
         6b:1f:f9:35:aa:65:b8:fa:f0:fd:89:58:68:71:27:59:d0:bf:
         40:97:2b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:31:00 2026 by rpki-client