Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File:                     DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier:          Toomg4+cQC+/i8IglfdgJQlnNAA7EZDXQuoW5bYyH/I=
Subject key identifier:   E1:6A:7F:70:2A:6E:6B:99:1B:63:B9:DA:D0:CD:A5:9A:39:98:3E:7C
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer:       /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial:       019F91DAAC6EF535C83A490C0D64DB152409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number:          0665
Signing time:             Fri 24 Jul 2026 02:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:54 +0000
Files and hashes:         1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: taQ3uz9vnN3To4kKwkLwu+w0RXuCx9eSzq81yXqNGbs=)
                          2: wUZK58GnfnXrFcL-rJ6SW3dQ9lM.roa (hash: tpiKkysQtleOXY8s7JxmnW98sGuzWNG7qUWUKxa7byA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:ac:6e:f5:35:c8:3a:49:0c:0d:64:db:15:24:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
        Validity
            Not Before: Jul 24 02:00:54 2026 GMT
            Not After : Jul 25 02:00:54 2026 GMT
        Subject: CN=e16a7f702a6e6b991b63b9dad0cda59a39983e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7e:a9:54:96:51:99:74:e5:a5:3f:9a:b0:de:
                    71:19:d3:0a:12:61:58:3e:0d:25:76:57:5f:61:5a:
                    be:5c:89:e8:2d:0d:d7:7a:a1:38:bb:30:da:e8:a5:
                    ea:4d:9f:2b:55:53:08:7f:15:e0:d4:e7:93:9d:3e:
                    3b:8c:56:9c:eb:47:c4:fb:fa:4c:44:e7:1f:89:43:
                    7f:52:7f:a5:81:f7:31:b9:d7:b1:81:18:82:ac:b8:
                    e7:b1:c0:90:03:53:dd:38:73:92:5b:d2:29:89:d6:
                    18:1b:3e:69:ef:22:78:7b:68:e3:40:da:39:80:b1:
                    55:fb:32:20:af:45:72:37:3f:03:68:f9:1f:73:18:
                    33:34:9d:51:6a:8c:f0:31:73:dd:f8:ce:11:b6:56:
                    f2:e0:16:a3:a9:51:ee:dd:af:78:2d:5d:b4:eb:c9:
                    2c:11:31:1e:fd:b2:da:c3:88:86:47:4f:47:b0:6f:
                    6c:fd:0c:cf:05:7b:1d:a7:9d:07:6d:20:f2:97:44:
                    c1:76:fd:68:3e:5b:de:42:da:1a:b9:f0:09:6f:54:
                    67:3c:a8:78:27:95:b3:0b:93:7f:d6:7f:a7:3b:45:
                    ef:d8:32:28:76:09:64:8e:d0:93:66:f5:86:66:2b:
                    fb:82:64:67:25:18:b9:81:41:45:9a:ba:78:a1:38:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6A:7F:70:2A:6E:6B:99:1B:63:B9:DA:D0:CD:A5:9A:39:98:3E:7C
            X509v3 Authority Key Identifier:
                keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:ae:88:6d:2a:88:24:87:73:ff:f6:83:a7:c9:90:67:e4:a1:
         3f:ad:da:42:79:47:84:3d:07:2f:50:33:80:af:b6:73:c8:13:
         6c:ce:b7:9f:85:88:04:76:c9:4f:04:cc:1c:f6:c2:a4:cd:0c:
         ae:3a:ab:c5:69:8d:3d:c7:39:49:50:66:06:fe:89:bd:94:cf:
         cd:38:1e:4b:be:e2:a5:03:59:8a:ba:6a:53:6c:5e:ec:9e:d0:
         c7:37:01:4e:27:f8:2d:e6:f8:63:71:b2:ee:5e:20:86:74:82:
         c2:c8:3f:93:59:ca:29:4e:b4:b0:eb:6d:76:9d:99:95:39:f7:
         c0:18:f6:95:62:59:a5:07:2f:d4:10:48:dc:2b:66:22:aa:89:
         5b:db:37:76:0f:02:96:b7:31:98:78:fd:f9:8e:79:b7:e1:4b:
         5d:5a:20:c4:c4:5b:f7:7f:3b:41:c0:17:52:77:4f:e9:18:6e:
         22:72:93:eb:99:f0:ed:2e:dd:02:c2:3b:9c:ff:3a:fb:f1:27:
         e0:42:ec:97:02:f6:a6:d5:8e:d7:60:d5:20:81:bd:0b:97:87:
         d5:cd:7b:e3:95:81:37:c0:b2:d8:8e:69:61:5c:80:f5:79:8e:
         f0:40:75:d5:30:a1:ba:48:ac:58:55:5a:43:ac:7b:4b:43:58:
         9e:db:9c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:14:05 2026 by rpki-client