Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File:                     DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier:          8gXju/GGv56qTrNOxz259sGCnuznU07LCPqpdtZifUg=
Subject key identifier:   FA:75:9B:3E:74:BF:D9:F6:41:BC:80:73:A5:21:54:62:4D:A4:8A:F6
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer:       /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial:       019FA82BC91C3EA8A64E8E34E2DCD2D89107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number:          093C
Signing time:             Tue 28 Jul 2026 10:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:09 +0000
Files and hashes:         1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: sTjdKXfdZnu62d8QEsvbaB/G6JpKxIMN1mTYaq7ebkU=)
                          2: ItFf5mGxUD7KxGy789UtNATPKKo.roa (hash: q6yJcUukZanUDWbF7+j0aEo4I20oQqnK0aRmb9zfRQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:c9:1c:3e:a8:a6:4e:8e:34:e2:dc:d2:d8:91:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
        Validity
            Not Before: Jul 28 10:01:09 2026 GMT
            Not After : Jul 29 10:01:09 2026 GMT
        Subject: CN=fa759b3e74bfd9f641bc8073a52154624da48af6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:ef:b8:7e:1c:ff:d4:6f:f2:a2:36:b0:15:
                    7a:73:07:39:de:c6:b4:81:bd:5b:da:c5:d2:5f:6e:
                    d3:b3:92:67:62:a8:14:47:b8:36:8e:43:eb:74:16:
                    cc:f5:bb:69:16:a7:a7:67:c9:b6:08:ab:2b:92:98:
                    90:16:4c:a6:ab:1e:0e:d7:06:33:6b:a6:de:89:0f:
                    da:1b:63:3b:41:03:9b:34:d9:0c:6c:5e:da:41:ea:
                    31:e3:6b:cf:29:42:2e:e2:44:f9:21:e4:39:cc:5a:
                    87:40:60:6d:08:1f:51:0c:8c:c3:e8:07:81:31:37:
                    ae:07:fe:18:9b:e4:a7:ae:50:1e:08:c8:01:31:e1:
                    32:9e:e5:1e:48:ea:bf:0b:39:de:45:ed:56:05:39:
                    80:6e:9d:84:e3:29:9d:f6:e2:cb:5e:24:51:dc:ce:
                    d4:27:85:5e:7d:62:9d:3e:72:f2:ff:76:a6:52:f9:
                    33:e4:a0:9d:5b:d6:99:36:f6:65:df:73:f1:00:4a:
                    1f:85:3a:3a:df:d9:9a:9b:a1:f9:2c:aa:a9:5b:69:
                    16:62:d1:27:31:fb:0a:94:37:35:98:50:00:dd:0b:
                    35:0a:ac:5c:63:d1:64:bd:5a:5a:07:fb:ac:7a:cb:
                    9e:4f:06:c2:da:51:3c:68:61:d0:f6:20:fe:a9:89:
                    60:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:75:9B:3E:74:BF:D9:F6:41:BC:80:73:A5:21:54:62:4D:A4:8A:F6
            X509v3 Authority Key Identifier:
                keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b5:aa:c2:6e:4a:c3:68:27:3c:ef:a2:b0:1b:f5:78:be:9b:
         70:7d:d2:90:d6:95:4b:b6:41:b4:48:29:a4:ae:da:7e:1a:bf:
         6d:03:76:3d:5f:dd:22:80:45:ff:29:02:60:ad:d2:1b:72:65:
         fe:1c:c0:3b:74:27:04:ed:2e:66:9d:b9:0a:2f:d3:28:de:50:
         1e:ad:f2:94:14:bd:21:d4:4f:c8:ff:20:54:c9:9f:0c:a5:28:
         43:25:b2:26:cf:41:3e:7a:99:d0:3f:36:6a:17:4c:7b:a9:22:
         27:24:4c:ce:15:43:d9:d9:8e:69:f7:a9:88:8c:45:74:a0:f6:
         4d:e3:55:5e:2a:eb:9c:da:b9:74:ac:6b:8b:35:40:37:69:c1:
         b4:8e:80:53:cc:73:45:09:98:ef:7e:55:bb:53:4b:fd:0c:85:
         7f:43:dc:0e:2f:3c:96:e5:26:b1:37:37:0e:8a:6f:ae:32:14:
         b7:92:44:b1:0d:07:91:99:75:3f:1f:dc:02:b3:ac:47:ff:16:
         99:b2:e3:4e:fd:03:1e:34:05:21:9c:93:f9:bb:b5:86:d5:2c:
         4c:e5:7f:26:57:4e:ae:cf:07:39:de:ae:27:5c:c6:a3:3e:cd:
         aa:d5:33:66:f9:9a:fc:27:b0:ab:40:8e:72:48:01:de:8a:be:
         ec:05:c8:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK8kcPqimTo404tzS2JEHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDM3ZGQyMmI3YWFiZTI4MjIyNWFmYjI1NmI4ZDlkY2Jl
YmEzNTMwHhcNMjYwNzI4MTAwMTA5WhcNMjYwNzI5MTAwMTA5WjAzMTEwLwYDVQQD
EyhmYTc1OWIzZTc0YmZkOWY2NDFiYzgwNzNhNTIxNTQ2MjRkYTQ4YWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12/vuH4c/9Rv8qI2sBV6cwc53sa0
gb1b2sXSX27Ts5JnYqgUR7g2jkPrdBbM9btpFqenZ8m2CKsrkpiQFkymqx4O1wYz
a6beiQ/aG2M7QQObNNkMbF7aQeox42vPKUIu4kT5IeQ5zFqHQGBtCB9RDIzD6AeB
MTeuB/4Ym+SnrlAeCMgBMeEynuUeSOq/CzneRe1WBTmAbp2E4ymd9uLLXiRR3M7U
J4VefWKdPnLy/3amUvkz5KCdW9aZNvZl33PxAEofhTo639mam6H5LKqpW2kWYtEn
MfsKlDc1mFAA3Qs1CqxcY9FkvVpaB/usesueTwbC2lE8aGHQ9iD+qYlg9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp1mz50v9n2QbyAc6UhVGJNpIr2MB8GA1UdIwQY
MBaAFAwDfdIreqvigiJa+yVrjZ3L66NTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWIt
ZThmM2E2NmVmNTU4LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kYTgxY2ItMTk3Mi00YzliLTlkYWItZThmM2E2NmVmNTU4
LzEvREFOOTBpdDZxLUtDSWxyN0pXdU5uY3ZybzFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLWqwm5K
w2gnPO+isBv1eL6bcH3SkNaVS7ZBtEgppK7afhq/bQN2PV/dIoBF/ykCYK3SG3Jl
/hzAO3QnBO0uZp25Ci/TKN5QHq3ylBS9IdRPyP8gVMmfDKUoQyWyJs9BPnqZ0D82
ahdMe6kiJyRMzhVD2dmOafepiIxFdKD2TeNVXirrnNq5dKxrizVAN2nBtI6AU8xz
RQmY735Vu1NL/QyFf0PcDi88luUmsTc3DopvrjIUt5JEsQ0HkZl1Px/cArOsR/8W
mbLjTv0DHjQFIZyT+bu1htUsTOV/JldOrs8HOd6uJ1zGoz7NqtUzZvma/Cewq0CO
ckgB3oq+7AXIBw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:43 2026 by rpki-client