Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File:                     DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier:          j8nwHv7KRikjXFkOYAgwEau8AlU2nT2xMS8G985+25c=
Subject key identifier:   51:F9:E1:60:E0:45:65:EC:61:BE:56:C0:32:E7:74:0B:CC:5B:9F:BC
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer:       /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial:       019D999926C18C27B6574BB651C1BCDDD44F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number:          070D
Signing time:             Fri 17 Apr 2026 04:00:44 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:44 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:44 +0000
Files and hashes:         1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: nznBp3gRJg8LtoxSqiUAQlJwW2cqVcDJNZYMMXVPO1E=)
                          2: c437ZNmHK-X0W4HjrhQoFz8sC0k.roa (hash: OO5X7dolAlKIdBk6pdoOqhkso/69x43tE+00VUmgi4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:26:c1:8c:27:b6:57:4b:b6:51:c1:bc:dd:d4:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
        Validity
            Not Before: Apr 17 04:00:44 2026 GMT
            Not After : Apr 18 04:00:44 2026 GMT
        Subject: CN=51f9e160e04565ec61be56c032e7740bcc5b9fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:70:2c:37:3a:5f:bd:ba:ca:6e:4e:32:b4:99:
                    7a:ab:c9:32:9c:05:c4:c3:b2:11:3f:cb:a1:86:b5:
                    3d:1a:cf:ee:e3:2e:b8:e2:0c:70:6b:a7:63:50:c9:
                    07:1e:2b:3f:2b:9f:14:99:68:bf:6d:34:57:1f:98:
                    3f:a8:20:b3:2d:52:67:83:a3:e8:fd:28:c7:9e:a4:
                    a2:cb:31:68:a1:21:25:d8:4d:ef:0b:24:7b:10:49:
                    98:10:59:31:8a:8c:d4:92:6f:6d:12:28:02:3e:9e:
                    1d:73:e7:3e:1f:fe:52:34:c3:74:7b:3b:40:cf:2a:
                    16:06:38:27:21:bb:6f:60:aa:ba:11:33:42:68:69:
                    e7:dc:a7:52:27:be:96:4b:6b:9a:2f:79:ee:94:79:
                    5d:08:cc:54:02:19:fd:19:02:4a:9d:9b:24:f4:4b:
                    c3:93:84:5d:2e:2c:53:a1:4c:cc:9b:bc:fe:cc:2a:
                    b8:b7:5c:1c:dd:13:31:8c:d0:42:6c:17:e2:cc:e9:
                    12:f6:60:f0:a2:83:ce:ad:ed:4b:35:28:bf:26:a4:
                    b2:d7:ef:b7:6c:3d:cf:82:6e:71:6f:c5:7c:61:a2:
                    d1:a9:32:ed:16:31:a2:38:14:19:a3:08:31:a7:e2:
                    14:da:e1:01:81:38:83:b4:18:21:5f:49:76:17:c6:
                    e7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F9:E1:60:E0:45:65:EC:61:BE:56:C0:32:E7:74:0B:CC:5B:9F:BC
            X509v3 Authority Key Identifier:
                keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:65:40:a1:12:4f:ca:11:ae:0a:94:ab:2f:b9:c8:cf:d3:db:
         e2:68:ae:d5:e8:69:37:85:0d:93:29:00:ed:f1:04:a9:a5:d2:
         b9:a9:01:b0:36:d6:03:c5:75:2a:7a:25:98:b6:57:40:06:2a:
         5e:c5:1f:4e:c8:d6:4d:69:09:3b:dc:46:1e:fa:ac:73:eb:72:
         06:8c:1b:6c:35:c2:31:6d:29:3e:47:78:15:36:6a:42:2b:27:
         68:ab:f5:0f:f4:c4:01:79:ad:7e:46:67:fd:80:6e:ce:95:03:
         b7:a1:95:21:bb:cb:04:3b:fe:b1:a1:a1:c1:b3:35:2c:27:a9:
         6c:86:35:0c:40:ab:5d:60:d1:8d:ee:89:37:da:8a:c7:7e:1f:
         4d:e8:46:a9:b6:82:a0:13:9f:7e:16:69:5b:cd:5d:ab:8c:01:
         9a:a5:4c:f0:ce:80:e4:61:6c:5a:28:e8:7e:4c:c7:2e:84:09:
         e5:65:f2:25:12:93:ba:4a:46:f5:f3:a7:86:7c:b2:c0:40:ed:
         48:02:57:78:68:9b:7c:47:59:4f:23:ae:cc:89:24:52:1f:8c:
         c7:63:a2:2d:0d:67:49:84:4c:3d:ce:08:f9:55:71:3e:ad:c7:
         c3:1b:c0:75:36:c1:c3:15:c7:8e:9c:8d:08:3b:04:6c:95:51:
         97:18:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:24 2026 by rpki-client