Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
File:                     DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json)
Hash identifier:          yypY++JIs4Ww78M7XiHrlpxfxPyDlqv/1buHYo+Kmrk=
Subject key identifier:   D0:0E:A5:03:F3:23:DD:74:DC:A1:BD:E6:82:93:36:82:0A:61:9E:85
Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52
Certificate issuer:       /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
Certificate serial:       019EBE7FD426EA407DD5BD687D9E11E2580D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
Manifest number:          073A
Signing time:             Sat 13 Jun 2026 01:01:48 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:48 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:48 +0000
Files and hashes:         1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: Ng86QZC5T+fUzNqegak9bGGSb0vdDx8zfS2bsDocn7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:d4:26:ea:40:7d:d5:bd:68:7d:9e:11:e2:58:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752
        Validity
            Not Before: Jun 13 01:01:48 2026 GMT
            Not After : Jun 14 01:01:48 2026 GMT
        Subject: CN=d00ea503f323dd74dca1bde6829336820a619e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:ad:48:90:7b:83:13:8a:99:13:98:c4:13:
                    cc:d1:56:94:ed:d6:0b:e7:dc:84:e8:72:92:a4:42:
                    9e:83:40:70:d1:e3:b4:b3:0e:6b:d4:19:b2:57:8f:
                    a7:9b:ac:7f:63:91:b5:b4:09:47:06:a1:e2:fa:fa:
                    0e:03:88:4d:b9:c4:5a:e7:5e:51:a1:7c:ca:67:c9:
                    28:d4:b1:82:94:ad:52:26:1f:11:62:87:c9:e4:9b:
                    f7:5a:1f:c8:15:96:dc:e0:87:9d:b3:45:fb:98:be:
                    7d:44:3e:6c:ba:4d:5c:ff:cb:cb:c1:44:34:4c:1d:
                    26:6a:bd:08:d2:1e:84:d9:07:54:14:c3:4d:c6:d1:
                    a8:0b:d5:ba:29:ba:4c:40:5d:03:55:62:cc:05:0b:
                    95:9c:f1:f7:e3:bc:20:eb:a8:a4:75:3b:d4:36:8b:
                    2c:21:52:e4:39:3f:99:a6:cc:33:91:d7:6d:40:ad:
                    aa:e0:33:43:e4:0f:0a:46:bb:37:db:4c:6d:19:51:
                    50:ef:3e:fd:69:91:58:6c:b5:f6:ce:69:f6:dc:04:
                    71:70:3b:ca:fb:87:65:b9:fb:bc:74:f5:28:3d:2e:
                    fe:4c:fc:90:09:a4:c1:03:d6:1d:a0:77:39:57:78:
                    65:ad:21:7e:3d:65:f6:c6:bd:ea:c3:99:2d:c8:f5:
                    7d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:0E:A5:03:F3:23:DD:74:DC:A1:BD:E6:82:93:36:82:0A:61:9E:85
            X509v3 Authority Key Identifier:
                keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:57:56:1b:fa:73:77:58:ae:38:20:57:23:69:b5:06:7c:cf:
         b5:45:d7:7b:52:dc:49:d0:83:96:7e:fa:eb:4c:2b:5b:1e:cc:
         26:d4:d7:d1:de:6b:04:e7:c4:1c:bc:e8:36:5b:ac:d3:dd:ea:
         47:c0:2e:d3:bd:2b:f8:ba:5b:2b:fa:98:0f:cd:84:64:ac:5d:
         fc:f2:92:a0:c3:c2:11:b5:bd:d6:0d:52:69:bd:26:11:25:4e:
         16:ea:c5:3b:ce:ed:c7:a8:a4:37:66:01:3f:31:6b:06:57:20:
         b6:a3:44:d2:66:5d:c5:a1:d3:f3:70:e8:e5:9d:92:92:5f:9a:
         a1:2e:e9:d5:72:ab:ed:22:42:99:2b:0f:55:07:82:83:20:b2:
         1d:d8:90:b2:a3:cc:53:4c:a5:3f:2e:90:9f:1c:25:89:13:f1:
         10:8a:47:56:d8:fb:2e:bd:14:ac:94:a8:c3:f2:c4:aa:ea:af:
         e8:95:3a:c4:35:83:c6:1b:10:ed:56:6d:59:be:d7:da:3e:82:
         8f:6a:7e:9b:9c:15:2c:0a:3f:52:3f:dc:24:09:16:58:1a:c1:
         67:77:2b:d4:ed:1a:4f:5e:40:78:04:77:d9:63:56:0b:e8:24:
         e2:d9:07:23:e5:04:c2:89:85:9c:1e:46:da:23:e6:b5:15:8a:
         7d:84:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:01:08 2026 by rpki-client