Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
File:                     RDtnudTJnHJeNX2BdPt-AkoVAuI.mft (raw, json)
Hash identifier:          6bDoS4kKg/m+Kh+VdbW0v+gxgMEs3UqdrfXx093wdXU=
Subject key identifier:   83:40:92:1D:2C:A7:7C:3A:DB:5B:C5:16:70:DB:14:3B:CA:5D:33:0D
Authority key identifier: 44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2
Certificate issuer:       /CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
Certificate serial:       019F92111D7374849CD4CDEB94549A51262C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
Manifest number:          0A52
Signing time:             Fri 24 Jul 2026 03:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:22 +0000
Files and hashes:         1: RDtnudTJnHJeNX2BdPt-AkoVAuI.crl (hash: bzI/HItfZTY7E3OKmXKTP7A0q0u4uZCr78lFK+Fak3g=)
                          2: nlcpl9ulhW9UJP1m-NfebbvM-08.roa (hash: IBQWkMt/VVWxVDIuSxk0QRhZsHES5xi9v/NlOWNnx9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:1d:73:74:84:9c:d4:cd:eb:94:54:9a:51:26:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=443b67b9d4c99c725e357d8174fb7e024a1502e2
        Validity
            Not Before: Jul 24 03:00:22 2026 GMT
            Not After : Jul 25 03:00:22 2026 GMT
        Subject: CN=8340921d2ca77c3adb5bc51670db143bca5d330d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8d:de:87:c3:d0:70:83:b4:2b:bd:f8:4a:c8:
                    9e:79:96:63:f7:ea:42:6e:cf:52:7b:88:c8:7e:98:
                    f5:81:50:92:a1:19:bd:84:45:9b:49:3f:08:4b:f2:
                    8b:73:b3:5b:99:a4:39:b4:3b:21:cf:2e:73:a6:8f:
                    e4:ba:9a:47:3f:26:7c:63:9d:f3:97:36:eb:44:4f:
                    ce:03:66:dd:dc:03:48:08:ad:c0:45:61:62:92:9d:
                    8e:c9:d0:66:01:62:7d:90:2f:db:00:c6:ea:cf:e0:
                    40:ce:77:1c:9c:3f:53:73:29:73:1a:38:e9:a5:f8:
                    81:46:5d:43:5e:85:8a:5b:16:ef:b8:56:e7:d0:e1:
                    d8:c3:59:72:80:e1:22:a6:d2:aa:e8:ab:b5:14:13:
                    f3:6a:12:14:52:49:41:7e:af:35:9b:9a:11:b5:c6:
                    dd:21:7e:78:81:5c:22:c3:9c:ec:c9:62:ee:82:8c:
                    77:42:54:10:4a:69:cb:6e:d9:be:77:21:b0:81:a9:
                    05:fe:30:55:25:6a:48:a7:d8:28:57:18:14:f0:09:
                    88:79:fe:9f:9c:a4:dd:c5:38:13:b0:2d:43:23:6e:
                    e3:ba:87:cf:83:1d:1f:12:2e:e8:05:08:93:3b:68:
                    c2:ab:38:57:e9:37:9d:cf:cd:42:81:6b:23:46:ad:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:40:92:1D:2C:A7:7C:3A:DB:5B:C5:16:70:DB:14:3B:CA:5D:33:0D
            X509v3 Authority Key Identifier:
                keyid:44:3B:67:B9:D4:C9:9C:72:5E:35:7D:81:74:FB:7E:02:4A:15:02:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDtnudTJnHJeNX2BdPt-AkoVAuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/eede38-92a2-462d-b252-c83b5fc26545/1/RDtnudTJnHJeNX2BdPt-AkoVAuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d0:49:63:aa:95:ae:6f:8a:6d:7a:43:ae:35:47:76:fb:37:
         46:1d:07:e0:b8:b3:95:27:45:fa:00:ca:16:9c:ef:b9:02:42:
         95:ba:d6:0b:08:5e:e6:14:35:c4:1c:07:e1:db:05:b2:84:01:
         03:06:13:15:bb:d2:1a:40:55:04:86:77:54:d5:79:1f:20:d8:
         02:0d:2b:f0:0b:f2:8a:26:e7:27:1a:f6:20:b3:d9:ad:7f:be:
         9a:d0:68:e4:48:51:af:87:38:04:35:2d:b9:b0:8f:07:bc:6f:
         ac:04:31:f4:48:c3:b6:cc:e0:57:9a:67:ff:96:64:19:a2:b9:
         29:a7:2e:1f:4d:66:2c:48:af:de:be:45:d7:5c:e6:26:72:fe:
         73:d3:12:48:3a:b2:0d:0e:5e:d5:4c:eb:af:6b:54:97:32:91:
         2c:13:ce:8d:61:ea:2d:51:2e:45:3b:10:8a:44:4e:fd:c2:e4:
         ec:54:d2:fe:91:a6:6c:6d:ee:88:82:ec:7f:66:01:a7:44:fc:
         1c:dd:59:9f:0c:b8:f6:d9:14:1f:45:2e:da:5f:0a:2d:9b:94:
         1c:e6:c1:b6:88:c7:0c:65:72:24:41:92:2f:dd:2c:df:16:73:
         be:bb:1b:34:7c:cb:87:cd:dc:38:d7:99:8f:f5:38:20:ae:dd:
         76:28:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:47 2026 by rpki-client