Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File:                     DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier:          CQoS0j0+YAhx3xRQhbdZ8zDhGWuggZ9QdFudI7+wruE=
Subject key identifier:   7B:5B:1F:6E:FF:3A:B9:87:0A:D3:7F:40:F3:D4:F8:45:83:41:48:35
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer:       /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial:       019FA9AC65836B0D0BCC65313312104391CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number:          0225
Signing time:             Tue 28 Jul 2026 17:01:15 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:15 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:15 +0000
Files and hashes:         1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: p/qL0UIJWPG0WC2tDjpkLzSRGO8AIf7atb/nokUTcnQ=)
                          2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:65:83:6b:0d:0b:cc:65:31:33:12:10:43:91:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
        Validity
            Not Before: Jul 28 17:01:15 2026 GMT
            Not After : Jul 29 17:01:15 2026 GMT
        Subject: CN=7b5b1f6eff3ab9870ad37f40f3d4f84583414835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:17:11:f2:aa:57:54:03:80:7c:3e:17:6c:72:
                    d8:61:37:05:fa:f7:9f:93:9d:11:98:f0:a8:0a:e3:
                    93:fc:71:65:33:a9:18:fc:ae:0e:b7:44:6a:3c:b8:
                    be:f3:90:a4:29:52:08:fa:00:28:0e:6d:85:61:88:
                    7c:e7:b0:df:ef:81:00:a0:c9:32:f0:11:96:6c:66:
                    96:da:4c:61:36:72:21:60:7d:31:6a:b6:3a:e1:45:
                    ec:fb:db:89:84:1a:88:cb:b7:5c:83:5a:b3:4d:05:
                    14:27:b7:23:39:3d:7c:cd:e6:fd:79:4f:f5:da:44:
                    1c:40:a6:15:f7:32:e9:ab:8c:b7:8c:ae:11:90:98:
                    bb:ca:ed:77:ad:14:95:44:35:de:98:e1:d7:d3:8a:
                    82:25:6b:e7:98:34:26:95:ba:ea:74:41:15:07:13:
                    94:3b:6e:3b:2e:c8:5b:54:4b:ed:1a:46:ba:06:ee:
                    e7:9b:d6:ee:d3:1c:f8:1e:47:54:89:11:3e:d2:dd:
                    35:48:23:e1:42:d4:9c:55:0b:64:0d:17:bf:2d:86:
                    c6:a4:22:9f:74:15:ac:69:8b:5f:71:09:e6:e3:a8:
                    08:13:3c:f1:76:9e:39:0d:58:0b:eb:bf:15:f6:38:
                    55:0d:af:2c:8a:0c:c9:24:21:a4:9b:b5:31:f0:cb:
                    90:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5B:1F:6E:FF:3A:B9:87:0A:D3:7F:40:F3:D4:F8:45:83:41:48:35
            X509v3 Authority Key Identifier:
                keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ac:47:85:69:a9:3f:16:a2:10:e6:22:65:7c:ff:07:0c:8b:
         0a:cb:02:e6:e3:83:8c:45:19:8a:48:50:b9:d3:18:14:c2:c0:
         8a:16:f2:ff:45:20:01:3e:0a:bf:5f:8a:c0:1f:6b:e5:34:0a:
         b3:80:92:7e:e1:ff:f1:26:ec:98:1e:01:34:87:bc:58:6a:0f:
         0c:ae:41:94:23:c6:1a:2c:a0:6c:04:05:9b:7e:7c:8b:96:a8:
         6a:b9:bb:2e:62:8b:f9:0d:96:5c:54:27:7d:7f:16:ad:0d:bb:
         de:3b:26:1f:c2:11:e0:53:99:5c:a7:2f:cc:b7:5c:45:d4:09:
         40:34:0a:3d:7b:e9:b7:0d:fc:7d:13:e3:b3:ac:e8:25:a4:79:
         e3:60:37:b5:05:52:79:ba:38:d0:ba:18:37:8a:df:4e:60:8e:
         08:f4:9b:d6:24:4d:68:cd:7d:4d:89:96:0c:a2:cc:19:b0:b0:
         48:18:88:47:5a:9f:46:3d:17:e3:cf:a7:8e:47:b8:bc:46:df:
         ae:9d:b9:a9:b9:0a:2c:e8:66:14:74:b3:4c:04:b7:50:81:5b:
         7f:56:04:39:a7:70:ee:a9:cc:b4:15:60:de:ab:f8:a8:ff:62:
         78:5f:b4:ca:93:ed:a1:77:e5:90:85:86:5f:ea:b6:f9:18:10:
         84:6f:a1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:31:05 2026 by rpki-client