Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File:                     DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier:          F8rFEBZcCcwmkYwFNkHvqq08C/5z+qhIj4DDhZT3zEc=
Subject key identifier:   32:56:2B:8C:65:4D:96:04:F8:33:BB:84:04:04:61:7C:B5:93:A3:4D
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer:       /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial:       019EBFC8AC56BBB1D1A2DA75F32B3C83209E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number:          0CE4
Signing time:             Sat 13 Jun 2026 07:01:00 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:00 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:00 +0000
Files and hashes:         1: 0Zv7gbcee3oYhoixuKSpzeAn6hc.roa (hash: g3K2VjxQqR918zAxnhQ8qYXe0zM7/nlsaCescrnOAFg=)
                          2: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: KSD08/Qzp4hfbdRV+6YePDNxLYOP3i0r6MtUDmKtBdA=)
                          3: JKdvv1QAYbOX_pZXm3TAJbKAklQ.roa (hash: Zhr1jf+vfEhpYP37GfGTX0mdaI+oa5pateSnk6/0QO4=)
                          4: MtiFhvTFU6eR6K3JPWffFMPpWmA.roa (hash: DwTW8G9tlrgSrBgtQLqohKIvgiVA/TbEnEkmiFwX6uc=)
                          5: R9CKdSuhKcix03lDYUZNj_9bSZw.roa (hash: 25D9RZgSbgAoxxPe4MQJY7sqqlRu8rIg+8wl9bKE/EI=)
                          6: wYnksyA9j8IE38MK44WdI8QthwY.roa (hash: kUGjESP6hpImIv040oxFMoVXOTG5+DBRjTAXej9uu34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:ac:56:bb:b1:d1:a2:da:75:f3:2b:3c:83:20:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
        Validity
            Not Before: Jun 13 07:01:00 2026 GMT
            Not After : Jun 14 07:01:00 2026 GMT
        Subject: CN=32562b8c654d9604f833bb840404617cb593a34d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:13:91:8c:5a:91:b9:66:c3:27:97:4a:93:c3:
                    c1:eb:98:d3:2b:41:53:ef:9f:02:23:c8:f2:08:95:
                    3a:3e:63:77:02:cd:7a:67:91:00:f7:dc:36:80:9a:
                    21:a4:60:34:92:8b:34:6c:66:4a:2c:1d:a6:2d:e1:
                    b5:8a:4b:bc:8c:54:12:c8:61:e5:be:d3:4f:af:18:
                    92:4b:f0:d2:a7:35:c6:9c:94:fd:7a:0e:cd:78:3d:
                    9f:1e:be:2a:2a:b8:ef:d4:28:85:9b:4e:4a:f2:4c:
                    f1:8c:1e:4e:9b:e0:df:da:43:ab:1a:6e:c0:bf:ae:
                    a3:ad:9f:fa:1a:a0:b6:bd:42:98:62:7c:e3:b6:04:
                    a0:b3:54:43:26:92:4d:63:1f:86:be:f4:83:6b:96:
                    4f:96:de:83:4f:29:ac:ff:fb:34:6d:00:6f:91:f7:
                    71:ac:f9:45:c8:28:1b:1a:14:df:08:2e:bd:af:f0:
                    5c:cc:f6:9c:53:6a:34:04:2e:45:2c:a5:8e:ba:16:
                    93:a5:cb:e5:f0:83:0f:b7:4a:79:e9:35:4c:32:17:
                    93:e3:83:4a:e8:d1:af:bc:89:bd:d4:e5:c6:7c:ad:
                    b6:e5:17:1f:4d:23:62:fb:9a:f4:76:32:ba:fc:96:
                    91:4f:97:2c:35:36:8c:8a:df:37:93:9e:17:27:67:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:56:2B:8C:65:4D:96:04:F8:33:BB:84:04:04:61:7C:B5:93:A3:4D
            X509v3 Authority Key Identifier:
                keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:cc:d3:41:55:5a:4b:10:9c:42:06:ee:18:92:c8:52:75:
         e8:ef:f5:07:19:ff:09:51:1e:1f:24:67:0d:09:3d:f6:17:43:
         33:ea:5c:d4:db:d9:7f:47:ea:c7:cd:0e:45:77:95:9d:de:b9:
         61:18:20:c1:7d:a0:76:e4:58:15:20:17:da:61:33:86:fb:25:
         28:7d:4a:a1:85:36:29:94:19:7e:b8:9c:d3:c0:68:83:41:13:
         1e:c5:f1:14:90:33:79:f8:4c:ac:8e:57:ad:7b:d9:f2:89:d5:
         79:4a:5b:c3:f5:5b:d0:08:4a:c7:77:62:88:78:af:cf:90:ee:
         15:79:cd:7f:39:25:1a:19:eb:62:da:b2:f0:00:ff:6b:c1:5c:
         22:fb:3f:dd:f4:b2:60:4d:24:80:ba:ab:3c:5a:73:28:f7:1f:
         dd:bd:11:24:05:f4:ce:d2:fb:ee:36:40:3f:99:57:dc:12:89:
         2a:67:2f:79:86:3d:c2:b6:26:dd:13:5f:4c:12:7b:ac:84:b5:
         d2:6b:9f:9d:50:16:d0:22:7f:58:8e:0f:1b:e6:81:8c:54:44:
         bf:f3:8a:c4:33:3e:dc:59:a1:d4:46:69:31:c3:28:55:95:96:
         52:7e:73:8e:2a:6c:e2:b6:a6:34:66:fc:bc:ca:30:8a:e8:bd:
         d5:c7:84:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:13:06 2026 by rpki-client