Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
File:                     DW-RpSFkBJQiOeaW5lzy03IU5K8.mft (raw, json)
Hash identifier:          f03uI+KtrB1y6zhCX8GUNlBQ1TpKjjYH0sMtb8RHjfY=
Subject key identifier:   61:5B:E9:39:31:76:CB:35:A0:2B:B2:3D:46:10:40:20:65:57:D6:B4
Authority key identifier: 0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF
Certificate issuer:       /CN=0d6f91a5216404942239e696e65cf2d37214e4af
Certificate serial:       019FA9ABE7360C63F7868DE85F71EEA39934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
Manifest number:          0FBD
Signing time:             Tue 28 Jul 2026 17:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:43 +0000
Files and hashes:         1: 06cgoU7GyJzMyJR7nF3NCVCDDU0.roa (hash: kN3R1rOeDYfzsBK/+cPskIhYJ/5X5cYwuNm8G34vSmk=)
                          2: DW-RpSFkBJQiOeaW5lzy03IU5K8.crl (hash: cPuPJfEp5QKf61TSYpfd9o7XizQjhdke6UbP5Va/iAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:e7:36:0c:63:f7:86:8d:e8:5f:71:ee:a3:99:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6f91a5216404942239e696e65cf2d37214e4af
        Validity
            Not Before: Jul 28 17:00:43 2026 GMT
            Not After : Jul 29 17:00:43 2026 GMT
        Subject: CN=615be9393176cb35a02bb23d461040206557d6b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:73:4c:67:dc:60:ec:10:e5:f6:4b:9d:65:d3:
                    45:3d:50:66:63:6a:ee:ec:18:29:50:8f:85:ef:8a:
                    66:40:52:37:9c:d3:ac:e6:41:e0:5a:6f:a1:fc:49:
                    a8:39:72:a8:20:47:07:9e:1c:24:82:92:4c:d2:df:
                    49:19:63:e7:20:76:56:76:6b:27:c1:33:70:ed:3c:
                    b8:cb:1d:1d:0e:51:cb:d3:7a:60:de:b5:ae:6d:b4:
                    69:0e:d1:50:2b:64:61:7b:0b:7d:a1:31:9d:af:9b:
                    ba:f0:6a:bc:ad:84:c5:9c:fe:22:48:27:ce:6c:90:
                    1b:6d:f1:5d:38:fe:b5:39:13:d0:8a:8e:52:9f:30:
                    b3:98:98:62:ee:b7:2d:24:f5:4a:e0:5d:1f:d8:1d:
                    ef:d0:66:dc:1f:d2:f3:ce:f0:c1:ee:1d:62:f4:d4:
                    a9:06:2e:b2:7f:cf:26:e6:b3:36:41:a9:aa:eb:55:
                    37:a6:26:64:36:8e:7a:25:3f:a5:fe:f3:7b:5d:91:
                    0c:d7:ea:55:c7:62:8d:4d:5c:6a:af:d3:4d:0f:7f:
                    9c:9e:a6:d7:a3:7a:30:cf:91:5f:ad:b2:20:d3:69:
                    ff:ea:df:fe:f9:ab:bd:d2:a6:be:f8:81:37:8c:16:
                    b6:b5:38:86:5b:f8:53:09:d9:62:c8:4f:17:6f:c0:
                    a1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5B:E9:39:31:76:CB:35:A0:2B:B2:3D:46:10:40:20:65:57:D6:B4
            X509v3 Authority Key Identifier:
                keyid:0D:6F:91:A5:21:64:04:94:22:39:E6:96:E6:5C:F2:D3:72:14:E4:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW-RpSFkBJQiOeaW5lzy03IU5K8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/c12695-89e1-4482-94e5-c47eab17e93a/1/DW-RpSFkBJQiOeaW5lzy03IU5K8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:3e:e5:d5:78:28:f4:9b:51:cc:3b:c7:f1:95:e3:5a:5d:
         51:6a:0e:a9:53:34:97:e4:4b:19:71:c9:a1:a0:51:d7:90:b1:
         f8:dd:92:aa:52:64:f4:61:fb:41:17:5a:ed:46:31:c1:75:29:
         24:e0:07:9a:fd:9a:f1:5d:ba:5f:23:eb:37:88:6e:4f:b9:da:
         6b:49:30:b0:ba:6e:30:dd:62:1a:0e:60:65:c8:69:04:ac:fc:
         9e:b6:27:3d:4d:7c:b2:d2:db:1e:57:c9:81:2e:79:75:63:ab:
         f2:a0:c5:7e:c6:26:98:84:fa:6b:48:b0:84:49:3d:ba:fd:06:
         4d:e9:f9:60:40:d4:17:da:68:13:a5:f3:d0:69:2f:84:e6:71:
         f0:84:62:8c:29:35:d7:05:e7:ad:17:c0:e7:2b:4d:01:04:2d:
         9d:5f:08:7f:c1:0f:8d:76:d4:4b:06:a8:61:d5:0b:d3:f7:2c:
         b7:af:13:f0:7e:af:78:98:03:48:e3:b5:a3:10:fb:51:26:17:
         ef:b8:a4:bb:e2:e8:5b:e4:30:8a:c1:fe:ce:32:85:4e:78:9f:
         c5:c0:77:95:83:4d:7c:7e:c1:58:ab:73:0f:e8:27:bf:1b:25:
         c1:7d:85:93:90:c2:38:4e:aa:87:b6:5d:66:8d:0f:f1:1a:1b:
         38:be:ee:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:23:45 2026 by rpki-client