Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File:                     DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier:          Voh9hvSkvDHKj5BVQ3irmgdKY9EOzlUDa//wB+eBFso=
Subject key identifier:   63:72:5E:C7:FA:65:35:D3:46:F1:A9:B8:D2:E6:69:09:16:CC:29:71
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer:       /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial:       019EBF238D7428BB73DD11C488341EC4EE90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number:          07A5
Signing time:             Sat 13 Jun 2026 04:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:38 +0000
Files and hashes:         1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: sJZWlsUW/fCQTkUmjrDkfRQTxXGqc1e5sPYt61Y0exs=)
                          2: c437ZNmHK-X0W4HjrhQoFz8sC0k.roa (hash: OO5X7dolAlKIdBk6pdoOqhkso/69x43tE+00VUmgi4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:8d:74:28:bb:73:dd:11:c4:88:34:1e:c4:ee:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
        Validity
            Not Before: Jun 13 04:00:38 2026 GMT
            Not After : Jun 14 04:00:38 2026 GMT
        Subject: CN=63725ec7fa6535d346f1a9b8d2e6690916cc2971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:8d:0f:76:bf:a8:56:df:84:b8:de:5c:c9:
                    5c:38:af:4a:3a:7a:b8:a0:0c:5c:c0:fc:14:c6:ec:
                    67:05:13:e7:9f:44:34:d6:a5:27:27:65:03:46:aa:
                    36:3e:9e:c1:08:f7:32:2f:31:f6:9d:a8:9c:0e:57:
                    55:2e:85:42:b4:06:95:50:2f:cd:3d:7c:b6:42:57:
                    4b:f7:28:bc:f0:4c:aa:24:96:26:36:7c:a3:28:92:
                    6e:0c:25:15:b6:6b:7e:00:1b:73:4d:1f:37:e6:de:
                    8b:66:71:85:e7:73:b3:67:be:fa:3f:07:2e:e1:60:
                    79:c0:ae:88:a1:4d:c6:d5:c9:15:9f:f5:0d:b9:3b:
                    7b:2c:a6:67:c0:ee:b6:b2:51:e2:ad:58:57:f1:40:
                    c6:3e:49:82:5b:5d:b9:07:38:64:16:26:4e:7c:48:
                    35:eb:3f:8a:81:83:3e:47:60:75:ba:00:7c:c7:a8:
                    35:ee:f6:b8:0c:eb:92:c7:29:fa:72:d3:74:3d:63:
                    ef:63:8b:b8:75:dc:59:3c:38:1f:32:32:59:d6:b8:
                    64:d8:17:d1:24:6c:03:bb:d5:9c:98:b0:aa:74:2b:
                    7b:76:e2:34:0f:fa:03:6d:cc:73:c3:88:47:b7:71:
                    b6:d4:5c:a6:0e:c9:7a:20:d6:58:34:b4:0d:90:a1:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:72:5E:C7:FA:65:35:D3:46:F1:A9:B8:D2:E6:69:09:16:CC:29:71
            X509v3 Authority Key Identifier:
                keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ad:46:06:bd:aa:7b:d4:5d:e4:fa:91:a3:d0:fa:50:5e:32:
         91:bb:c3:55:bb:f6:e7:e0:33:9f:98:5e:72:83:79:01:da:a6:
         58:09:35:cf:ed:b0:43:4e:08:33:e0:26:83:32:a5:bf:d6:5f:
         2d:7a:50:f3:b4:f7:ea:8b:e2:1d:17:05:33:0c:48:c4:59:f3:
         e8:cf:bc:ac:d9:bf:2a:b1:85:e1:6c:d5:78:70:15:36:e4:2d:
         e3:ea:a4:25:61:f1:70:b8:d0:32:4e:e6:eb:af:a0:61:b3:e7:
         67:06:fa:e0:11:95:c4:27:b5:82:ca:cf:ef:ab:1e:7b:ac:ce:
         f9:5b:81:ef:be:19:14:de:07:f8:f7:c3:76:db:64:80:cb:e6:
         7e:91:13:4a:4c:3a:b3:8b:dd:73:89:bc:b1:6d:f1:89:61:20:
         c4:af:8d:c7:d4:37:a4:a4:61:24:bf:cc:80:c0:9a:f6:70:b3:
         a1:4a:d4:50:85:64:5b:74:1b:83:4f:7e:86:76:86:75:cb:05:
         f7:3e:25:48:dd:2c:43:6c:cf:25:35:f9:d3:d6:73:04:8f:77:
         74:c5:ed:d9:04:ea:5c:a9:da:3d:0f:55:fe:1a:5d:65:7e:28:
         a1:e9:d9:c6:05:61:c3:bb:bd:37:15:4c:a0:4f:f8:36:45:c7:
         cc:83:ca:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:59:49 2026 by rpki-client