Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
File:                     DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft (raw, json)
Hash identifier:          +IVV+5/IGsO2vp8WVqHqdFwzEPN3BeUDmm4f3z9XwrA=
Subject key identifier:   95:F5:C3:41:45:18:EC:8A:55:4A:5A:48:43:82:08:3A:8B:3F:7B:C6
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Certificate issuer:       /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial:       019EBFC880E048B852AD2A39750360ECBBDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
Manifest number:          1649
Signing time:             Sat 13 Jun 2026 07:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:48 +0000
Files and hashes:         1: 5gzt4CwT9bvsp9z_Y1cddIfWsTM.roa (hash: m2Bvt7q0tdHrQ2fSHkOtVmTU4O14Tj93KaqVZHF85bA=)
                          2: DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl (hash: WCOkkJhpbjI941iDxxyIXPFCDI/cQcb/K7R5amlbta4=)
                          3: Gj7_HCZCEIEaaQcIOB8I26hpXJo.roa (hash: dna5HeCv7m+irZ9B9MRHtXXyokNwB7b4uG9bBJzKQjA=)
                          4: bQJIzpgstJ6tgK975t_kJvHhfnE.roa (hash: YZ8X60mNl9Zz2ZurQqorVTzia/8zSz3Bam727LiZpFA=)
                          5: mzAUafPNCTUpOi1xeAIAHgnqncg.roa (hash: 75EGQ43BZx3fMNqmy/B+uHn1YHc0mh0ZnJonJs36Ezs=)
                          6: ozr_7U6YddsAki_u1IviseVnGr8.roa (hash: A2gLyHJgOlcq2fhQNul6Az4HfqR7wlY8G6yuIpKn2sg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:80:e0:48:b8:52:ad:2a:39:75:03:60:ec:bb:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
        Validity
            Not Before: Jun 13 07:00:48 2026 GMT
            Not After : Jun 14 07:00:48 2026 GMT
        Subject: CN=95f5c3414518ec8a554a5a484382083a8b3f7bc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:f3:c1:e1:84:3e:17:78:fb:23:3f:2f:06:
                    cc:51:9e:8b:ab:10:c9:70:77:98:22:b5:22:5c:91:
                    ff:98:ac:ec:5c:a6:d5:ce:b9:a7:db:53:c8:7c:a6:
                    be:9d:9e:72:d3:8e:b0:9d:47:e4:68:24:72:30:73:
                    ce:c0:22:a3:b4:b1:97:81:27:a9:ed:d5:8e:97:ae:
                    4d:f7:4c:e2:8f:61:61:e7:54:db:e0:35:9a:35:8f:
                    0c:ce:a3:21:c2:33:9f:93:bf:7a:7e:31:b3:92:04:
                    40:2e:8d:2c:62:a6:cd:db:33:7e:c4:ee:94:a5:01:
                    f0:82:7e:f7:c6:66:ed:a9:fc:c3:09:eb:06:a5:8e:
                    78:14:87:d2:11:57:5f:23:b1:40:1d:db:d4:cf:2c:
                    a5:50:27:ba:fe:94:94:9c:78:28:69:3e:91:f7:7e:
                    f9:17:6f:cd:ae:fe:ef:dd:8b:e8:e4:02:6f:f4:8e:
                    99:a9:b1:6a:a2:71:af:07:b0:16:91:9a:3a:45:1e:
                    ce:f0:fc:f1:f7:1d:ce:c5:58:2a:20:11:6c:43:a9:
                    a3:5b:d9:07:10:e0:d4:44:9b:5a:b6:9f:83:f9:8b:
                    5e:8a:27:fa:88:7d:1c:a1:14:9b:b3:e1:d5:2b:77:
                    d5:75:b0:87:3d:1b:4b:4b:d3:6d:27:74:ec:fb:42:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F5:C3:41:45:18:EC:8A:55:4A:5A:48:43:82:08:3A:8B:3F:7B:C6
            X509v3 Authority Key Identifier:
                keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:42:69:24:64:95:c5:12:b7:dd:16:79:c9:c0:9d:62:7e:c1:
         d4:b6:b9:c6:0f:e3:ac:20:a3:9d:a7:2b:9c:3f:76:94:5b:ce:
         36:f4:a4:ea:5d:e1:4b:92:c4:cd:ad:db:6e:8b:3c:f9:fb:38:
         d6:fe:40:06:72:1a:8f:3c:25:55:86:19:d6:f4:a8:fc:94:b7:
         bd:8e:64:6c:98:97:d3:21:32:bf:c5:68:4b:97:45:94:5f:24:
         14:38:fd:39:83:01:f4:4c:d1:e9:c5:06:1f:46:47:53:3b:cd:
         81:ee:27:38:fa:f8:b8:f6:c9:86:4a:47:3f:6c:6d:c4:9d:2c:
         aa:b0:4c:cb:7f:b6:77:ee:d9:94:78:6b:a5:6e:91:62:d9:8c:
         75:90:cc:c3:76:43:31:3f:5d:12:23:b1:f3:3c:a2:0e:0b:3b:
         2f:89:a6:7b:69:4b:4f:08:8b:d6:ac:f5:71:96:e0:ee:e7:cd:
         cc:2d:4a:a4:ef:b9:18:0c:44:4d:26:f6:36:d4:df:45:6e:47:
         f2:09:ab:5c:8f:8b:49:7d:67:70:bd:29:5f:c7:55:58:d7:58:
         41:47:72:b3:2c:d0:26:1b:10:83:8d:55:71:bf:b3:20:6c:d8:
         f0:ad:ad:a8:34:41:f4:01:4c:98:f6:ec:ee:53:40:51:b1:82:
         a1:7e:79:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:29:56 2026 by rpki-client