Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
File:                     28rKr4rBOpZKs9Rhk1hByOHJO4A.mft (raw, json)
Hash identifier:          4lTG48mUqFtl5/26ozc4yy3xoMYxKMnW07xdj6uqNhc=
Subject key identifier:   E1:D2:91:C2:AB:A2:9D:E0:CB:92:F3:8F:CD:8E:5C:5B:4B:17:04:2D
Authority key identifier: DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80
Certificate issuer:       /CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
Certificate serial:       019EBE48314994EA302CEF3B8A1F5BCDDB61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
Manifest number:          195A
Signing time:             Sat 13 Jun 2026 00:01:02 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:02 +0000
Manifest next update:     Sun 14 Jun 2026 00:01:02 +0000
Files and hashes:         1: 28rKr4rBOpZKs9Rhk1hByOHJO4A.crl (hash: D/xixYyw8v7iYlsSRn24C3YW6++eh2DiOmVoCmaZcyo=)
                          2: 7P-BWi-f3LglYNhsYLkhHyuFgak.roa (hash: 3XsWUR6dZLjAmN/rCOKI/7RzPiod/YP2TrC/UpajbOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 00:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:48:31:49:94:ea:30:2c:ef:3b:8a:1f:5b:cd:db:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbcacaaf8ac13a964ab3d461935841c8e1c93b80
        Validity
            Not Before: Jun 13 00:01:02 2026 GMT
            Not After : Jun 14 00:01:02 2026 GMT
        Subject: CN=e1d291c2aba29de0cb92f38fcd8e5c5b4b17042d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:46:85:8d:c3:6e:6a:a7:af:07:53:23:24:e5:
                    ce:12:de:d9:ed:1e:df:6e:c6:fe:cb:2f:ea:d5:88:
                    65:9d:15:bf:cb:ab:89:69:7d:d2:28:0e:bb:5c:54:
                    9e:3c:13:cb:0b:6a:46:25:12:52:62:b8:f3:bd:27:
                    64:10:0c:b5:cb:42:20:cd:ce:ee:24:16:8c:a8:42:
                    dd:d5:b3:5b:74:bf:02:9a:ed:be:90:24:43:6f:b4:
                    73:e8:bc:4a:e1:b5:64:d6:19:02:da:c8:42:3d:32:
                    9d:1c:84:44:8a:6a:e8:ed:76:bd:ec:90:b8:ab:3a:
                    92:57:92:cc:b0:1a:b5:b1:ec:a7:d5:9d:19:d5:61:
                    17:a9:97:84:b2:8f:ee:cc:32:c5:21:92:58:c0:3b:
                    9f:44:4c:d4:49:89:bb:e6:f2:61:54:a3:f4:1c:dc:
                    2c:03:d4:fb:ac:b6:17:95:f5:dd:c8:4e:e0:b2:f6:
                    a1:0f:9e:d6:32:2c:0a:4b:dd:c2:90:e5:ab:36:b7:
                    bd:58:a5:86:b0:ef:4b:aa:28:d9:74:78:ae:65:e4:
                    7f:f3:c7:47:51:6b:08:54:59:85:43:89:d9:cf:c0:
                    e3:b5:56:1c:78:5b:b5:df:7b:c7:3f:7e:3d:f5:99:
                    32:2f:6f:d7:1a:e8:b1:33:8c:0f:9d:de:bd:05:88:
                    00:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D2:91:C2:AB:A2:9D:E0:CB:92:F3:8F:CD:8E:5C:5B:4B:17:04:2D
            X509v3 Authority Key Identifier:
                keyid:DB:CA:CA:AF:8A:C1:3A:96:4A:B3:D4:61:93:58:41:C8:E1:C9:3B:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28rKr4rBOpZKs9Rhk1hByOHJO4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5737b0-bb24-4e92-b19d-5e65c7d61b9e/1/28rKr4rBOpZKs9Rhk1hByOHJO4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:bb:3c:d0:7f:ce:47:bc:58:90:ff:b9:8d:e5:f1:33:39:14:
         81:b9:90:15:09:2c:42:2a:22:cc:47:7d:88:1c:5e:a7:2d:bf:
         aa:c9:78:f7:0d:77:c4:a4:6b:77:9c:8b:8a:e2:b9:d6:e9:95:
         a1:a8:4e:bb:64:3b:d6:10:51:3a:3c:7e:3c:7a:bc:e3:5c:bf:
         40:04:c4:6d:df:15:e5:56:0c:6c:db:11:15:77:9b:b3:02:3d:
         7d:db:24:aa:a8:50:97:ce:69:03:40:04:b4:3b:bb:18:81:f2:
         68:82:5d:97:af:46:6a:4c:3e:15:ea:44:70:8f:01:59:cd:62:
         29:68:14:a3:89:0d:de:16:37:29:be:c5:04:de:47:12:19:f4:
         90:b1:61:2d:26:e1:27:ea:14:a4:72:4e:3a:e9:ff:91:2a:7c:
         04:db:71:9d:ef:47:af:d9:d2:10:02:46:5e:f8:3e:6f:18:00:
         40:44:a3:cc:68:69:65:2e:b9:ec:1e:8a:b5:47:10:c1:29:25:
         db:2f:f3:dd:18:52:15:70:13:34:cf:fa:5b:3c:5c:a8:1f:df:
         43:db:02:df:43:8c:b0:c2:2c:0c:8c:3e:63:7a:24:0d:9b:1c:
         39:91:62:42:ab:9e:a0:18:42:d3:f9:8f:75:d6:f1:b0:8d:2e:
         44:cb:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:06 2026 by rpki-client