Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
File:                     DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json)
Hash identifier:          rC+KOjBMc7tsPAdNJgkpZ95DMiXIaIb2MvLwrm6MI7Y=
Subject key identifier:   CC:7B:68:80:AA:59:7E:CF:E2:EB:BC:1D:77:B8:79:57:43:96:AA:74
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Certificate issuer:       /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial:       019EBE7F6C2F14E5A90E3774CE1B43A115E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
Manifest number:          0CB3
Signing time:             Sat 13 Jun 2026 01:01:22 +0000
Manifest this update:     Sat 13 Jun 2026 01:01:22 +0000
Manifest next update:     Sun 14 Jun 2026 01:01:22 +0000
Files and hashes:         1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=)
                          2: 6WWr83TSCDVC54Q6T3lJdNTzhec.roa (hash: bqOXRmyjRmssTC0gEpcTMmCXeTubysghN9/RhsWfZ2I=)
                          3: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: D4WjKOjDBQdSYxvd6yz3RJjUPIp4ecROQsQe3O0MIHY=)
                          4: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=)
                          5: OuOWwWJQka3OidmzTsZ2WEViaC8.roa (hash: bWWJtVeUfjaGHDqLK+RYfHKOfYGUjZcMVA7WDR7akBo=)
                          6: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=)
                          7: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=)
                          8: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=)
                          9: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=)
                          10: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=)
                          11: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=)
                          12: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=)
                          13: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=)
                          14: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=)
                          15: n24rpKw-gK2As8dq1f65xDlyLmg.roa (hash: 7YG0l5UwcmGtwI4tXmm6RQMgPqe0InES4/ba+ypR3Fk=)
                          16: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=)
                          17: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:7f:6c:2f:14:e5:a9:0e:37:74:ce:1b:43:a1:15:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
        Validity
            Not Before: Jun 13 01:01:22 2026 GMT
            Not After : Jun 14 01:01:22 2026 GMT
        Subject: CN=cc7b6880aa597ecfe2ebbc1d77b879574396aa74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e9:c9:b3:8a:33:65:a0:55:a9:fc:ae:71:9d:
                    17:ba:31:7e:bf:d3:c8:11:fe:ba:be:2e:0f:2c:fe:
                    c1:3e:d9:db:e0:39:e3:5f:4f:8c:62:14:b8:43:de:
                    bb:f9:c7:24:74:1a:dc:74:80:c8:81:f8:1b:88:03:
                    b8:b2:63:21:e8:dc:67:da:a6:f5:3c:73:3e:57:4d:
                    3b:6f:13:b8:c8:6f:ab:bd:75:84:1c:5b:ee:3d:3d:
                    e2:a7:80:fd:80:d2:af:00:b3:04:b6:46:21:54:f3:
                    ca:ca:b3:4e:9b:44:49:10:46:32:ad:17:0e:02:ca:
                    29:bf:c1:ce:bd:51:16:c9:53:59:9d:ca:e6:cd:29:
                    6e:db:b2:59:31:e5:2e:6f:75:5e:2a:ca:b0:12:7f:
                    e9:bc:4a:ad:f6:b8:af:d1:03:db:20:ba:ce:47:1b:
                    2e:cd:4e:ca:ee:ae:9d:6c:a1:dd:8e:4f:0f:f1:42:
                    c2:d9:6f:df:68:b3:29:e6:77:08:97:2a:22:fb:91:
                    de:a8:15:1b:63:20:9a:ca:67:d5:c6:ee:1b:41:2b:
                    b3:b3:d1:45:04:f3:50:3a:da:67:76:d0:a0:cb:78:
                    17:c7:b4:ab:b7:0b:d6:f3:04:e3:10:1b:27:9f:ba:
                    1b:cf:44:85:f3:30:1b:04:40:a3:a6:87:7c:12:13:
                    a2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7B:68:80:AA:59:7E:CF:E2:EB:BC:1D:77:B8:79:57:43:96:AA:74
            X509v3 Authority Key Identifier:
                keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b1:15:2b:47:34:2e:31:28:40:21:66:63:77:d1:2e:10:40:
         fb:81:12:67:7d:fc:cc:7b:c1:02:be:86:9b:39:73:3f:e7:bf:
         67:f3:3d:b3:b9:5b:ab:67:5e:70:cc:9a:6d:58:e8:d1:28:32:
         ce:55:8f:81:3e:8b:8b:6e:61:06:0b:ea:45:1e:4e:a9:e8:ec:
         34:88:b6:53:c7:ac:1f:66:ed:ed:cb:60:a9:fd:8e:60:e0:01:
         b3:00:b2:65:57:1a:07:77:7e:be:a9:98:d3:30:69:ee:5b:54:
         7e:80:4c:a6:dc:58:46:47:82:f9:1a:f1:36:b9:af:cf:0c:7c:
         93:9c:20:a0:d8:5b:40:cd:e7:0e:da:05:f6:6d:93:d8:e2:f2:
         c1:bc:ec:bd:7d:fe:e4:48:8d:ed:0a:c6:71:ca:28:70:50:f4:
         53:d7:25:d4:cd:4a:41:e6:a4:3d:79:03:51:27:56:6f:54:45:
         56:32:74:43:3e:f7:6e:60:f4:e2:ab:70:57:5e:b8:ab:14:1e:
         c8:45:30:0f:86:61:30:a6:2d:83:66:3d:ba:2d:35:19:1d:17:
         8d:1b:9d:d5:a1:36:17:d8:9d:57:ef:18:7f:8f:13:9c:43:46:
         40:45:7f:a7:87:7c:97:5b:4b:3f:53:22:e7:ed:9d:97:e2:15:
         78:d0:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:54:56 2026 by rpki-client