Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
File:                     DC-bLoowUI05GSr9WzTuVvd1l54.mft (raw, json)
Hash identifier:          UAms0N6fkIx372G/QOqRxkI7jKDKe+4rAeHPMsdeifw=
Subject key identifier:   91:F5:42:DD:93:B3:A1:5F:4E:3D:6D:55:ED:86:E4:BC:2C:90:D3:F5
Authority key identifier: 0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E
Certificate issuer:       /CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
Certificate serial:       019F90C77AD760546F176DC4F75C791B7174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
Manifest number:          11A2
Signing time:             Thu 23 Jul 2026 21:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:19 +0000
Files and hashes:         1: DC-bLoowUI05GSr9WzTuVvd1l54.crl (hash: fJcKMDucPuHJdsQxHM7lba9Y2p8GHK088rqNCfSM0MM=)
                          2: DiPUcYeYMMKBJ6pco8Genqou5P4.roa (hash: k19Q1QHBDALtzKkWkQIrCed59UccTXEghHZXW9Dj4JM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:7a:d7:60:54:6f:17:6d:c4:f7:5c:79:1b:71:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f9b2e8a30508d39192afd5b34ee56f775979e
        Validity
            Not Before: Jul 23 21:00:19 2026 GMT
            Not After : Jul 24 21:00:19 2026 GMT
        Subject: CN=91f542dd93b3a15f4e3d6d55ed86e4bc2c90d3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:70:50:b3:16:69:81:23:34:b4:7d:7e:ca:a0:
                    a3:3d:71:cf:6c:ac:84:2f:f2:b2:6d:8a:da:83:8b:
                    61:0d:db:b7:64:86:8b:4a:65:f8:52:0c:4f:6d:ee:
                    9d:56:a9:00:32:e0:0f:ce:46:14:2a:83:03:f9:ea:
                    cc:58:65:42:41:5f:dc:a5:8e:e5:b3:e2:5d:42:10:
                    49:f6:41:c9:f9:7f:a2:68:36:6c:ca:08:b2:fc:fb:
                    7f:94:4d:42:31:c8:7d:7c:7b:a8:dd:ad:2a:60:cd:
                    a3:00:21:c5:23:fd:f1:7c:dc:d1:e2:30:16:a4:54:
                    8a:96:06:a1:be:9d:0a:90:d1:5b:75:38:e8:5a:2b:
                    97:99:d2:c6:ca:67:73:31:32:46:1b:d2:6e:b8:84:
                    96:a4:9a:4e:1a:a4:28:1e:e3:01:55:ce:83:28:d1:
                    b8:61:0b:94:0c:62:28:11:63:0b:f6:b4:a4:c8:3e:
                    f7:5c:65:15:e3:4b:1c:ff:ac:12:44:7a:02:b3:16:
                    14:34:96:19:d0:23:31:6a:4f:05:32:b7:50:ec:47:
                    a2:fc:d5:de:8a:97:15:90:eb:be:2f:ec:a5:fc:89:
                    61:60:cb:96:b6:76:47:dd:a5:86:8e:99:6a:e4:0d:
                    52:e1:52:68:48:f4:3f:d7:8c:3e:83:d0:1b:52:86:
                    36:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:42:DD:93:B3:A1:5F:4E:3D:6D:55:ED:86:E4:BC:2C:90:D3:F5
            X509v3 Authority Key Identifier:
