Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
File:                     DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json)
Hash identifier:          qZB9GXsBKt7uKA4b2kXjibBLqfUWrPNZidsHBFwTFUo=
Subject key identifier:   E4:64:1F:3C:DF:FE:A3:57:D3:06:13:A4:40:AD:5B:C1:BF:71:41:24
Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A
Certificate issuer:       /CN=0c6824158b730c44167ea773a977218cc62f416a
Certificate serial:       019E1DFEB8CE8273CC7F3940A53D10DB8506
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
Manifest number:          0E11
Signing time:             Tue 12 May 2026 21:01:32 +0000
Manifest this update:     Tue 12 May 2026 21:01:32 +0000
Manifest next update:     Wed 13 May 2026 21:01:32 +0000
Files and hashes:         1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: kgt6k9CzvEiqcW8VQb4rvOUnl02YVhTe0IKjO1y52gM=)
                          2: utyeED3clQkm3ZphFz4r6XrH5aM.roa (hash: 1/LGmMoXZvPyyNB1HdA73Zq1ZKG58JPMftBJCzzv2rs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:b8:ce:82:73:cc:7f:39:40:a5:3d:10:db:85:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a
        Validity
            Not Before: May 12 21:01:32 2026 GMT
            Not After : May 13 21:01:32 2026 GMT
        Subject: CN=e4641f3cdffea357d30613a440ad5bc1bf714124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:8c:fa:54:c9:ba:33:a0:a6:c3:29:84:07:
                    ea:89:f6:dc:4e:89:cc:ba:6b:44:8c:82:db:ec:e4:
                    46:a8:08:41:52:3d:20:73:82:77:88:66:89:fb:36:
                    b0:19:09:b0:0c:02:8e:6b:66:59:f6:ba:5f:dd:6f:
                    82:09:7c:e1:a1:59:09:fa:85:2c:00:7a:d8:56:e4:
                    91:e6:80:de:a7:91:1c:24:d7:86:23:ed:c2:1e:4a:
                    43:3a:25:40:94:f7:87:ef:6f:70:8f:88:25:66:b2:
                    38:92:ef:17:b0:50:da:d9:9c:bb:ef:a8:ad:8e:f5:
                    59:80:b8:95:61:af:68:b9:bc:fc:af:66:2a:84:d8:
                    6b:8b:cf:f2:bf:87:00:03:0d:ca:d0:ec:7e:a2:6d:
                    d6:9b:e7:14:ea:4f:2c:cc:ad:61:b8:ce:38:85:c0:
                    df:9f:86:42:39:c3:e9:a9:f0:51:96:62:f0:fb:ad:
                    80:aa:29:22:2b:cc:3c:98:be:78:bc:7d:91:dc:7f:
                    80:9a:bd:64:3e:5d:54:7b:fe:4d:d1:84:86:20:82:
                    39:3f:f8:74:0b:3b:65:20:52:f8:9c:10:0a:4a:a9:
                    60:93:94:94:90:84:4f:99:60:7a:7d:dc:d2:06:92:
                    2e:fb:be:e6:f9:b1:92:d6:c2:46:26:b4:13:3b:dc:
                    a9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:64:1F:3C:DF:FE:A3:57:D3:06:13:A4:40:AD:5B:C1:BF:71:41:24
            X509v3 Authority Key Identifier:
                keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:1e:15:a4:86:89:ec:65:2c:19:5c:ac:c1:23:8f:f6:77:88:
         b6:53:cf:1b:41:1f:00:c7:17:ac:cd:43:4f:f8:76:4b:b2:2e:
         aa:85:5f:34:b9:c3:ec:1c:9f:d6:a5:ea:12:28:1a:86:62:ed:
         74:5f:0b:c3:3c:2c:4e:b7:10:fc:74:6c:3a:2f:71:69:1c:37:
         bb:e4:81:04:32:6c:28:c8:f7:97:f8:70:c4:ad:98:28:e3:b0:
         11:d3:01:9d:15:32:e3:71:ba:ab:3d:2e:b3:50:23:96:20:a7:
         77:17:fc:7f:f7:cb:79:43:2d:4b:71:80:46:20:fa:ca:a6:dd:
         65:6b:f7:38:4d:e6:45:92:57:1f:c1:cd:a3:46:61:f6:e6:dd:
         dc:be:ca:84:22:4f:7d:77:06:d4:c1:92:36:ea:10:9c:6f:c4:
         37:6b:c5:e3:8c:30:92:5a:b4:5a:8f:da:e8:4c:d2:82:2e:6b:
         0e:f0:89:1e:6e:89:22:5c:e6:e7:7a:ee:52:b3:11:fb:50:23:
         ad:cb:57:a8:45:ef:7a:1f:bd:94:3f:1c:32:2d:1e:e5:46:1e:
         7e:be:5c:49:be:1c:c9:8f:87:15:1e:61:fc:3b:5f:77:55:a0:
         41:42:44:8d:d8:a9:19:89:40:bf:11:b2:c5:53:0a:31:01:2b:
         99:9b:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:22 2026 by rpki-client