Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
File:                     DvJQ9m3TDDt1RDCoXVMjbxczG38.mft (raw, json)
Hash identifier:          BuTKNWcFuR1dzllGUBnWd0NxkQqszc4YYjQ7PBMie3k=
Subject key identifier:   67:63:0F:A0:9C:62:70:A0:D1:93:E7:CC:A6:78:30:5D:D4:18:4D:7F
Authority key identifier: 0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F
Certificate issuer:       /CN=0ef250f66dd30c3b754430a85d53236f17331b7f
Certificate serial:       019EBF5AFC0490D58038B59CC79F3943735C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
Manifest number:          05F8
Signing time:             Sat 13 Jun 2026 05:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:11 +0000
Files and hashes:         1: DvJQ9m3TDDt1RDCoXVMjbxczG38.crl (hash: jFdHvOa/0Caxwe+m8mMCFZcJl142RII2ZAOsvquW70g=)
                          2: wUZK58GnfnXrFcL-rJ6SW3dQ9lM.roa (hash: tpiKkysQtleOXY8s7JxmnW98sGuzWNG7qUWUKxa7byA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:fc:04:90:d5:80:38:b5:9c:c7:9f:39:43:73:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef250f66dd30c3b754430a85d53236f17331b7f
        Validity
            Not Before: Jun 13 05:01:11 2026 GMT
            Not After : Jun 14 05:01:11 2026 GMT
        Subject: CN=67630fa09c6270a0d193e7cca678305dd4184d7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:10:22:fd:82:7d:5e:f1:fe:49:5b:12:a3:45:
                    48:66:ff:9c:f9:57:16:c2:75:97:31:20:b0:2e:96:
                    08:cf:9a:fd:ae:6e:33:e8:af:f5:36:5a:de:22:da:
                    bf:a3:61:ec:00:a4:cc:49:af:22:4f:15:c4:c4:1a:
                    f8:2d:db:a4:ce:10:53:33:15:32:81:c1:39:97:70:
                    3d:ee:f3:2f:01:1b:cc:b8:cb:b4:a8:52:93:b5:52:
                    9f:2b:7a:85:fc:29:fa:73:34:3f:61:b2:a4:c9:08:
                    f2:25:a5:69:05:2a:66:66:e6:56:21:16:e5:49:52:
                    01:03:87:56:21:37:1f:f1:8c:6d:47:42:5f:33:5b:
                    a3:35:76:5d:4f:42:47:cd:60:53:81:51:3f:b8:db:
                    ac:5e:ee:bd:0b:ce:ab:ba:2f:b2:df:a3:92:c8:50:
                    e6:de:e1:71:ca:92:2a:9f:f0:d1:29:49:70:c1:91:
                    1e:75:1c:0a:14:ed:a3:78:69:67:55:62:ca:c4:7a:
                    db:51:bc:bd:ea:c1:e8:c5:99:1a:5e:2e:0a:a1:3c:
                    53:e5:dd:03:3b:72:81:5f:36:ee:1c:5f:45:58:4d:
                    97:4a:a3:ea:11:fe:93:7e:41:ee:44:2b:88:60:5e:
                    10:1f:ef:fb:d0:22:73:ef:4f:6f:a8:32:29:cc:c0:
                    8b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:63:0F:A0:9C:62:70:A0:D1:93:E7:CC:A6:78:30:5D:D4:18:4D:7F
            X509v3 Authority Key Identifier:
                keyid:0E:F2:50:F6:6D:D3:0C:3B:75:44:30:A8:5D:53:23:6F:17:33:1B:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvJQ9m3TDDt1RDCoXVMjbxczG38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/999dd3-88f7-42c2-aff5-81d5aac03496/1/DvJQ9m3TDDt1RDCoXVMjbxczG38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:59:d1:0c:9b:01:35:41:3d:5c:54:ac:c1:43:47:fd:32:c0:
         f7:c2:38:d8:f6:23:60:c1:6d:af:85:7c:b9:30:70:04:26:88:
         f8:2c:2c:aa:7b:be:0f:04:56:f5:1e:2f:87:f6:3b:c0:f5:77:
         46:72:81:a0:9e:a9:ff:5b:e3:df:6b:79:96:96:9f:e1:de:71:
         cf:19:5e:f9:29:a3:f4:42:52:b2:62:17:f0:3a:b3:e5:59:62:
         43:24:f5:52:af:0b:39:b4:40:b0:d6:db:9d:64:3d:43:55:e8:
         9a:21:56:42:c6:0b:d0:ea:9d:36:14:5d:0d:a8:f8:55:04:56:
         77:4e:4e:45:19:64:ff:7d:4d:11:25:fc:70:cf:7d:cd:4c:8e:
         d4:24:2d:ab:96:44:a9:71:4d:8e:6a:00:fc:b3:ba:30:af:10:
         36:3e:a5:d9:0e:7e:36:26:43:80:49:e8:77:7c:0b:84:db:b2:
         68:6f:e9:c7:7b:d2:b1:04:eb:4d:b7:7c:25:1f:dd:49:e8:a1:
         03:83:e8:15:61:f4:13:ec:5a:d0:12:d0:94:92:67:21:d6:75:
         fc:05:17:73:ee:07:ca:31:05:da:d7:00:88:02:ec:07:9b:7f:
         72:10:ba:19:96:62:2c:82:28:61:b0:e9:29:9f:b2:bb:c7:eb:
         b4:f2:fe:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:22:09 2026 by rpki-client