Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File:                     DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier:          B0XBjPMOklRMpRb/ZSfJm904SPk1Lff7No0r12dRL6w=
Subject key identifier:   57:B9:1C:49:A5:F3:8C:73:1B:90:97:08:42:97:14:EC:1E:D6:53:67
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer:       /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial:       019F92ED788B436B5F1EDB273D59F33F6EEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number:          0CD8
Signing time:             Fri 24 Jul 2026 07:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:04 +0000
Files and hashes:         1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: CYhTzzJyqKv/mpNc8Hv28bpyh8jDGYsBp7vVsdhHOe8=)
                          2: j8vNC93uxoh-4kk4cHhskKuIFe4.roa (hash: BN9kSSFWkYcPXBEGoOjVhdYG3iHtGqPP4CWGHkZ5iSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:78:8b:43:6b:5f:1e:db:27:3d:59:f3:3f:6e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
        Validity
            Not Before: Jul 24 07:01:04 2026 GMT
            Not After : Jul 25 07:01:04 2026 GMT
        Subject: CN=57b91c49a5f38c731b909708429714ec1ed65367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:95:56:77:c1:12:60:69:9d:67:a4:4c:43:
                    e9:b1:49:65:9b:c1:3b:c7:c8:37:a0:21:86:b9:cc:
                    34:c7:21:de:cc:65:83:84:85:f8:fb:11:09:50:8c:
                    58:5e:ea:d4:c7:5c:4d:1a:00:a2:5a:1e:c0:01:e1:
                    bd:48:59:9a:46:10:cb:d3:b3:09:a2:da:1e:ee:3b:
                    a2:b7:36:d9:32:3d:4d:0c:bf:c5:80:c9:09:a0:f8:
                    54:d1:fd:41:20:96:0b:d8:50:81:61:d6:34:a5:e1:
                    96:96:7d:f9:4b:02:71:be:6e:bc:dd:d4:99:d0:25:
                    ca:94:d1:42:23:b7:9d:45:05:fb:04:a4:53:8e:2e:
                    8f:78:6c:62:66:07:d5:bc:e1:a8:56:d4:7b:18:25:
                    2d:67:5d:fb:d8:df:3f:e2:72:ec:ed:a3:8f:3f:f0:
                    19:a3:2f:a3:1d:98:fe:b1:ca:ee:65:63:90:d5:80:
                    7c:29:11:bd:19:b3:14:1b:bc:7d:d6:30:c5:82:c9:
                    63:ad:ff:87:9b:2a:c6:58:2f:54:89:b2:f1:cc:0e:
                    66:4e:21:04:d5:e2:9b:1d:ac:8f:c8:d4:17:29:9e:
                    73:8f:fb:eb:b6:99:69:27:0e:66:05:4c:36:39:f4:
                    24:14:8d:f2:63:67:f6:d3:4c:ea:ac:f4:61:df:bf:
                    2b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B9:1C:49:A5:F3:8C:73:1B:90:97:08:42:97:14:EC:1E:D6:53:67
            X509v3 Authority Key Identifier:
                keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:7b:e7:4f:a7:2d:2f:84:c6:f5:5d:aa:35:c0:84:7f:87:ee:
         89:dd:6c:97:09:bf:16:31:27:04:9e:8e:c0:e5:65:01:fa:ed:
         69:ee:fb:45:0d:10:1b:dd:d8:26:96:1f:d1:e7:e3:e9:b7:72:
         a2:1a:25:22:43:6d:a8:9a:54:6e:5a:8c:24:4f:11:9f:1c:2e:
         57:9b:7d:77:79:7c:f9:5b:48:ec:ed:77:7a:1e:33:e5:aa:d3:
         93:e9:73:85:81:ea:b3:cf:84:0d:0c:97:00:1f:09:b4:3b:7d:
         ce:02:80:0f:f6:46:18:fd:a3:4f:c6:98:5c:fd:54:ae:16:db:
         09:e3:d7:66:ed:36:d1:28:bd:13:0c:66:30:c2:8e:74:30:8c:
         09:34:b8:41:16:ba:97:a3:dc:b2:c8:47:9c:d6:8c:02:b8:ad:
         fd:c6:d6:2e:65:3c:8c:7f:10:e5:02:0e:8c:da:96:bc:1d:82:
         3a:67:f1:69:c1:1f:79:05:82:be:92:2f:9c:13:f3:c2:db:cf:
         56:3a:77:4b:76:aa:fb:cd:30:45:f7:4d:63:6e:2f:c3:05:2c:
         30:5c:33:43:df:bd:12:9c:e6:7e:2f:f7:3a:17:7b:c6:ee:ea:
         ab:a4:70:26:2b:34:7c:ca:a5:9b:93:44:7d:22:67:50:95:13:
         e0:55:bc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:17 2026 by rpki-client