Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File:                     DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier:          SfCPSIz1NT1LbMBUaxzQWf/goFBKdft1m6jmyx9eAIw=
Subject key identifier:   E1:56:54:65:1C:4C:35:70:07:1D:FC:DB:2C:67:90:5C:C4:BC:7C:37
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer:       /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial:       019E1DC70BD8E1EEA5CE05FE7F5BEEC523EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number:          116E
Signing time:             Tue 12 May 2026 20:00:44 +0000
Manifest this update:     Tue 12 May 2026 20:00:44 +0000
Manifest next update:     Wed 13 May 2026 20:00:44 +0000
Files and hashes:         1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: bItwkFvqxFF0d4/lYjrZiKsnye25FuFeE0P4SoL4rYM=)
                          2: _BUMsTjl98MmLHvFrqovjD8YBPw.roa (hash: ae3nr29GY4pUAfaoxVhHdX9CIL595T+FSAPmy0/E9aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:0b:d8:e1:ee:a5:ce:05:fe:7f:5b:ee:c5:23:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
        Validity
            Not Before: May 12 20:00:44 2026 GMT
            Not After : May 13 20:00:44 2026 GMT
        Subject: CN=e15654651c4c3570071dfcdb2c67905cc4bc7c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f2:b6:b2:8a:95:ec:0a:03:b8:8d:b7:1b:57:
                    c8:56:d8:c9:24:47:87:e8:f1:7f:0c:fa:f4:3d:25:
                    b2:b7:e7:5b:a0:37:30:31:0e:29:2c:ba:5b:7c:e3:
                    97:66:a3:ef:54:9c:63:98:9d:14:d4:5d:42:5f:7b:
                    0a:e1:03:4e:cf:8c:bf:bd:73:6b:66:53:0a:78:ef:
                    f7:65:71:2a:e8:42:79:df:de:60:f0:62:fa:81:dd:
                    88:42:d3:d8:db:26:f7:65:ec:0c:57:90:2c:48:71:
                    5c:b1:2f:c1:95:25:a6:33:85:f6:46:95:51:b0:ab:
                    3b:37:09:99:4c:92:27:14:25:16:17:6a:54:7f:bd:
                    ca:26:59:80:db:ad:58:1f:0c:e4:1d:96:d7:45:18:
                    37:80:86:86:d1:ba:41:7e:21:67:eb:e9:df:ad:9a:
                    17:28:2b:ca:d8:fc:19:49:51:7f:b5:c6:42:28:8c:
                    d4:fa:d6:ae:30:c4:03:9e:af:21:a8:e4:1e:8e:e8:
                    80:28:25:ad:e6:c8:06:23:84:4f:37:f6:cc:98:b1:
                    d9:a1:94:81:3e:f2:60:c4:c6:01:b9:c0:a7:ef:9f:
                    cd:95:49:29:77:49:dd:a5:6a:9b:c1:ae:ea:1d:40:
                    c1:e8:b3:e4:fa:b7:72:34:ba:dd:0c:f5:9e:ca:63:
                    43:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:56:54:65:1C:4C:35:70:07:1D:FC:DB:2C:67:90:5C:C4:BC:7C:37
            X509v3 Authority Key Identifier:
                keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:f0:70:2e:63:97:3f:17:b3:99:04:1c:1a:c4:a6:d9:e5:d1:
         d5:33:36:a9:ca:1d:c5:d9:20:99:58:c8:7b:dc:d4:1b:c0:76:
         11:39:bc:5f:c9:7f:b1:8d:02:ea:6a:45:0f:1a:9b:49:3c:99:
         1f:c6:b0:b6:7a:44:a2:d4:12:87:5d:30:8f:53:33:f4:8e:9d:
         4a:0a:42:a8:7a:3d:55:a0:69:3f:7e:a1:37:d6:e1:18:4f:a8:
         4a:56:dd:8c:27:4b:b0:e8:df:62:59:7a:ab:31:1d:e9:6e:8f:
         52:bb:d0:86:68:f9:ad:e8:ac:17:6c:b6:38:2a:60:b6:b9:0d:
         97:11:be:cf:f3:2a:87:d3:32:29:1a:fc:6f:35:71:2e:70:87:
         50:73:2b:a6:6d:43:92:52:67:8e:24:64:da:06:42:5d:6c:b0:
         8c:5e:a4:fc:55:1f:47:cb:f3:40:0b:9a:fc:69:b4:cf:5e:1a:
         0e:92:42:d6:38:45:fd:0d:27:03:40:b3:21:25:df:e2:05:ca:
         60:5d:66:34:25:49:74:67:87:71:f3:f8:45:16:fd:7e:fe:3f:
         c3:5d:41:5a:02:74:4d:e5:3a:b5:48:82:eb:8a:de:2a:f2:d5:
         25:0a:8f:bc:da:ef:a5:6b:1e:56:ea:3b:20:d7:2a:01:a0:ae:
         60:16:33:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dxwvY4e6lzgX+f1vuxSPsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMWEzMTMxZmU4YmVhOWM4MjU4MzEzYTBmMjRiYTJhNTYw
YjU4ZDMwHhcNMjYwNTEyMjAwMDQ0WhcNMjYwNTEzMjAwMDQ0WjAzMTEwLwYDVQQD
EyhlMTU2NTQ2NTFjNGMzNTcwMDcxZGZjZGIyYzY3OTA1Y2M0YmM3YzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvK2soqV7AoDuI23G1fIVtjJJEeH
6PF/DPr0PSWyt+dboDcwMQ4pLLpbfOOXZqPvVJxjmJ0U1F1CX3sK4QNOz4y/vXNr
ZlMKeO/3ZXEq6EJ5395g8GL6gd2IQtPY2yb3ZewMV5AsSHFcsS/BlSWmM4X2RpVR
sKs7NwmZTJInFCUWF2pUf73KJlmA261YHwzkHZbXRRg3gIaG0bpBfiFn6+nfrZoX
KCvK2PwZSVF/tcZCKIzU+tauMMQDnq8hqOQejuiAKCWt5sgGI4RPN/bMmLHZoZSB
PvJgxMYBucCn75/NlUkpd0ndpWqbwa7qHUDB6LPk+rdyNLrdDPWeymNDBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFWVGUcTDVwBx382yxnkFzEvHw3MB8GA1UdIwQY
MBaAFA0aMTH+i+qcglgxOg8kuipWC1jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQt
YmJmN2M3MGVmNGIzLzEvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8xM2IxNjUtMDk4Ni00ZTkzLWIxYjQtYmJmN2M3MGVmNGIz
LzEvRFJveE1mNkw2cHlDV0RFNkR5UzZLbFlMV05NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfBwLmOX
PxezmQQcGsSm2eXR1TM2qcodxdkgmVjIe9zUG8B2ETm8X8l/sY0C6mpFDxqbSTyZ
H8awtnpEotQSh10wj1Mz9I6dSgpCqHo9VaBpP36hN9bhGE+oSlbdjCdLsOjfYll6
qzEd6W6PUrvQhmj5reisF2y2OCpgtrkNlxG+z/Mqh9MyKRr8bzVxLnCHUHMrpm1D
klJnjiRk2gZCXWywjF6k/FUfR8vzQAua/Gm0z14aDpJC1jhF/Q0nA0CzISXf4gXK
YF1mNCVJdGeHcfP4RRb9fv4/w11BWgJ0TeU6tUiC64reKvLVJQqPvNrvpWseVuo7
INcqAaCuYBYz7g==
-----END CERTIFICATE-----
Generated at Wed May 13 00:30:35 2026 by rpki-client