                keyid:0C:2F:9B:2E:8A:30:50:8D:39:19:2A:FD:5B:34:EE:56:F7:75:97:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC-bLoowUI05GSr9WzTuVvd1l54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/36cb82-0399-436c-b952-9eda57c23edf/1/DC-bLoowUI05GSr9WzTuVvd1l54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:78:b5:5a:22:e3:e2:40:d0:cf:fd:46:a0:62:b3:c9:03:97:
         16:74:b2:de:a9:7e:fb:a4:2c:73:49:f6:c8:e8:95:f2:37:32:
         09:17:cb:e6:99:8e:17:59:e7:f5:e9:db:47:18:d7:f0:cf:98:
         08:ad:7b:3e:e1:b5:61:d7:c5:33:e2:ca:2a:25:88:b3:cb:0b:
         6c:d0:fc:2e:ff:76:ee:6d:80:1a:42:ef:65:9d:4a:03:12:c4:
         73:e0:23:67:d4:23:eb:9f:2b:c7:ca:de:90:30:f6:e8:71:82:
         17:44:42:fa:71:07:1c:66:d7:32:fc:09:97:b7:3f:9c:7d:dc:
         51:5e:8a:8a:e4:cc:f2:84:db:d3:1b:ff:ac:e1:d5:aa:7a:71:
         da:9e:87:10:e6:3e:d7:6c:12:9e:32:c8:06:7f:ad:50:24:4a:
         65:c9:7e:65:a4:52:72:29:65:49:c0:6b:29:2c:60:52:cf:4b:
         e1:16:1b:4b:5f:aa:07:e0:89:ba:5e:84:c5:b7:e7:4c:51:79:
         79:11:de:cb:9f:cc:8f:48:ee:36:01:ad:00:b4:d2:77:8f:f7:
         e7:c8:87:9f:64:4f:82:13:c3:cc:7e:a0:15:25:b2:95:88:2f:
         97:a3:91:9e:7a:fc:67:ff:80:7c:c9:10:14:1d:df:c2:02:fe:
         fd:da:bb:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx3rXYFRvF23E91x5G3F0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMmY5YjJlOGEzMDUwOGQzOTE5MmFmZDViMzRlZTU2Zjc3
NTk3OWUwHhcNMjYwNzIzMjEwMDE5WhcNMjYwNzI0MjEwMDE5WjAzMTEwLwYDVQQD
Eyg5MWY1NDJkZDkzYjNhMTVmNGUzZDZkNTVlZDg2ZTRiYzJjOTBkM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3BQsxZpgSM0tH1+yqCjPXHPbKyE
L/KybYrag4thDdu3ZIaLSmX4UgxPbe6dVqkAMuAPzkYUKoMD+erMWGVCQV/cpY7l
s+JdQhBJ9kHJ+X+iaDZsygiy/Pt/lE1CMch9fHuo3a0qYM2jACHFI/3xfNzR4jAW
pFSKlgahvp0KkNFbdTjoWiuXmdLGymdzMTJGG9JuuISWpJpOGqQoHuMBVc6DKNG4
YQuUDGIoEWML9rSkyD73XGUV40sc/6wSRHoCsxYUNJYZ0CMxak8FMrdQ7Eei/NXe
ipcVkOu+L+yl/IlhYMuWtnZH3aWGjplq5A1S4VJoSPQ/14w+g9AbUoY2BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJH1Qt2Ts6FfTj1tVe2G5LwskNP1MB8GA1UdIwQY
MBaAFAwvmy6KMFCNORkq/Vs07lb3dZeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zNmNiODItMDM5OS00MzZjLWI5NTIt
OWVkYTU3YzIzZWRmLzEvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zNmNiODItMDM5OS00MzZjLWI5NTItOWVkYTU3YzIzZWRm
LzEvREMtYkxvb3dVSTA1R1NyOVd6VHVWdmQxbDU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3i1WiLj
4kDQz/1GoGKzyQOXFnSy3ql++6Qsc0n2yOiV8jcyCRfL5pmOF1nn9enbRxjX8M+Y
CK17PuG1YdfFM+LKKiWIs8sLbND8Lv927m2AGkLvZZ1KAxLEc+AjZ9Qj658rx8re
kDD26HGCF0RC+nEHHGbXMvwJl7c/nH3cUV6KiuTM8oTb0xv/rOHVqnpx2p6HEOY+
12wSnjLIBn+tUCRKZcl+ZaRScillScBrKSxgUs9L4RYbS1+qB+CJul6ExbfnTFF5
eRHey5/Mj0juNgGtALTSd4/358iHn2RPghPDzH6gFSWylYgvl6ORnnr8Z/+AfMkQ
FB3fwgL+/dq7+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:12:59 2026 by rpki-client