Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
File:                     DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft (raw, json)
Hash identifier:          +3EEV50hJL7M6dFtV6zbAuT/GLd5wA6yYdujCCmVBKk=
Subject key identifier:   7D:C1:64:72:CB:9C:06:3B:32:89:F1:84:70:72:7A:0C:6E:34:D1:DB
Authority key identifier: 0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD
Certificate issuer:       /CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
Certificate serial:       019EC3A5755CDC418371785183D8C4BC071E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
Manifest number:          0B83
Signing time:             Sun 14 Jun 2026 01:01:00 +0000
Manifest this update:     Sun 14 Jun 2026 01:01:00 +0000
Manifest next update:     Mon 15 Jun 2026 01:01:00 +0000
Files and hashes:         1: DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl (hash: Nc13VwtYiCIOl8haZ5b6pcRtwqnsSPPRMQYiLyfWLnE=)
                          2: n3TEcj2cHwyJM-ltU6Fz4mQkgOk.roa (hash: qzbLDwyzPoZSNZu2f+YOUcC/z1BsSoehvOpIyMT5K6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:a5:75:5c:dc:41:83:71:78:51:83:d8:c4:bc:07:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e51516767d9a8508c6e14d58deeffbfab8080dd
        Validity
            Not Before: Jun 14 01:01:00 2026 GMT
            Not After : Jun 15 01:01:00 2026 GMT
        Subject: CN=7dc16472cb9c063b3289f18470727a0c6e34d1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:18:f3:9e:e3:d0:40:c6:34:11:36:cf:2d:
                    90:79:7a:4b:85:ba:47:10:39:0f:40:36:ce:67:e4:
                    63:e1:52:f3:3d:e6:d1:84:f8:e0:03:ba:8f:12:db:
                    f0:54:e9:c3:d5:9f:6b:4b:e0:df:41:14:c9:a9:4a:
                    39:a0:60:08:48:3a:5e:b0:5c:c1:44:1f:72:fb:05:
                    ac:03:18:c2:9b:cd:44:08:7b:66:01:41:64:06:cb:
                    1f:c7:00:30:68:01:11:9d:8d:cc:aa:53:86:9d:ac:
                    fd:38:20:13:30:93:6c:cc:da:d7:38:66:9d:61:30:
                    f9:fc:67:16:59:ac:c8:f7:28:3c:c9:50:6d:56:5c:
                    a2:43:a7:39:1b:39:90:38:20:84:ea:a0:19:88:24:
                    23:93:b7:f0:37:10:44:74:cd:e1:e1:f2:c6:40:dd:
                    13:09:9b:95:41:58:07:c8:ac:70:9c:3b:a7:49:38:
                    cb:f0:08:b9:95:03:a9:09:f0:f3:27:7a:0d:f7:04:
                    bc:a7:00:25:35:36:e0:38:f6:e6:7d:e0:aa:78:e8:
                    04:68:39:44:b5:1f:33:3a:9b:50:7e:bc:17:db:c5:
                    7a:7a:b1:d9:ee:1f:30:fe:88:55:09:57:ae:13:e2:
                    06:cf:bf:a4:8e:86:a1:45:91:d5:25:37:2b:ac:8e:
                    fe:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C1:64:72:CB:9C:06:3B:32:89:F1:84:70:72:7A:0C:6E:34:D1:DB
            X509v3 Authority Key Identifier:
                keyid:0E:51:51:67:67:D9:A8:50:8C:6E:14:D5:8D:EE:FF:BF:AB:80:80:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlFRZ2fZqFCMbhTVje7_v6uAgN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4641f6-87c0-4d17-a58a-6163564d9704/1/DlFRZ2fZqFCMbhTVje7_v6uAgN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:43:20:77:6e:15:33:3d:91:e2:d6:8d:59:59:41:ab:23:
         b7:07:6c:b0:17:a8:1b:0d:c9:20:13:8d:3b:e5:6c:da:d8:f2:
         cc:cc:bb:c9:aa:83:fd:21:8e:8a:eb:7f:07:b3:55:f3:2b:f7:
         59:1f:e7:f7:0c:a1:8a:b7:1f:1a:a1:c2:04:c8:c1:48:76:db:
         4b:2a:8e:b0:58:d4:d2:04:b4:7f:9c:ab:34:7b:cd:19:f5:bf:
         cb:5a:9e:2d:50:bc:d3:19:51:fe:04:b2:fa:84:6e:8d:0a:46:
         86:eb:b8:2f:cb:cf:22:0a:9e:52:fd:7a:8c:f5:5c:48:53:4e:
         cd:e7:79:86:d3:db:18:6b:c0:e9:10:42:1c:f4:a7:7d:1f:db:
         59:33:9c:38:a6:d4:93:17:a3:ea:09:52:bb:01:d7:34:d3:75:
         d9:58:7d:59:c1:8d:14:65:c3:44:00:ed:8a:a7:5a:fd:dd:17:
         05:9e:ce:da:5f:08:55:50:cf:d4:07:0a:45:dd:20:34:42:28:
         cf:8d:f8:20:2f:17:df:fb:ae:fe:e0:2d:c6:80:1a:43:85:44:
         39:93:83:a9:8d:c6:5d:e9:0d:86:23:0f:07:78:da:9c:c0:82:
         c4:57:f8:a1:09:24:bd:3f:d0:5d:ef:f2:26:7e:b8:be:74:13:
         6f:57:bc:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:52 2026 by rpki-client