Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File:                     DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier:          CUZGNPSvc4yIkaNGsfOTd6N0joPn30knnueIN3mdJWo=
Subject key identifier:   CE:61:66:3F:E8:8E:A9:03:AD:51:F3:4E:7A:93:44:26:CC:BD:E3:42
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer:       /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial:       019F90C8194355D68568E44E7AA1A749F1DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number:          0ED1
Signing time:             Thu 23 Jul 2026 21:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:00 +0000
Files and hashes:         1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: QxeV9/e6QaExosR7dMWuoYh+8Wh0c3xxERqOPvWg0F8=)
                          2: utyeED3clQkm3ZphFz4r6XrH5aM.roa (hash: 1/LGmMoXZvPyyNB1HdA73Zq1ZKG58JPMftBJCzzv2rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:19:43:55:d6:85:68:e4:4e:7a:a1:a7:49:f1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
        Validity
            Not Before: Jul 23 21:01:00 2026 GMT
            Not After : Jul 24 21:01:00 2026 GMT
        Subject: CN=ce61663fe88ea903ad51f34e7a934426ccbde342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:42:3a:3c:b4:08:a9:b1:ef:f9:83:92:a0:
                    4a:6c:04:76:2b:f8:c7:c4:df:92:c0:df:d0:06:57:
                    77:54:83:3d:ac:80:7b:0e:d2:13:57:fb:7b:1d:3b:
                    a6:a1:05:76:9b:dc:c8:79:90:57:3a:94:71:5d:ed:
                    f1:da:2e:d4:f9:6c:97:79:1f:3a:84:c8:ab:9c:76:
                    9e:62:95:94:da:23:05:a1:07:2f:0a:1c:78:51:86:
                    a1:f9:3b:9e:cf:25:70:d2:20:47:2e:7a:84:5f:83:
                    bd:57:7b:1b:f9:59:11:a9:a1:4b:2b:0c:4d:1f:c0:
                    af:7b:dc:78:51:56:91:30:18:85:ce:aa:29:75:5e:
                    2d:79:c8:ce:9b:62:7d:20:aa:24:a5:b0:58:9a:37:
                    85:60:d0:82:90:e9:f8:9d:56:37:53:df:67:8a:ee:
                    46:14:f0:ca:cb:8e:55:c7:a7:7b:3f:03:7e:5f:87:
                    50:04:b5:a2:53:f3:a1:85:d0:c3:3b:0b:f6:cd:de:
                    da:90:3f:02:d0:1b:37:84:ed:80:b4:bd:c1:48:75:
                    e7:ba:66:79:73:65:3e:76:f6:21:35:36:9b:c1:d7:
                    b8:d4:38:19:a2:71:13:5e:15:ba:58:f7:29:ac:eb:
                    d4:8a:38:75:c9:64:94:c3:75:a5:bf:53:2e:47:1b:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:61:66:3F:E8:8E:A9:03:AD:51:F3:4E:7A:93:44:26:CC:BD:E3:42
            X509v3 Authority Key Identifier:
                keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:fb:8f:2c:d9:8e:19:15:e8:be:21:8a:71:14:0f:48:7d:42:
         fc:fc:fb:3d:cb:aa:be:42:3b:3a:68:67:7d:37:db:7e:ce:1a:
         32:ef:33:2d:9f:a5:e9:c3:50:32:bd:6f:1f:58:06:7d:7c:d6:
         13:e8:4c:9d:9e:81:5c:c0:2d:77:53:23:c2:78:e7:9b:ef:e2:
         47:ff:34:c8:2a:44:17:8f:1a:b1:24:8a:bb:bd:9a:00:23:e3:
         d0:c2:50:ff:99:b8:01:e2:9b:fd:0d:6f:f6:aa:d5:36:7b:68:
         ee:21:cd:26:65:3c:19:4c:dd:97:ab:91:b8:04:66:f7:e6:2a:
         ba:86:e6:a2:36:8e:9f:23:93:2a:ac:61:c9:64:3a:f6:8c:d8:
         46:12:81:ac:03:a9:e4:26:5e:dd:2f:a5:7c:89:3d:06:f2:a9:
         13:de:41:fe:bf:d5:3a:94:1b:07:12:d6:61:18:0e:f1:7f:c8:
         51:08:4a:03:68:80:9c:a4:7b:65:31:b9:07:12:90:df:6f:cd:
         bc:b5:dd:3c:13:26:be:ea:cb:c6:5a:1c:37:4e:5c:c8:bf:ab:
         c5:4d:ee:3a:f7:a2:c0:40:76:59:28:cd:35:51:89:04:85:9d:
         93:50:00:03:4b:4e:6e:4e:6b:92:17:56:b6:98:b0:1e:42:1d:
         36:e4:2f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:16 2026 by rpki-client