Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
File:                     DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json)
Hash identifier:          qvYn7MMn0SPCyqu9jX93pTKONk9xu70a6GUZ6MzZIzw=
Subject key identifier:   70:0A:02:EA:14:E2:FF:41:E6:E5:C1:48:32:AE:72:1B:E7:11:49:24
Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43
Certificate issuer:       /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
Certificate serial:       019EC0A42CC0E6607D601D9F0A31B485AF2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
Manifest number:          0AC5
Signing time:             Sat 13 Jun 2026 11:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:45 +0000
Files and hashes:         1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: IBwK1zVt/V0AnnT9L4ntd0DsWf/bdKWWkWa4YDJqzZI=)
                          2: HIeW7jOEPndBeoT23uEj81ZTZBg.roa (hash: JJnVSxNA1ixWdqqkWmZ7PhO+qpLJouZei+s+CRfBSYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:2c:c0:e6:60:7d:60:1d:9f:0a:31:b4:85:af:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43
        Validity
            Not Before: Jun 13 11:00:45 2026 GMT
            Not After : Jun 14 11:00:45 2026 GMT
        Subject: CN=700a02ea14e2ff41e6e5c14832ae721be7114924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:31:7b:85:a1:c5:8d:04:ed:6f:6a:93:2e:
                    4c:1a:f6:ce:9f:26:c7:a9:94:f8:60:c7:3d:80:18:
                    f5:89:d0:2b:8d:f9:ed:fd:da:2e:f6:0d:09:39:31:
                    62:06:ad:a1:cd:5e:a8:36:34:a5:38:80:dd:b3:03:
                    84:8c:18:1b:6d:55:e7:b4:8e:08:5e:79:c2:f1:ed:
                    3d:a3:78:ac:55:cb:ca:c1:eb:21:e0:8b:e3:cb:ed:
                    f1:cc:3a:72:cd:47:bd:8f:fe:27:ec:98:52:61:89:
                    94:57:53:3d:12:b8:6d:7e:99:d9:65:91:30:be:43:
                    02:e1:58:ff:9f:60:fb:59:e3:96:76:ba:c4:38:ad:
                    20:28:47:d2:dc:15:20:66:02:53:12:a5:01:48:75:
                    28:bc:d8:11:74:2b:93:c7:84:22:2a:e7:2b:23:fb:
                    3a:c0:8c:e0:51:95:a6:c7:31:ce:7c:72:4a:36:e5:
                    08:c6:15:e0:5b:07:0a:d0:2d:b9:25:24:d9:16:92:
                    84:5a:ca:0c:d9:67:36:af:b5:a7:f9:45:2d:26:ca:
                    83:ee:2b:9f:b5:cb:47:36:d0:34:72:2f:1c:0d:07:
                    27:e1:f1:85:5b:3c:42:28:b9:fc:c3:0d:2e:f1:8e:
                    51:ae:7b:ed:18:c5:1c:78:8c:1d:96:9e:50:a0:2b:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:0A:02:EA:14:E2:FF:41:E6:E5:C1:48:32:AE:72:1B:E7:11:49:24
            X509v3 Authority Key Identifier:
                keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:05:0e:f1:3e:c1:17:18:18:4e:5d:1b:e5:a9:66:41:9e:90:
         17:5c:4f:77:4a:62:dd:d4:cf:9b:24:6a:47:3d:d4:a2:f1:f8:
         69:8c:ec:70:b4:01:c1:fb:09:04:17:f7:01:c9:ec:59:b0:0d:
         c8:83:82:5d:68:2a:6f:28:a1:48:95:53:a5:45:51:bc:79:58:
         e4:05:7c:80:81:c5:99:57:e9:47:6e:ae:d9:df:25:6a:60:01:
         f3:69:e3:26:20:c8:0d:e1:4e:0c:0d:f2:cf:09:a1:a0:06:10:
         da:de:52:02:6d:c2:a6:6c:8d:96:9b:37:8e:45:13:ad:3e:68:
         a1:58:80:7e:d6:8a:c9:2d:05:83:e2:d6:1f:e2:23:22:6f:f3:
         5b:7d:02:8d:d3:f7:a5:7c:79:a4:0e:de:d9:bc:71:61:11:37:
         40:df:36:2b:05:59:25:e9:4b:79:fa:64:a3:fd:16:31:9c:87:
         4a:01:ff:1c:cc:52:57:e7:d5:8a:83:13:c3:07:8f:9c:89:b3:
         51:b8:e8:df:d9:4e:c6:2e:a9:9d:94:c7:2f:b4:f9:c5:33:5a:
         8f:46:b5:1c:a5:09:79:59:98:6d:5e:cc:e2:6d:b7:36:1b:64:
         07:20:af:42:c4:56:8f:08:76:96:8f:ba:39:17:ac:15:a6:d7:
         ef:a7:bf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:15:03 2026 by rpki-client