Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
File:                     DjagX652BpH3DPtbT2JJlHq63oc.mft (raw, json)
Hash identifier:          /HHwnMoNV5oYTBJmHI9jDraDb0UrD7ixgO22cBSRm44=
Subject key identifier:   4E:01:3C:0B:0D:2A:C3:23:67:6E:35:4B:FE:0B:BB:9A:0B:5C:F7:22
Authority key identifier: 0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87
Certificate issuer:       /CN=0e36a05fae760691f70cfb5b4f6249947abade87
Certificate serial:       019FA9ABC2D3E165485859B7962FCCC0BCFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 17:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:33 +0000
Files and hashes:         1: DjagX652BpH3DPtbT2JJlHq63oc.crl (hash: gIh7PDMEwonyMbxJnXvugrH5vtZ9IJLlOhosE+wfEVU=)
                          2: GBiCQBi8m4-enxXZqw25PlMWPLQ.roa (hash: gTvW1OlNiz8hjMHgTUjrVGo7tVYa1kNXNiD2T8nmxFU=)
                          3: _j5362r7qv_9JgdkjeZ2Dr4Qsuk.roa (hash: XaswjrTxz0kpjxbDPMGjQHSDzCAPii9RYq3exV8GmFk=)
                          4: aezv-rxn8SkJT7jOMF8hl_lwOeo.roa (hash: jv2UN7Qe0W1KSoZ0p/rqmZ5wT1beFaF7g2jYyXMocTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:c2:d3:e1:65:48:58:59:b7:96:2f:cc:c0:bc:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e36a05fae760691f70cfb5b4f6249947abade87
        Validity
            Not Before: Jul 28 17:00:33 2026 GMT
            Not After : Jul 29 17:00:33 2026 GMT
        Subject: CN=4e013c0b0d2ac323676e354bfe0bbb9a0b5cf722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d6:28:48:e4:70:05:e1:36:8f:68:cb:21:40:
                    4c:eb:ec:be:21:a7:b0:82:92:89:1c:17:75:e0:ab:
                    bf:cb:06:fe:ff:bb:34:8b:b4:2e:3b:81:b0:0f:79:
                    58:45:5c:63:09:17:b6:67:d3:37:64:f4:54:14:a2:
                    84:88:1c:7d:f1:a1:1d:b7:1f:00:18:e8:dd:18:92:
                    3c:9d:32:6a:41:0d:fa:e9:97:4a:8f:41:41:7d:1e:
                    bb:a7:c8:bd:9f:54:41:54:3b:8e:9c:1f:67:0f:74:
                    dc:17:f7:19:50:01:b7:f1:be:0f:cc:b8:8b:14:50:
                    c0:93:84:93:62:d8:b8:87:c2:f7:d6:b9:77:fc:da:
                    3b:0d:2f:f5:3f:9f:5d:b9:23:fc:e3:3f:ad:a9:55:
                    54:24:69:29:b1:9b:51:75:c6:48:76:8e:18:7e:49:
                    f6:a0:6d:c1:fa:01:ea:0f:f2:46:ae:ba:c5:97:b2:
                    73:86:55:e5:d9:bf:f3:52:d0:1e:c3:09:5f:6e:ca:
                    8b:7e:3e:d2:e0:61:11:71:67:ec:2c:05:3a:64:f9:
                    36:15:57:81:28:20:c2:1c:6b:89:be:51:bb:89:09:
                    a6:f6:b1:85:6e:da:81:8c:73:a8:02:2d:ea:54:f5:
                    db:98:7d:27:f1:4e:d9:41:14:36:fe:99:15:96:42:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:01:3C:0B:0D:2A:C3:23:67:6E:35:4B:FE:0B:BB:9A:0B:5C:F7:22
            X509v3 Authority Key Identifier:
                keyid:0E:36:A0:5F:AE:76:06:91:F7:0C:FB:5B:4F:62:49:94:7A:BA:DE:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjagX652BpH3DPtbT2JJlHq63oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/735d37-391a-4aa2-ac83-0b36ac8e23c7/1/DjagX652BpH3DPtbT2JJlHq63oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:13:af:c7:40:1a:7a:8f:01:fe:ee:be:f6:a5:28:00:21:7e:
         7f:57:89:87:d3:ea:19:e6:73:fc:4b:2f:bb:30:a6:09:e3:3b:
         1a:cd:bc:be:e1:97:dd:01:e7:9f:6d:25:7a:5f:4c:42:1b:a1:
         66:45:4d:bd:51:8e:df:a7:b9:5d:f9:3f:d5:67:61:fb:a8:f9:
         6b:41:00:9d:53:b1:e5:d6:76:35:2e:f1:f9:d0:07:4c:18:73:
         bb:28:61:77:31:6b:9b:fa:77:76:77:1d:d0:c5:aa:68:34:38:
         29:59:49:e8:92:8e:bd:35:86:5d:53:74:b0:f8:1f:5f:d1:9e:
         5a:72:30:3b:13:34:3f:a3:b2:58:c9:ac:27:71:2a:ba:5f:ff:
         84:0d:73:83:51:10:14:0d:fd:f9:d2:63:bb:22:a1:f1:3f:ec:
         92:a9:5d:da:8b:96:79:ae:08:64:68:77:ff:5e:f9:50:35:b0:
         d8:1a:26:92:6f:44:bc:b0:5f:5b:10:e6:d2:e1:0f:ed:9f:9e:
         74:2d:01:5f:f7:30:14:2d:d3:33:60:c0:8a:8f:8e:68:83:60:
         7c:14:c9:c5:6e:79:03:34:da:a7:f9:1e:53:55:48:56:ff:89:
         32:de:19:09:07:cf:c4:c8:5d:5d:9c:6e:cb:52:eb:f6:97:05:
         c2:43:95:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:40:26 2026 by rpki-client