Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
File:                     DVNi1c7cImPJBzUDwu6RT5PzHvI.mft (raw, json)
Hash identifier:          fMtuzjJe5EEUHQpQdhEi8KXxdHDi02moJPUZVTh83aI=
Subject key identifier:   F8:06:4B:B1:94:5C:6E:F7:99:4B:95:9B:20:E4:52:41:60:08:D2:40
Authority key identifier: 0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
Certificate issuer:       /CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Certificate serial:       01A0C858D7D5954A18B4E5DD2CCB6A1F9FED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
Manifest number:          E1
Signing time:             Tue 22 Sep 2026 09:01:00 +0000
Manifest this update:     Tue 22 Sep 2026 09:01:00 +0000
Manifest next update:     Wed 23 Sep 2026 09:01:00 +0000
Files and hashes:         1: 3vLigIAmr0enEPBVbFd-Efg6QLM.roa (hash: z47OAtBU59ox9Fv71R6UjtJxoV/Msptr2wMI8Rk4Vlc=)
                          2: DVNi1c7cImPJBzUDwu6RT5PzHvI.crl (hash: GYFd/TE/LyQKTb6jxGtbWCrk/VBYTIyXtgl3spDilWA=)
                          3: w82F-_2KUo6780OReWbrcXFgOCI.roa (hash: 2sFKVV9OfbJAOCqpzaEbs0k2EluCBWR6KS26tdOE0SQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:d7:d5:95:4a:18:b4:e5:dd:2c:cb:6a:1f:9f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
        Validity
            Not Before: Sep 22 09:01:00 2026 GMT
            Not After : Sep 23 09:01:00 2026 GMT
        Subject: CN=f8064bb1945c6ef7994b959b20e452416008d240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8f:17:33:9e:82:82:c4:9e:f4:f5:35:b6:d2:
                    27:cb:c9:dd:b7:00:10:93:a2:99:c2:63:aa:01:00:
                    48:b9:16:a7:1a:98:71:89:b9:ef:ab:03:d8:34:ce:
                    20:3c:1d:75:0b:ea:ee:90:bd:22:64:23:75:69:96:
                    6c:d6:28:f7:32:92:0c:cf:9e:d1:37:eb:ee:41:9e:
                    6d:3f:34:0e:16:c4:e8:63:c2:fe:42:0b:29:b7:03:
                    e5:cb:4a:95:3a:22:3e:a0:41:df:e9:e7:87:5c:75:
                    c6:9c:64:08:31:1b:e0:2a:3a:32:7b:70:13:7d:a2:
                    9b:40:78:90:94:36:31:f0:5c:98:a4:ff:75:b7:c7:
                    14:cd:85:37:0e:c4:88:37:d7:7e:8d:c3:e4:ef:ed:
                    0e:eb:06:86:f9:e7:f5:f6:36:42:4a:6c:70:5b:02:
                    f9:80:6b:39:74:56:1a:6b:5a:0f:9c:30:5c:b7:3c:
                    3f:dd:20:6c:2a:fb:85:b9:ba:7b:a4:7d:6e:8f:3e:
                    b5:c6:a0:19:d6:85:43:35:10:ca:55:40:ae:4e:ff:
                    a9:ef:b0:49:72:7c:6b:ef:a3:ca:2c:c6:80:63:b0:
                    2e:35:f6:2a:c8:e3:9c:5a:bc:8e:e6:ad:03:54:04:
                    6f:77:d8:c7:70:51:f2:6e:ec:f2:8f:c0:c2:5f:1d:
                    f6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:06:4B:B1:94:5C:6E:F7:99:4B:95:9B:20:E4:52:41:60:08:D2:40
            X509v3 Authority Key Identifier:
                keyid:0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:b6:b6:47:c5:63:d7:8b:fb:8c:2d:8e:48:1a:46:ba:6a:17:
         bc:25:ee:d4:65:0a:0d:35:fa:8c:a9:f0:a2:7c:0a:11:4e:ff:
         6e:49:eb:23:0f:cd:79:c8:cf:70:be:ba:c4:b5:e3:05:b9:62:
         d6:59:18:e9:37:43:d6:78:c6:d9:53:99:9d:9c:79:25:b1:77:
         9f:a0:b2:86:e2:50:0c:da:9d:6a:f3:48:42:c9:52:58:66:6e:
         da:c7:4a:94:29:7b:9d:5c:de:a0:44:3f:59:dd:40:99:ef:fe:
         53:56:6b:5b:e6:e6:09:2a:b7:80:9b:fd:2e:b6:c5:e3:0e:57:
         d2:49:3b:26:fd:2a:81:16:21:34:4d:a4:68:1b:6a:f1:02:8e:
         50:7d:7b:f5:a1:a5:a2:eb:d3:8b:75:a6:dc:9f:b5:3a:77:fb:
         db:75:1a:ba:8b:6e:77:99:1e:dc:e9:57:9a:c8:3d:94:0f:61:
         d8:f9:b6:23:29:72:51:7b:0b:f9:e6:94:42:90:bc:04:ec:8f:
         da:45:03:a1:0a:41:37:22:20:fe:db:64:de:24:ae:1a:22:33:
         aa:e6:0c:19:0d:4a:3f:76:a5:f9:c9:d9:3e:74:ea:75:e6:69:
         d3:c5:47:d6:e1:0b:ec:ce:11:94:d3:f0:75:eb:01:49:2a:ee:
         57:99:57:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:59:50 2026 by rpki-client