Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
File:                     DvgMyei0RaB_7srAr8WeQtxxAmM.mft (raw, json)
Hash identifier:          VNrDjU1QpBsxAWF5npJ9pPeC8wzjfHzYTJPd8TA6QYI=
Subject key identifier:   0A:23:B7:59:3F:B0:68:CA:40:2B:36:98:61:B4:41:35:7E:AE:DB:9B
Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Certificate issuer:       /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Certificate serial:       019FA90775B64934EAABC833B3E7DF1BD1E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
Manifest number:          0723
Signing time:             Tue 28 Jul 2026 14:01:05 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:05 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:05 +0000
Files and hashes:         1: DvgMyei0RaB_7srAr8WeQtxxAmM.crl (hash: yYoHiPPrqNfchO4qr+YrIZeD5CdXdWteYgI0ROfNmlo=)
                          2: Xm1NyxAzrsVfmOit8GLDJIUr3T4.roa (hash: FBeGZgtFYVn2jU+qekRgjUacFdjECcP1nPbLiXskECw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:75:b6:49:34:ea:ab:c8:33:b3:e7:df:1b:d1:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
        Validity
            Not Before: Jul 28 14:01:05 2026 GMT
            Not After : Jul 29 14:01:05 2026 GMT
        Subject: CN=0a23b7593fb068ca402b369861b441357eaedb9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:04:03:85:5a:72:ed:12:0a:74:cf:97:14:
                    57:b8:6c:31:52:db:ae:5b:7c:97:17:8a:b3:8e:5c:
                    6a:1f:f7:75:bd:b0:ed:38:7e:7d:7c:52:df:7c:33:
                    ff:71:13:bd:15:88:f7:70:2f:34:f9:c4:f8:7a:28:
                    ae:13:ce:60:0e:ff:1a:5a:4c:ad:3b:ee:75:83:b2:
                    01:7e:f3:10:cd:72:e1:57:b8:c6:54:8f:71:55:a3:
                    df:20:7f:64:97:c3:ec:f0:01:9c:ca:d1:ac:02:33:
                    6c:46:fb:52:61:90:0b:e1:35:65:7f:3d:7e:3a:ec:
                    cf:4a:e3:88:09:87:98:bf:60:bb:d8:6b:55:be:2c:
                    9f:46:fb:6f:4c:dc:ca:c6:2e:20:ff:f1:44:86:1a:
                    3b:46:4b:cb:ad:14:50:9b:b4:0d:98:4f:35:8b:83:
                    d5:1f:f5:74:b6:db:f0:86:99:e1:84:8c:6c:b3:8b:
                    c1:b7:df:33:15:a8:e7:6b:69:b5:3c:35:5c:f6:cb:
                    84:62:d4:a7:29:88:4e:64:fa:5d:b7:9b:0e:19:a3:
                    27:74:69:35:4c:d0:7d:76:a1:91:b7:c6:fe:da:7e:
                    a3:ec:c8:15:99:d8:a8:fe:5c:f7:96:08:e9:f9:d5:
                    41:3c:48:73:97:f3:72:02:61:4c:11:46:5b:47:04:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:23:B7:59:3F:B0:68:CA:40:2B:36:98:61:B4:41:35:7E:AE:DB:9B
            X509v3 Authority Key Identifier:
                keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6c:01:0a:a0:ec:27:33:14:9f:86:a2:2d:dd:d8:39:71:11:
         bc:b6:17:77:d1:fc:80:d9:09:27:b4:a7:f0:80:11:07:51:7f:
         21:75:7a:6e:bb:0d:14:45:00:57:b1:a9:16:b9:2f:1b:90:f4:
         6e:3a:df:9c:c5:d3:43:bb:30:17:b7:55:fa:8b:31:46:18:b4:
         9f:cb:1d:c3:4e:65:c1:02:68:bf:52:99:8b:68:53:ec:cc:4e:
         65:60:0d:23:63:14:7b:63:4c:df:63:76:55:f5:8a:1b:0c:a7:
         42:59:f5:38:42:24:10:0e:40:0c:45:10:67:00:25:0d:2f:4d:
         b8:03:59:12:16:92:1e:37:2f:b2:32:43:8a:6f:57:a9:84:9e:
         2f:0e:26:58:16:7e:ed:6b:d7:fd:5f:a1:4a:e3:52:54:3b:00:
         54:52:14:06:00:47:af:3b:3d:98:00:c7:34:c1:a0:2b:8e:95:
         98:57:1b:d2:d9:a9:6c:b3:fc:74:54:4d:87:3e:94:00:a0:8b:
         ca:b9:25:d9:c2:d6:24:9a:ad:f0:50:f0:86:c7:13:6c:a1:3a:
         eb:4d:99:38:db:0d:8d:21:2c:3d:66:d2:53:61:bd:04:29:25:
         4a:21:23:d1:ec:d9:c1:d9:95:59:3f:c0:3b:1c:c1:f3:43:fb:
         15:4d:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:18:44 2026 by rpki-client