Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
File:                     DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json)
Hash identifier:          K2eajllbxGXDqeCI5D44gbACdsU2MDH14MvDY1ctfP0=
Subject key identifier:   63:46:2F:A3:81:58:B5:27:A9:73:57:6A:D3:1B:36:8A:9B:A7:6E:31
Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
Certificate issuer:       /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Certificate serial:       019FA9AC12C79E5A26D7FDF2E03869F99F15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
Manifest number:          16D7
Signing time:             Tue 28 Jul 2026 17:00:54 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:54 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:54 +0000
Files and hashes:         1: C-78xmWgZqJn-98KCnx2cK8W2iw.roa (hash: kvyCi4+DSBTeslNasxxFTjOtFWjXLr4uWpv3Fg7ByZw=)
                          2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: 4mqADQ2PGEAvs2pLDytVuVjADrMTdZG2ThcPOnvFEX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:12:c7:9e:5a:26:d7:fd:f2:e0:38:69:f9:9f:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
        Validity
            Not Before: Jul 28 17:00:54 2026 GMT
            Not After : Jul 29 17:00:54 2026 GMT
        Subject: CN=63462fa38158b527a973576ad31b368a9ba76e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d3:6f:9f:2f:ee:be:39:bb:db:bf:25:3d:64:
                    a1:a0:e3:ba:41:5d:ee:33:5a:c7:09:67:a2:4a:d7:
                    ff:15:c0:4c:77:7c:48:90:ca:0b:67:50:8c:81:a3:
                    ad:5f:f6:2e:7b:fc:76:23:e2:08:fc:35:2d:53:3a:
                    24:59:c9:9c:4b:f1:e0:c8:ee:52:f2:d0:35:57:e8:
                    29:d6:53:f3:8a:1f:b6:4d:8e:43:24:1b:a9:93:7f:
                    24:95:e0:69:8c:e1:70:95:27:f8:d3:a5:b0:e0:9a:
                    38:33:31:5a:81:33:8e:8e:0c:17:62:2a:c6:de:91:
                    f6:38:79:ee:d1:18:74:50:18:91:e5:40:76:2a:19:
                    0b:aa:d2:e8:82:ff:92:2c:11:82:f6:3e:b8:8c:02:
                    77:98:cd:5b:1c:f8:95:70:b5:45:6f:14:09:92:1c:
                    97:57:5c:75:2a:a0:b9:cc:bf:76:a4:c7:cb:70:cd:
                    56:ea:91:eb:ff:4f:57:da:3c:cc:db:3f:81:76:6d:
                    32:68:6b:b9:a6:56:72:06:c0:59:5e:91:89:f7:68:
                    51:79:40:c1:b8:6a:33:73:3f:1f:98:77:bb:90:93:
                    74:98:f5:20:46:2a:58:cb:38:85:5c:31:34:17:c0:
                    2c:c3:07:eb:ff:a5:a1:a8:74:be:41:9b:b2:e9:5a:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:46:2F:A3:81:58:B5:27:A9:73:57:6A:D3:1B:36:8A:9B:A7:6E:31
            X509v3 Authority Key Identifier:
                keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:87:1d:93:fe:d0:b8:5b:7a:70:f6:d6:1b:7d:74:75:40:b5:
         a3:ff:08:b0:be:35:e3:ed:4c:31:3b:74:1a:5c:2b:c5:13:6b:
         e5:56:ea:64:fb:b4:f7:45:11:ba:c5:e3:ca:9c:cc:d5:9f:1b:
         5f:28:54:91:7a:a0:c6:fd:be:f5:d3:26:e6:78:6a:5b:c4:ed:
         88:b7:44:87:fc:d5:15:0a:76:67:b7:87:fe:12:3f:dd:87:a7:
         33:39:0c:f5:3b:b3:79:f4:bf:87:fd:de:71:c6:c0:be:2e:ac:
         f3:3a:82:44:85:2b:d7:90:cc:f2:1d:d9:f4:36:99:57:22:fc:
         02:c5:29:ae:fe:94:0f:7e:64:31:22:8a:fd:20:30:31:40:a9:
         9b:52:61:96:1e:f1:da:6d:bc:e2:bf:55:30:cf:65:22:78:b9:
         9c:a0:86:c8:72:8e:80:cc:bb:24:9d:92:e7:d0:c6:b2:be:39:
         91:34:b3:8a:66:a8:87:41:28:98:55:04:93:e4:fe:e4:eb:13:
         70:2b:63:53:f1:59:32:45:04:bc:18:60:54:33:64:37:d4:11:
         35:fc:61:16:e0:62:9b:c6:25:3a:aa:b7:14:a0:17:36:f6:0e:
         eb:f8:21:3b:cd:07:1d:38:df:c8:62:1f:75:88:ef:6d:d6:92:
         bd:bf:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:22 2026 by rpki-client