Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
File:                     Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft (raw, json)
Hash identifier:          hMQFsMO1sfKRigkiyVy/LxPsxZfkZArxayUxv1z5y0M=
Subject key identifier:   7B:DF:09:1B:F5:94:71:35:8B:88:76:51:45:D8:17:B7:0D:E8:98:E5
Authority key identifier: 0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93
Certificate issuer:       /CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
Certificate serial:       019EC1EDE721318417AC5546DE3DA0EF062F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
Manifest number:          0D9A
Signing time:             Sat 13 Jun 2026 17:00:54 +0000
Manifest this update:     Sat 13 Jun 2026 17:00:54 +0000
Manifest next update:     Sun 14 Jun 2026 17:00:54 +0000
Files and hashes:         1: Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl (hash: 5ChGM1p3lQTxUMCOhdRvPmytOj1IhYITdfdeN/2PEgg=)
                          2: DxAIf_G4bsCHSuF3mUqxe5pwn4w.roa (hash: QSb3YvRlfaog1Dj3+gzS3BBfYETY8z0tkMgWbxsJbyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:ed:e7:21:31:84:17:ac:55:46:de:3d:a0:ef:06:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ebd5f54905ee8e4d2830c6cf50f60d264201a93
        Validity
            Not Before: Jun 13 17:00:54 2026 GMT
            Not After : Jun 14 17:00:54 2026 GMT
        Subject: CN=7bdf091bf59471358b88765145d817b70de898e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:38:fa:e9:6a:97:64:f6:d4:72:42:11:d0:22:
                    80:6a:ab:e3:b2:73:03:2f:d5:da:4c:d7:d4:e1:29:
                    b4:1c:4f:e8:d3:28:39:4e:bd:5a:7b:bc:c6:a4:cb:
                    ff:0e:09:b3:85:d4:4d:4d:ea:ed:e7:78:f3:94:78:
                    eb:3e:25:ca:aa:42:9f:e4:52:77:2d:a7:ac:e5:18:
                    37:1f:be:8d:f2:71:1a:0e:61:1e:0e:18:bf:b5:dd:
                    f2:df:34:89:c9:0d:fc:f2:a0:25:26:b8:73:70:5d:
                    98:9a:0f:c0:91:26:37:2f:0e:8b:ff:e9:6b:64:b3:
                    51:9a:7d:bd:40:5b:28:da:c7:fe:37:46:1b:08:70:
                    9c:09:a3:36:c8:fa:bb:b7:e7:0a:9d:43:e4:08:bc:
                    eb:c5:55:4d:24:fa:da:41:0d:36:5e:34:5f:ea:e2:
                    30:b1:cc:5d:97:81:99:27:d3:a8:16:e4:1f:14:db:
                    dc:34:b7:de:01:c8:76:6f:d2:fd:ae:40:49:17:8e:
                    c5:72:45:12:db:db:d4:28:c1:06:41:60:52:f2:6d:
                    cc:3d:a9:1c:12:89:f9:8a:9f:28:a0:bc:ea:3a:b9:
                    b0:3c:6f:21:ca:6a:7e:bb:e5:18:d5:92:52:e3:03:
                    1f:17:4a:1d:d3:6b:1e:28:fe:2a:23:32:3a:79:60:
                    eb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DF:09:1B:F5:94:71:35:8B:88:76:51:45:D8:17:B7:0D:E8:98:E5
            X509v3 Authority Key Identifier:
                keyid:0E:BD:5F:54:90:5E:E8:E4:D2:83:0C:6C:F5:0F:60:D2:64:20:1A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b5939b-daa7-4f47-9873-64a27e977fd9/1/Dr1fVJBe6OTSgwxs9Q9g0mQgGpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:19:0b:c3:ed:bd:b3:81:7e:cf:29:94:71:a2:9c:c8:cb:
         2b:8d:f8:7f:fd:24:01:aa:f5:b2:46:c3:be:60:9c:ff:46:3b:
         9a:62:f3:9e:17:1f:7a:26:33:4c:cd:29:a0:2a:98:d6:9c:68:
         0f:3f:a8:4e:3d:72:f8:0e:17:2f:13:fb:1d:1a:ba:c4:b9:41:
         04:29:d6:ed:e7:f1:32:6e:f7:be:d5:4b:57:43:db:95:be:f1:
         31:34:94:4b:1a:7b:ac:83:d0:4d:5d:cb:29:3f:61:8c:1b:a3:
         aa:ac:14:19:97:6c:5e:ef:6c:1a:54:f4:28:ce:da:cb:c6:59:
         a1:e9:98:6e:f9:ab:6c:54:19:63:f7:a8:b9:88:cc:64:ea:f9:
         d1:82:6a:37:fd:c3:89:bc:eb:3f:65:38:ee:d8:d4:a2:38:bd:
         0b:0e:a5:a3:f4:af:b9:4a:22:90:4e:34:f7:03:d7:02:e2:af:
         9d:f4:12:00:9c:f4:bb:2d:7e:a7:12:f5:44:d4:9d:49:89:02:
         dc:8e:46:3a:53:35:cb:b9:f6:a2:74:42:ec:bd:31:70:26:eb:
         2d:68:0d:3a:e1:92:52:4c:23:ba:43:01:04:9a:b4:33:96:24:
         3e:ff:b3:5f:f7:79:65:47:eb:d5:d6:ab:f6:40:73:c6:ec:08:
         a3:c3:eb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:14:01 2026 by rpki-client