Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
File:                     DpFsLKNrUAlu4v5EuUUpwto8PsI.mft (raw, json)
Hash identifier:          S0CYGC0Zd0GdQyhFaWwipHamLPBZm9MmeNCzub/5By0=
Subject key identifier:   A0:4B:75:BB:7B:07:CC:89:12:F2:84:9A:DD:15:00:32:38:10:6F:70
Authority key identifier: 0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
Certificate issuer:       /CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Certificate serial:       019ED42BFA809C086B433C11A9367BB658CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
Manifest number:          06EB
Signing time:             Wed 17 Jun 2026 06:01:52 +0000
Manifest this update:     Wed 17 Jun 2026 06:01:52 +0000
Manifest next update:     Thu 18 Jun 2026 06:01:52 +0000
Files and hashes:         1: 4Et2FEuVd4yMRqu4nNmNFk3gGwQ.roa (hash: jjoiLF44l4+yah2U1/vSTzToVAf877+4InBXrM7HTBw=)
                          2: DpFsLKNrUAlu4v5EuUUpwto8PsI.crl (hash: H3hrv22rxxYcRqI8gq1GfZ+gPvp4SxJ5ykeYBCRHBOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d4:2b:fa:80:9c:08:6b:43:3c:11:a9:36:7b:b6:58:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
        Validity
            Not Before: Jun 17 06:01:52 2026 GMT
            Not After : Jun 18 06:01:52 2026 GMT
        Subject: CN=a04b75bb7b07cc8912f2849add15003238106f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:b2:7b:f3:99:c1:66:16:7c:79:07:b0:a0:
                    fa:60:7b:59:a9:da:1a:24:6d:e7:61:5a:cb:d2:41:
                    d7:bc:6f:05:84:87:12:7e:16:77:d5:04:54:ea:d6:
                    c5:27:22:ab:83:70:97:7f:f0:a3:24:da:02:fe:f3:
                    ab:64:d2:d9:f7:9f:40:f3:d7:a1:93:82:3b:36:a7:
                    77:d3:62:42:e4:cd:6d:bf:97:79:b9:9d:a2:da:dc:
                    9b:e9:4f:52:d2:5d:02:e5:16:a5:4d:1f:7c:2b:a7:
                    86:06:24:6f:e9:09:e1:c2:29:64:32:71:f8:88:8b:
                    ac:3f:c3:7e:54:23:5b:fd:c3:d2:2f:2a:93:da:ea:
                    f2:16:87:1f:4b:d6:0e:7d:1b:6e:22:5a:79:c2:67:
                    08:98:af:d7:d8:1a:90:81:94:c3:6b:bb:94:2d:32:
                    9a:8f:72:d1:b4:01:ad:91:75:0d:98:06:e8:c2:14:
                    3a:b4:51:79:03:72:ce:9d:83:2d:62:b7:e2:4b:bc:
                    da:d7:84:44:4c:c2:dd:8f:0c:9d:67:20:cf:c2:b5:
                    39:08:b5:1d:ea:5d:58:2c:5e:3c:11:57:ba:7e:a5:
                    47:8b:77:1d:d1:9d:31:38:5b:3b:7d:c8:d5:94:5f:
                    30:01:51:8e:6f:b8:28:1a:69:1a:61:c1:14:3a:06:
                    1e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4B:75:BB:7B:07:CC:89:12:F2:84:9A:DD:15:00:32:38:10:6F:70
            X509v3 Authority Key Identifier:
                keyid:0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:35:7b:39:65:89:60:f8:bd:f8:0d:76:be:d0:27:a8:c0:d6:
         88:5c:b7:24:09:8c:15:a9:49:ef:b7:1a:a8:34:92:93:50:cd:
         4c:5e:79:f3:6b:f5:93:9a:e9:84:99:d4:3a:df:f6:00:7d:28:
         82:2f:b3:e7:78:77:21:b9:af:e1:89:dd:25:21:66:a0:85:d6:
         c0:38:a3:d7:a7:2c:74:45:24:77:ba:d9:2c:71:f3:4b:66:79:
         bc:1d:43:07:d4:56:41:41:c6:f8:c7:45:1c:23:35:f5:3d:ca:
         af:bc:8c:c0:e5:4b:93:31:f3:75:29:1d:ad:3d:c9:9f:4b:58:
         f4:ed:94:a6:e3:39:2b:74:d2:ad:ca:14:5b:4b:47:3a:49:6b:
         c5:13:4a:23:e3:a8:ae:9d:b1:92:8f:f5:f5:0b:61:07:44:23:
         f4:ad:f1:17:8a:b3:94:6e:23:b1:a1:c8:31:41:ed:fa:ff:e2:
         e4:e0:47:49:e1:bb:94:16:aa:ad:dc:8a:62:7f:10:7d:01:42:
         0f:fa:e7:35:96:39:57:00:fe:e4:72:80:56:c6:1e:4b:f1:d9:
         5e:9a:12:07:f7:0b:f5:3b:3e:49:cd:9c:92:9b:16:e1:0b:fe:
         fc:7f:e4:3d:40:6a:f3:3f:da:df:7e:8f:2e:2a:84:89:5f:0d:
         f1:83:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:24:46 2026 by rpki-client