Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
File:                     DFLdBfaKoaMkrVvBJHbFuaYevAA.mft (raw, json)
Hash identifier:          /dIzzLDoqaxrAk3n5kWX+SenJzc6XRHc7KRnwgyvVN0=
Subject key identifier:   4C:3F:7F:F8:FF:1A:74:F7:36:39:9A:32:99:8A:84:2B:F6:3D:59:5E
Authority key identifier: 0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00
Certificate issuer:       /CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
Certificate serial:       019ED3189EEB4FCCBE026BFB1B1235542197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
Manifest number:          04B1
Signing time:             Wed 17 Jun 2026 01:01:06 +0000
Manifest this update:     Wed 17 Jun 2026 01:01:06 +0000
Manifest next update:     Thu 18 Jun 2026 01:01:06 +0000
Files and hashes:         1: DFLdBfaKoaMkrVvBJHbFuaYevAA.crl (hash: lEuGHves5SD6AKs4KMxaMa4WkblByVMnXdAzjEz0FaA=)
                          2: SlA5tSP0JsNUjyJD0_sJwHDnin4.roa (hash: bKdVeFE4Poy+cUlHJCjz5CZJ/t5ehlZqsw1uXknJEjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:18:9e:eb:4f:cc:be:02:6b:fb:1b:12:35:54:21:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c52dd05f68aa1a324ad5bc12476c5b9a61ebc00
        Validity
            Not Before: Jun 17 01:01:06 2026 GMT
            Not After : Jun 18 01:01:06 2026 GMT
        Subject: CN=4c3f7ff8ff1a74f736399a32998a842bf63d595e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b9:22:83:58:d8:25:19:40:7c:1d:33:88:b9:
                    7a:81:4b:a9:b4:d3:87:7b:c0:a2:64:33:16:57:4f:
                    88:38:64:0b:d3:68:18:ea:c6:7c:75:86:51:56:ca:
                    4f:04:bf:56:0e:70:18:57:d0:96:94:2e:22:87:6d:
                    a8:df:32:e8:39:ce:ab:f3:4c:dc:c9:34:f3:d2:44:
                    6d:18:4d:ef:2e:1d:ea:80:5a:f0:10:d3:b2:48:af:
                    a4:7d:81:73:da:27:ce:e5:fe:f3:4f:69:d3:09:35:
                    ad:7e:87:d7:d4:18:da:ed:fb:1b:5d:65:28:ed:da:
                    56:6f:d2:33:45:04:6d:9a:01:1b:b2:57:35:39:c1:
                    bf:56:8b:95:2f:91:a3:b9:05:09:d3:df:32:f8:95:
                    d7:70:b0:7f:fd:b7:9d:b4:46:42:dd:55:d3:16:bf:
                    4f:48:e7:12:ae:59:08:06:9f:37:c5:f3:90:a3:74:
                    8c:87:5a:c1:e5:bc:02:06:68:16:17:e1:50:87:30:
                    3c:29:bf:bd:08:c5:60:c2:59:4c:21:44:89:14:aa:
                    f0:70:88:8c:24:a2:03:2f:b8:c4:7b:28:02:10:ee:
                    77:53:46:0b:07:88:36:8c:cf:ba:26:8a:97:c0:fa:
                    77:29:c4:31:64:67:c4:eb:9b:b0:15:c3:54:3b:f8:
                    f3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3F:7F:F8:FF:1A:74:F7:36:39:9A:32:99:8A:84:2B:F6:3D:59:5E
            X509v3 Authority Key Identifier:
                keyid:0C:52:DD:05:F6:8A:A1:A3:24:AD:5B:C1:24:76:C5:B9:A6:1E:BC:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFLdBfaKoaMkrVvBJHbFuaYevAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1b4e57-5eb4-4b9d-bc26-70749e7a4d94/1/DFLdBfaKoaMkrVvBJHbFuaYevAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:b1:63:5c:44:88:d5:6d:09:93:0d:ba:4b:84:42:25:29:d0:
         3a:11:87:40:6e:ce:1f:6c:91:35:20:a2:b4:a5:a6:c3:e8:5e:
         09:6e:41:d2:52:dc:b5:3f:8f:31:77:42:83:6f:4e:86:c7:f4:
         cd:83:70:b5:84:ae:e5:5d:f4:10:cf:bd:11:37:4b:8a:f4:10:
         8b:4c:b9:41:7e:e0:67:3b:80:89:f0:9a:c4:62:08:26:94:11:
         3f:a2:18:36:21:5d:26:f4:9a:93:1e:27:7b:ee:e8:2a:93:6d:
         e6:3e:9f:45:fa:71:36:16:60:4f:7d:71:79:ce:e7:8a:3d:ef:
         e1:98:b3:f5:56:7b:ac:39:bd:62:1f:60:76:1a:3c:b6:ed:50:
         d2:e2:73:ac:fa:b3:10:59:07:37:95:4a:8d:d1:5c:b8:61:73:
         28:d6:91:22:83:2d:8b:98:40:9f:da:1f:58:2b:6a:06:06:19:
         4b:7d:a2:ce:eb:56:eb:5f:41:ec:00:04:4d:05:1a:c9:3e:9c:
         eb:e1:56:5f:4d:40:77:57:a5:75:0a:86:ab:9a:a4:01:a5:0c:
         7f:67:a3:ed:66:81:9b:9b:b4:8b:25:8c:b5:10:40:fb:35:74:
         f5:c2:77:db:18:02:68:1a:47:37:42:70:d4:bd:0c:b7:bd:f9:
         95:2b:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:48:17 2026 by rpki-client