Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File:                     dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier:          rDIXogUZeicGvI/taE9C4yx917qspi0e+qSwiuRCOkw=
Subject key identifier:   4F:8A:51:75:E3:9A:9E:AD:C6:3F:D5:3C:C7:E6:90:AF:F8:6E:96:F9
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer:       /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial:       019EC0DAF74B507583B329F1D2404014675A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number:          0D41
Signing time:             Sat 13 Jun 2026 12:00:35 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:35 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:35 +0000
Files and hashes:         1: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (hash: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0=)
                          2: FLA5zAJXuRYhVvLbMvHegLVx03k.roa (hash: ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=)
                          3: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (hash: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs=)
                          4: TSfqyIUxAgfu2d6E5vUEde-a71w.roa (hash: m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=)
                          5: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: nNZyRvqF+H3LtCf2rHgsqyr0xu+napLVGyDkuSqe9F8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:da:f7:4b:50:75:83:b3:29:f1:d2:40:40:14:67:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
        Validity
            Not Before: Jun 13 12:00:35 2026 GMT
            Not After : Jun 14 12:00:35 2026 GMT
        Subject: CN=4f8a5175e39a9eadc63fd53cc7e690aff86e96f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:21:54:b2:ba:34:90:64:18:78:33:5f:67:
                    b0:a9:b2:56:cf:ac:a8:c7:58:c2:4c:76:04:e0:60:
                    07:76:ae:58:95:0d:c2:40:49:89:e3:36:59:f3:8b:
                    e2:13:aa:ce:3c:13:f8:7f:63:d7:9e:d6:b0:ea:0c:
                    20:59:6e:cf:a8:93:7a:a0:09:c2:54:8f:53:03:0b:
                    04:78:d8:70:43:9f:a9:4b:70:b5:9c:93:e1:8c:b8:
                    a4:1c:f3:9b:60:e9:c2:6c:44:09:1f:9a:69:81:1b:
                    d8:1a:d1:7e:98:ce:a8:d5:1f:a5:56:39:c1:f0:16:
                    a3:2d:7d:a1:06:0c:37:db:81:ef:05:bb:b6:37:ad:
                    cf:cf:7f:91:25:37:1c:e5:6a:39:e7:3a:ac:74:50:
                    2b:d1:8c:b9:d9:55:dc:03:5b:af:cd:cb:3b:c3:30:
                    fd:29:0e:02:69:90:20:88:c7:43:72:f0:bd:01:8d:
                    9c:2f:e8:2f:47:83:5c:04:7e:87:b9:d7:ac:c2:21:
                    b8:fe:ba:cf:19:cf:c5:82:1a:ac:d3:43:5b:cb:67:
                    b9:d0:a0:85:9d:4b:d6:a6:ef:23:84:3f:70:fa:f7:
                    d7:f1:68:d7:ae:5d:2e:99:34:b4:66:cd:43:af:99:
                    5c:1e:a7:4e:97:40:47:6b:d6:2b:38:5e:e7:85:f2:
                    6b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8A:51:75:E3:9A:9E:AD:C6:3F:D5:3C:C7:E6:90:AF:F8:6E:96:F9
            X509v3 Authority Key Identifier:
                keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:29:03:2f:76:5d:08:5e:24:8c:c8:30:e5:23:36:aa:e5:c9:
         b4:17:09:8f:f1:67:3b:a4:f8:24:f8:0a:72:72:e8:00:5c:c4:
         71:79:c6:fa:b5:11:46:6c:a2:55:14:13:2f:8b:df:50:46:32:
         1f:14:a3:f1:e9:5c:11:d0:95:42:73:dd:03:a7:36:bf:48:11:
         36:bd:3a:46:1a:63:d4:e9:f1:90:f1:3b:62:6d:a1:7a:56:cc:
         bd:6e:de:08:64:d7:7f:c3:9a:bc:c4:89:e7:75:29:36:60:56:
         67:52:d5:55:fe:b6:c2:8e:3f:6b:64:47:18:d5:1b:df:4a:c5:
         e9:3e:f3:b2:c8:29:0d:10:af:98:1a:87:39:98:2b:fc:5a:2a:
         72:5a:4e:d6:0c:20:b2:93:24:43:c8:b0:4a:fa:bb:b0:48:90:
         32:c7:4a:11:87:25:4f:77:9c:b2:e7:58:53:cf:f0:37:af:7d:
         f7:d0:96:43:7c:58:dd:33:f7:b8:94:56:6f:bd:10:e4:39:81:
         32:97:a8:30:f9:b0:dc:0a:f3:d7:db:3e:c1:cd:c7:11:8c:43:
         8f:da:da:56:4d:97:1c:54:f4:1f:6c:98:4f:46:06:3d:f1:7c:
         50:bb:9e:84:f0:1a:28:88:a5:5c:29:1c:e6:85:6e:de:f5:dd:
         0e:ae:b8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:04:13 2026 by rpki-client