Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
File:                     DASLX4FSNcOT_qdh4H64uLv4f9M.mft (raw, json)
Hash identifier:          plwg8ntL/HcVZlwOlNm9T3E3/cAq+i0eXLJeZw0KqFE=
Subject key identifier:   34:AC:48:AF:6C:D7:33:07:85:AC:97:F7:C4:17:0B:F8:04:9D:BD:B4
Authority key identifier: 0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3
Certificate issuer:       /CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
Certificate serial:       019FAA8789035F954075B45064EB4A27285C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
Manifest number:          19D9
Signing time:             Tue 28 Jul 2026 21:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:36 +0000
Files and hashes:         1: 1-KiwJ7_SOfhMSL1wh3lOIzJdqf0.roa (hash: Q/Tsqdd7rd4T6xRRkiE1SIt+/mkcRs5YGJIeO2ihizo=)
                          2: DASLX4FSNcOT_qdh4H64uLv4f9M.crl (hash: lWbXKvt+RvEeX1ExFd57E+esV08ZJupqtS1dfEGuNdw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:89:03:5f:95:40:75:b4:50:64:eb:4a:27:28:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c048b5f815235c393fea761e07eb8b8bbf87fd3
        Validity
            Not Before: Jul 28 21:00:36 2026 GMT
            Not After : Jul 29 21:00:36 2026 GMT
        Subject: CN=34ac48af6cd7330785ac97f7c4170bf8049dbdb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:60:54:a0:d4:b4:71:b6:5d:c5:80:d0:df:
                    20:1c:5e:c6:f3:3b:88:36:4b:65:6d:65:13:0d:92:
                    e1:e8:e0:30:cf:5e:a9:79:fc:89:b7:3a:98:1c:e4:
                    3d:23:25:e2:cd:e7:be:0d:8b:ac:4a:40:b9:bb:76:
                    51:ef:07:51:cc:45:85:b2:14:53:48:27:03:84:e8:
                    c9:4d:2f:80:37:40:82:b3:2a:7e:c5:1d:46:fe:28:
                    4e:7b:31:a2:5d:5f:6a:38:99:2c:36:d5:85:3b:dd:
                    96:d4:20:a4:0c:2f:29:6d:23:a8:9f:be:f8:0d:b2:
                    1a:39:fe:73:52:73:57:c5:09:ef:6e:58:c1:e5:92:
                    54:c1:ed:d8:f1:01:83:2b:0b:4f:a5:b1:11:d3:4c:
                    fe:ff:9b:0c:0a:9b:c7:29:b1:ca:45:00:7d:7b:6f:
                    db:5e:b1:81:1a:c9:95:9b:6d:64:fd:e2:83:10:45:
                    95:cf:a7:db:51:33:0c:88:47:6a:be:31:95:fc:41:
                    63:8c:9f:69:04:ab:d3:4a:56:60:45:e9:86:c6:bb:
                    63:44:70:fc:30:dc:40:f1:22:64:71:51:d7:8e:a3:
                    27:76:3b:16:51:4c:96:7a:4d:82:05:cf:10:3c:c3:
                    b4:16:dc:f6:39:97:2f:93:c5:7f:89:8f:f0:9a:fc:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:AC:48:AF:6C:D7:33:07:85:AC:97:F7:C4:17:0B:F8:04:9D:BD:B4
            X509v3 Authority Key Identifier:
                keyid:0C:04:8B:5F:81:52:35:C3:93:FE:A7:61:E0:7E:B8:B8:BB:F8:7F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DASLX4FSNcOT_qdh4H64uLv4f9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/6d7c1c-8ebd-4246-83f9-5f3cc318f180/1/DASLX4FSNcOT_qdh4H64uLv4f9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:83:85:1d:a1:d1:e3:32:93:41:1e:79:9c:37:b8:cc:76:a6:
         c2:79:90:54:94:35:bf:e3:ef:78:e7:be:9b:48:2c:cb:66:e0:
         92:64:05:94:ba:42:75:a4:ad:df:3c:08:e3:c5:a1:98:7c:66:
         9a:a6:ed:32:4b:ee:4d:0c:4b:39:f0:a0:2c:a0:84:b8:8b:3f:
         e9:40:24:60:5f:55:bd:6a:0c:83:37:7c:8e:1a:b8:9d:33:e5:
         4c:f0:fb:d4:3f:45:e3:0b:9f:03:e0:87:02:77:f6:90:3b:0c:
         87:d8:38:0f:c0:3a:1b:79:d9:70:2f:07:5c:03:69:ab:25:c7:
         65:ca:86:3f:3b:45:d0:54:b9:d4:c1:4b:ac:34:d0:b3:64:a4:
         1b:87:44:3d:16:a6:a3:14:02:b3:9b:72:e1:61:51:d2:c5:20:
         82:ff:bf:b1:6a:7e:f3:93:28:06:aa:4d:dd:af:3d:e9:05:4f:
         49:3d:ed:85:06:45:2a:ae:ae:bd:75:14:b3:42:d9:2b:f6:48:
         20:91:f1:0c:b2:25:3b:51:fb:b9:69:c2:13:7d:ff:5d:e5:e3:
         a3:8b:a4:d6:14:9e:29:d3:3e:cf:e9:4e:cb:7b:93:c5:5d:8f:
         47:f5:7e:23:14:29:d1:46:25:3c:26:6c:54:4f:70:f2:a5:71:
         ba:1e:47:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:46:41 2026 by rpki-client