Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
File:                     DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft (raw, json)
Hash identifier:          e3bfAOsS+v8jSt1WMBfZIy3uzBsAV1nSasmmsZQrA3A=
Subject key identifier:   8F:70:BD:D6:BD:47:37:2F:3E:DE:F9:3B:C2:2B:37:79:3F:B6:69:72
Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1
Certificate issuer:       /CN=0d69e3ee55dd862674d458661ba34908b0617fa1
Certificate serial:       01A1DD5DDA814DC8A6B94C3626FB26C83394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
Manifest number:          0D0E
Signing time:             Sun 15 Nov 2026 04:01:17 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:17 +0000
Manifest next update:     Mon 16 Nov 2026 04:01:17 +0000
Files and hashes:         1: DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl (hash: BbtWT/nIhCulCwM8TdtxmSWBtdWVrHo6yfsm2TPn9hE=)
                          2: MrUolEUQ5J8dfEsPRRrWNqQVwPU.asa (hash: lAuDt32my/LiTnY20vjzp72xOaSWLrQI57qUNwtWtUY=)
                          3: _TpEXpR390l-2zZdIjknvF0TXis.roa (hash: zzI1yvFkNgMBwF/wH9+ZIjX5kjZLbJeeCbYHypeGMZI=)
                          4: rjjSoAat_n07PoQnlpP54238J18.roa (hash: 8lMbg8iLAkX/M5jc8c3TgyGl0DahY6oK1llhi2qDKko=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 04:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dd:5d:da:81:4d:c8:a6:b9:4c:36:26:fb:26:c8:33:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1
        Validity
            Not Before: Nov 15 04:01:17 2026 GMT
            Not After : Nov 16 04:01:17 2026 GMT
        Subject: CN=8f70bdd6bd47372f3edef93bc22b37793fb66972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:77:06:95:f4:07:8a:58:14:8a:66:f3:8d:94:
                    e2:b5:52:7d:7a:c9:46:09:84:50:d0:7e:61:b9:e1:
                    7a:48:c9:07:08:74:f8:bb:fc:97:e5:39:bf:d1:d7:
                    19:c2:dd:d7:81:01:01:f4:eb:84:92:c7:e7:1f:c7:
                    2f:f7:3a:94:fa:c2:7a:4b:c8:d2:23:70:b8:cf:b2:
                    40:92:a6:c3:94:9f:5c:8a:fa:44:74:2e:ea:b3:68:
                    0d:86:0a:f3:3d:50:9f:54:6c:12:8b:8e:2e:9f:80:
                    97:f7:a4:83:bf:c2:61:4b:c4:8c:d9:4f:8a:e5:a3:
                    d7:43:36:1b:1f:11:af:c5:70:1c:c3:51:ac:22:24:
                    30:a5:cc:d8:c5:d4:a3:66:1f:ea:d7:6a:ba:ed:58:
                    aa:d4:de:b6:af:3c:93:8c:4f:f1:5b:d6:17:13:1e:
                    96:9f:18:65:12:7a:2f:ea:df:39:53:8b:c7:85:52:
                    46:0e:66:49:c1:0c:38:20:98:58:9a:59:52:40:b7:
                    84:8c:ff:79:9e:82:0b:df:c0:27:3b:32:ec:5f:8c:
                    1a:12:39:0c:a0:cf:ca:b5:38:56:dd:01:39:b2:b5:
                    cf:a8:d0:c8:5f:5c:af:1e:d2:83:90:be:7a:23:e4:
                    41:00:b3:fb:b5:e5:b1:36:d7:a6:64:21:b4:93:a8:
                    7c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:70:BD:D6:BD:47:37:2F:3E:DE:F9:3B:C2:2B:37:79:3F:B6:69:72
            X509v3 Authority Key Identifier:
                keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:00:0a:aa:c1:f8:72:10:2c:cd:be:0c:f7:23:9d:d9:75:4f:
         77:0f:b4:4b:3f:8e:4f:e0:aa:31:23:f9:35:46:2e:13:a9:eb:
         67:d3:d7:92:87:87:3d:a8:60:6f:49:1e:92:7a:18:83:26:aa:
         c9:2b:91:19:51:00:99:6a:70:4d:2f:0a:e8:45:36:60:7d:13:
         36:ec:c3:4d:85:d9:c6:5e:a7:57:c2:60:92:04:11:1e:b8:97:
         e4:cb:9c:5b:7c:da:bf:fc:6e:9a:d1:06:c5:2e:e7:8d:31:09:
         6d:53:37:4b:dc:77:ea:87:c0:70:11:61:d6:50:29:30:37:76:
         d0:30:43:7c:ac:91:65:88:55:66:af:b7:e9:da:a2:65:dd:ba:
         65:e8:a3:d2:73:d6:9a:42:15:97:06:7d:1c:c8:ad:9a:c9:7d:
         db:73:e9:a8:63:cd:52:63:41:a9:35:c3:92:e9:35:16:6e:20:
         2f:82:ce:f0:3a:a0:1f:44:1b:48:da:17:1f:7d:1d:06:61:bd:
         aa:89:8c:1d:d5:70:01:b1:4c:7e:79:97:6c:fb:ee:32:bf:dd:
         d5:00:e7:3c:d1:6a:52:ce:e8:50:a4:3f:08:21:b6:f6:35:dc:
         45:20:c5:3c:3a:62:e5:ba:fa:b0:4d:91:df:0d:30:c1:76:6b:
         30:a2:bc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:15:13 2026 by rpki-client