Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
File:                     DB5tXnLa9BCM9gvUfpNt8aHpciY.mft (raw, json)
Hash identifier:          TEzHYZy58wLT6xCZvxWPbY5nLK7vuzqEf+DmSPJVo0o=
Subject key identifier:   56:E5:80:69:1F:37:BE:FC:5D:DB:31:D0:EA:36:C9:6A:10:B0:02:2F
Authority key identifier: 0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26
Certificate issuer:       /CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
Certificate serial:       019EBF91ADFFDF24756B031461DA438A9434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
Manifest number:          1283
Signing time:             Sat 13 Jun 2026 06:00:55 +0000
Manifest this update:     Sat 13 Jun 2026 06:00:55 +0000
Manifest next update:     Sun 14 Jun 2026 06:00:55 +0000
Files and hashes:         1: DB5tXnLa9BCM9gvUfpNt8aHpciY.crl (hash: 6ibCdfqwhXQEaBTbZ02chCUzmeqbgU6Oj3GMNVxDDXU=)
                          2: gYAU9kG86HbZ3YtQGu5MLj44xqI.roa (hash: vR6PgJKynGl8VT8dHy4Fb3OUdFphSgnDlBXNAPZOxik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:91:ad:ff:df:24:75:6b:03:14:61:da:43:8a:94:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1e6d5e72daf4108cf60bd47e936df1a1e97226
        Validity
            Not Before: Jun 13 06:00:55 2026 GMT
            Not After : Jun 14 06:00:55 2026 GMT
        Subject: CN=56e580691f37befc5ddb31d0ea36c96a10b0022f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:6a:ec:4b:08:f5:2c:e1:59:31:80:77:5b:
                    42:6d:a9:82:e8:ba:e5:c6:4c:f9:15:d6:ce:81:2e:
                    d9:73:c5:f1:f3:2e:98:30:e2:aa:74:7f:38:4c:1b:
                    74:7e:ee:b2:d3:cb:bd:59:33:e8:26:c1:ca:5f:b7:
                    cb:fa:43:f7:77:fe:e8:65:0f:73:2c:1a:40:95:66:
                    6e:0a:78:5a:f3:f2:00:c6:27:f0:06:a3:af:c8:a4:
                    89:75:f1:2c:dc:4b:f6:69:72:ad:9e:f9:1c:39:35:
                    ad:fe:1a:6a:59:76:35:df:b6:cd:34:b0:ab:92:67:
                    58:6b:d0:c0:8e:cc:81:5c:b0:c5:1a:75:f3:00:b3:
                    d1:93:6f:2b:1f:64:08:ad:db:92:ba:75:76:29:68:
                    ec:20:af:3d:65:5c:b1:0b:b4:46:c5:7d:95:e3:56:
                    a6:22:1a:75:f8:8f:e0:49:2e:37:75:85:a4:81:5e:
                    ef:12:53:3c:16:3a:9e:ba:0d:98:12:00:96:69:e0:
                    93:ed:6d:f3:fd:b8:c2:ef:3e:c8:c0:0f:90:70:35:
                    f3:da:a2:ce:e6:a8:c6:89:9a:29:e1:94:3a:b2:df:
                    8d:eb:51:aa:a3:31:ee:66:dd:80:08:21:a6:ea:27:
                    80:b0:5c:68:38:6e:51:a0:aa:1f:53:87:20:52:2d:
                    e5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E5:80:69:1F:37:BE:FC:5D:DB:31:D0:EA:36:C9:6A:10:B0:02:2F
            X509v3 Authority Key Identifier:
                keyid:0C:1E:6D:5E:72:DA:F4:10:8C:F6:0B:D4:7E:93:6D:F1:A1:E9:72:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DB5tXnLa9BCM9gvUfpNt8aHpciY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3dc72e-0861-4316-a4be-a295813f1f82/1/DB5tXnLa9BCM9gvUfpNt8aHpciY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b8:96:a8:b7:26:8e:8e:10:81:9e:e8:21:1d:25:b2:e8:f9:
         3e:fd:2f:b6:cf:a8:43:45:66:68:23:31:a0:a0:98:d5:82:50:
         82:02:41:85:2e:63:4b:79:48:fe:24:75:df:6d:13:b5:46:28:
         b5:d9:e0:5c:45:81:5e:67:50:6f:2a:ed:2c:72:5e:ad:47:e7:
         ad:b0:26:55:d9:73:23:29:12:3e:0e:77:51:f3:a9:4a:44:ef:
         68:0e:bd:87:eb:0a:03:69:f5:89:fd:3e:0a:8c:4e:90:4b:2c:
         ac:96:48:31:68:55:f9:73:eb:2f:28:18:3f:bf:d8:1a:86:17:
         79:15:02:86:41:41:5f:97:05:cc:6b:fa:31:df:b6:53:a3:b0:
         c8:f9:84:8b:0d:fc:1c:59:9e:d7:af:34:8a:ee:34:ae:8a:d5:
         21:5e:66:b0:46:92:3f:d7:66:96:bf:19:5e:40:86:d0:e3:1e:
         35:ae:9a:72:6c:b1:2f:ce:b1:80:61:b0:8f:fe:b3:e5:08:48:
         4f:61:a3:82:41:71:31:86:7a:bb:24:6e:b3:40:79:8e:06:03:
         fc:f2:1c:4a:ff:45:e3:cd:2d:23:98:87:af:f0:c6:73:da:e5:
         35:d7:5f:30:79:af:c9:fc:ff:da:be:d4:c5:43:c5:27:1d:78:
         69:50:c5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:52 2026 by rpki-client