Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
File:                     DflWa2LehAS4VsVgBMxJvmITVOg.mft (raw, json)
Hash identifier:          q97Tcbo8mYj9C7XoQebrW3zFBh7i8sKJQIDe9xKHYq4=
Subject key identifier:   7D:58:2C:C0:91:E0:F8:A0:35:B7:85:F9:F3:25:5E:67:11:5C:58:90
Authority key identifier: 0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8
Certificate issuer:       /CN=0df9566b62de8404b856c56004cc49be621354e8
Certificate serial:       019F8FB504A68F6A7D7A03FEC1DEE9F9EA68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
Manifest number:          011D
Signing time:             Thu 23 Jul 2026 16:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:32 +0000
Files and hashes:         1: DflWa2LehAS4VsVgBMxJvmITVOg.crl (hash: ZuAwXp1r+3LEb81tsZd6ISTyAO61O9WHRt1MVVVnQdM=)
                          2: sxG-Ohcwvb8aZM2TpYd1NB5vOgY.asa (hash: vSd/IIQwZif93HYdwUlXhWDqa5hZsFOQGXaTzyxogbM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:04:a6:8f:6a:7d:7a:03:fe:c1:de:e9:f9:ea:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0df9566b62de8404b856c56004cc49be621354e8
        Validity
            Not Before: Jul 23 16:00:32 2026 GMT
            Not After : Jul 24 16:00:32 2026 GMT
        Subject: CN=7d582cc091e0f8a035b785f9f3255e67115c5890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6f:5d:4d:f5:24:32:be:43:f1:4a:75:9b:39:
                    2c:bb:39:11:93:63:1f:25:64:1c:59:2f:63:86:74:
                    59:66:e7:40:5d:3b:cb:12:25:1b:a9:5e:c0:9f:dd:
                    fb:95:68:16:cb:45:f2:00:04:92:88:a6:22:49:8c:
                    72:c1:7d:e8:c6:27:8d:1e:08:1e:1a:21:7f:7f:64:
                    14:a4:1b:1c:d3:cc:07:ce:96:aa:0e:be:d7:92:b3:
                    f7:73:0f:ae:38:15:ec:e0:5a:98:3a:7a:cc:4b:2d:
                    db:bc:c0:69:3d:31:f7:dd:2b:58:a6:cf:ec:6d:de:
                    b9:47:1b:41:69:fa:70:e9:90:43:fa:17:89:2f:c7:
                    e8:7e:76:14:fc:2d:5b:e2:bf:6b:17:6b:27:c4:9f:
                    3c:4a:4e:49:c4:48:b3:dd:41:c3:ac:9f:0e:29:2e:
                    0f:cc:de:81:8f:28:88:00:54:79:7e:0a:00:aa:ab:
                    9f:90:19:45:82:c8:09:77:1c:f6:51:01:46:a4:f9:
                    b6:aa:c6:70:a4:41:7a:7b:6f:8f:c1:8f:96:1b:9e:
                    08:bf:6d:d3:ad:e9:34:97:e3:48:36:9e:9c:27:03:
                    d3:bb:6f:d3:08:f7:bd:4d:19:ef:9e:31:27:12:d4:
                    1d:e2:b0:e7:09:24:e1:31:e3:ed:e8:fc:56:f5:8b:
                    8a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:2C:C0:91:E0:F8:A0:35:B7:85:F9:F3:25:5E:67:11:5C:58:90
            X509v3 Authority Key Identifier:
                keyid:0D:F9:56:6B:62:DE:84:04:B8:56:C5:60:04:CC:49:BE:62:13:54:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DflWa2LehAS4VsVgBMxJvmITVOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c79367-4c74-4dae-bb30-883e4c85e4ee/1/DflWa2LehAS4VsVgBMxJvmITVOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3f:39:d1:74:73:77:3f:46:19:42:f7:11:15:96:72:3c:f0:
         ea:f6:d9:d3:c8:da:83:e4:63:42:2c:de:0c:0f:cf:5e:bb:ac:
         98:4c:f9:05:06:bf:58:4c:fd:a3:46:88:d7:6e:30:7a:0a:98:
         a0:28:0d:c7:8e:ff:d4:18:4d:cf:a9:ab:b8:41:56:cc:9c:72:
         04:a1:d8:19:10:9a:d9:f4:55:2d:93:4e:05:8b:8c:2e:52:fb:
         76:7a:6a:c7:d2:95:1f:9d:50:dc:aa:df:13:ac:c5:63:35:6b:
         e6:3f:df:f7:5c:25:66:e7:33:51:1a:7d:4f:1f:76:e1:a9:9f:
         ec:fb:e5:09:d4:2b:89:a0:31:74:75:67:a9:3b:8d:7c:90:55:
         32:4a:62:c2:4f:58:33:b9:db:8b:b4:1b:ec:aa:dd:be:1d:a2:
         f3:58:7d:9d:58:6b:2e:6c:53:ff:ce:91:33:fc:67:82:3f:a3:
         f1:ca:3a:17:c2:a5:f3:52:15:1f:a7:2b:0c:47:17:c5:dc:37:
         8f:88:ec:18:8a:ab:00:b6:54:54:fe:92:86:ac:55:d2:d5:28:
         f7:08:b5:c5:03:c1:5d:bb:53:d9:89:39:15:60:5d:f9:db:19:
         04:8c:05:cc:60:39:14:0a:8b:c1:96:09:65:c4:45:16:a2:69:
         6d:b8:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:07:55 2026 by rpki-client