Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
File:                     DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json)
Hash identifier:          WsT33JtdAjyk7WYbNNf0Ll512NBFz734NgMTERdf8Po=
Subject key identifier:   9A:39:00:3E:B6:6D:5F:5A:38:D7:11:76:BE:03:F2:30:1C:0E:87:67
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Certificate issuer:       /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial:       019F90FE8B663B24451A3440A01E4D86807E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
Manifest number:          0D20
Signing time:             Thu 23 Jul 2026 22:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:28 +0000
Files and hashes:         1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=)
                          2: 6WWr83TSCDVC54Q6T3lJdNTzhec.roa (hash: bqOXRmyjRmssTC0gEpcTMmCXeTubysghN9/RhsWfZ2I=)
                          3: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: CUbm520KtEgzZQwyCPRw5gYcFDCt86N7E0i9JabgoXI=)
                          4: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=)
                          5: OuOWwWJQka3OidmzTsZ2WEViaC8.roa (hash: bWWJtVeUfjaGHDqLK+RYfHKOfYGUjZcMVA7WDR7akBo=)
                          6: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=)
                          7: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=)
                          8: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=)
                          9: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=)
                          10: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=)
                          11: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=)
                          12: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=)
                          13: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=)
                          14: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=)
                          15: n24rpKw-gK2As8dq1f65xDlyLmg.roa (hash: 7YG0l5UwcmGtwI4tXmm6RQMgPqe0InES4/ba+ypR3Fk=)
                          16: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=)
                          17: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:8b:66:3b:24:45:1a:34:40:a0:1e:4d:86:80:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
        Validity
            Not Before: Jul 23 22:00:28 2026 GMT
            Not After : Jul 24 22:00:28 2026 GMT
        Subject: CN=9a39003eb66d5f5a38d71176be03f2301c0e8767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:42:99:41:05:15:0c:7d:ae:f6:c9:64:6f:a7:
                    43:6a:96:6a:15:89:40:ed:3f:23:0a:ad:75:05:e4:
                    b4:46:06:4e:d2:78:4c:4e:65:ea:7a:c8:64:f8:ae:
                    f0:84:80:95:a9:72:72:ea:f8:76:46:d8:5d:9c:6e:
                    3d:00:a9:14:78:ea:37:20:36:95:76:12:df:29:50:
                    8f:1c:26:c0:e5:b2:7c:cf:60:28:f1:ff:df:d4:b1:
                    6f:a4:b0:78:bf:c0:fd:01:bf:ce:5c:a4:4f:26:81:
                    0a:e6:d7:64:c9:7d:8f:ec:ef:90:b5:2e:99:43:6d:
                    db:70:9e:a9:47:94:0a:81:d7:eb:de:bc:7e:de:16:
                    e7:1a:55:e4:ba:32:68:82:d9:78:ae:c6:23:93:c4:
                    71:97:80:51:25:ce:f1:e5:25:77:5a:5e:f5:2d:11:
                    96:a5:bc:10:93:65:d5:5a:7a:dc:9a:ae:02:53:03:
                    32:7a:81:86:82:86:c7:8c:a6:9e:fa:d8:4e:46:60:
                    2b:24:a9:a4:58:09:ea:c4:f3:3d:88:45:58:c9:09:
                    2c:f6:5d:7d:53:11:b7:09:ec:05:dc:e1:0a:1c:ee:
                    ae:87:09:32:1c:8f:9b:b9:bc:5b:cf:2f:d3:93:11:
                    f7:0d:01:a3:36:7a:98:c5:8d:1e:34:63:52:b3:90:
                    56:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:39:00:3E:B6:6D:5F:5A:38:D7:11:76:BE:03:F2:30:1C:0E:87:67
            X509v3 Authority Key Identifier:
                keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:fc:b3:dc:75:d2:d9:c7:8f:4c:1b:f1:e9:ea:47:87:d8:d3:
         fd:91:ef:ba:d3:7f:ee:ef:7d:5a:97:8f:d7:e6:9c:f2:9c:d7:
         fe:4f:de:d6:05:04:59:1a:25:67:a5:65:f5:24:df:60:05:16:
         7b:d8:8d:ce:db:77:bf:aa:fd:5a:7b:65:fb:6d:e3:d3:a0:1f:
         8b:4c:a8:70:32:07:63:3b:35:f8:1d:33:9c:51:a4:30:31:71:
         7d:9c:21:7d:c2:f0:2e:d8:31:30:73:cc:73:60:ea:89:77:42:
         cf:d1:ad:62:2e:7a:6e:32:7a:7e:8b:06:e4:70:0d:5d:0c:f6:
         58:43:2d:a7:57:ab:c2:79:95:3a:08:8c:45:1d:ec:cc:17:28:
         07:2b:d7:37:7f:64:ad:95:77:e3:ad:6f:cc:fc:4f:eb:88:5f:
         8e:47:f8:d5:db:08:6e:2b:73:ec:26:4e:c3:8d:5d:e6:30:0a:
         17:dc:fd:20:7a:26:a6:26:a4:1d:77:6f:9a:6d:02:8f:0c:52:
         7e:20:b1:76:b3:46:25:7c:31:78:7a:e5:bb:45:3d:ac:e4:bf:
         ef:01:c8:b6:03:c0:49:1b:3d:b3:12:d3:98:fb:10:68:83:b0:
         5d:d7:28:e7:10:de:18:a2:f8:7f:ae:40:f3:09:a4:1b:7f:d1:
         d6:04:ed:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:46:36 2026 by rpki-client