Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
File:                     D0OG59TvxHLBH-nP7z0zCXSzP2E.mft (raw, json)
Hash identifier:          ai5I/TeGuFGMyZ3W9jj2GkDh/jfxF4buVo1/6cUd/FA=
Subject key identifier:   D2:EE:A4:43:13:EF:DA:38:A9:64:CB:3C:47:72:EE:DF:53:28:B8:51
Authority key identifier: 0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61
Certificate issuer:       /CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
Certificate serial:       01A0C220049924D071E4012D24ED24E78CF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
Manifest number:          0D05
Signing time:             Mon 21 Sep 2026 04:01:13 +0000
Manifest this update:     Mon 21 Sep 2026 04:01:13 +0000
Manifest next update:     Tue 22 Sep 2026 04:01:13 +0000
Files and hashes:         1: D0OG59TvxHLBH-nP7z0zCXSzP2E.crl (hash: 3W3QfLKTqx0fQ6GpYq8S7XcjyioybD9hl6RqC5BR/Wc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:20:04:99:24:d0:71:e4:01:2d:24:ed:24:e7:8c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f4386e7d4efc472c11fe9cfef3d330974b33f61
        Validity
            Not Before: Sep 21 04:01:13 2026 GMT
            Not After : Sep 22 04:01:13 2026 GMT
        Subject: CN=d2eea44313efda38a964cb3c4772eedf5328b851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:82:03:1d:26:a9:8f:bb:45:a9:b6:5f:65:81:
                    2e:e2:0b:c2:7e:85:29:6a:d5:66:81:e6:20:6f:df:
                    bd:5f:d2:94:30:c7:32:ab:9f:e9:1a:89:cf:cd:aa:
                    35:f6:b8:8d:1b:a6:42:34:b1:ae:bc:ae:b8:26:87:
                    d7:ce:9b:7e:60:35:ed:1a:4a:c5:c3:0b:d6:4f:19:
                    96:47:d1:1c:a8:d6:d0:25:e1:19:38:a3:b6:44:c8:
                    d3:6a:0a:ce:ef:16:f9:14:3a:18:44:02:b6:9e:f1:
                    e5:2a:00:27:e6:bb:87:6f:59:36:69:cc:bb:43:0a:
                    4b:e4:9e:61:f0:c3:06:2e:15:79:4a:fb:24:00:7e:
                    7f:8b:72:a5:49:fc:a8:5f:10:b1:26:0f:05:25:66:
                    99:99:36:1c:a2:8f:a7:21:73:b5:71:92:70:e2:a1:
                    9c:f2:4c:2b:36:b8:1c:3a:a3:4e:9a:3e:4b:cc:3a:
                    2a:ab:cc:ee:d5:f6:99:89:89:4f:07:4a:38:b1:20:
                    f2:b8:39:06:78:05:c8:ab:50:95:00:e1:33:a5:fd:
                    80:c1:b6:4b:de:40:6e:a3:74:58:f6:cf:f1:58:d2:
                    31:86:6f:7a:0c:00:5e:bd:31:de:5a:26:58:02:53:
                    33:4f:09:15:da:e9:b4:8e:a1:58:92:5c:d6:39:da:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EE:A4:43:13:EF:DA:38:A9:64:CB:3C:47:72:EE:DF:53:28:B8:51
            X509v3 Authority Key Identifier:
                keyid:0F:43:86:E7:D4:EF:C4:72:C1:1F:E9:CF:EF:3D:33:09:74:B3:3F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0OG59TvxHLBH-nP7z0zCXSzP2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/56bfb4-b3fe-465a-b357-52abb53b7513/1/D0OG59TvxHLBH-nP7z0zCXSzP2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:6f:29:24:85:bc:e7:04:e9:53:2d:60:a5:f1:7b:19:b9:77:
         5a:99:af:27:15:27:73:65:48:1a:68:fe:40:e0:00:87:a9:7f:
         23:e1:1b:5e:fc:f7:cf:2d:65:51:21:da:2d:20:fc:70:a2:96:
         27:58:18:c0:bc:3d:c4:d8:92:9a:44:14:d3:ea:bf:e4:3a:80:
         9b:ea:51:5f:70:9e:c0:3c:a3:32:e4:d6:97:f8:df:fc:df:e7:
         5b:f2:25:31:46:61:56:51:b2:9f:5e:d0:15:44:48:7c:50:9c:
         03:7b:3e:c1:b0:bd:28:8d:22:7f:39:15:25:83:16:7b:d3:db:
         55:62:bb:93:9c:08:90:c8:7c:92:a3:cb:8e:2d:f3:ec:67:04:
         c2:46:04:b6:ec:f2:ae:63:93:7f:b7:4d:5f:48:40:97:37:bb:
         eb:34:d8:3d:ad:40:f4:b5:96:5c:5b:4b:e5:18:c6:bb:85:ee:
         bb:2c:e3:b2:53:b1:de:26:fd:f8:d8:24:58:c8:96:c9:bd:51:
         2e:10:10:3c:a2:2d:a9:30:1a:96:d0:67:f9:74:78:4a:0e:a0:
         bf:3f:ea:64:95:2e:7a:bd:51:74:ac:fe:69:6e:22:83:6c:5c:
         c5:22:d5:6c:3b:35:d7:93:ae:79:31:1c:98:9b:15:b2:8d:35:
         12:81:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:24:18 2026 by rpki-client