Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File:                     DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier:          Eh+AblU8XgQ8zUvuDkp8ZLF7SjPomYNuSdvMoJ2MFlk=
Subject key identifier:   DE:81:57:53:2E:41:53:56:34:42:51:EE:6D:AF:BB:51:DC:27:6F:14
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer:       /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial:       019FA9AC3093F09334087F599D56D4046DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number:          0D60
Signing time:             Tue 28 Jul 2026 17:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:01 +0000
Files and hashes:         1: 0Zv7gbcee3oYhoixuKSpzeAn6hc.roa (hash: g3K2VjxQqR918zAxnhQ8qYXe0zM7/nlsaCescrnOAFg=)
                          2: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: 6KOsX6BMmaZ316R1QU8oEJ9xbm4+vNlm1uW3BklrxEI=)
                          3: MtiFhvTFU6eR6K3JPWffFMPpWmA.roa (hash: DwTW8G9tlrgSrBgtQLqohKIvgiVA/TbEnEkmiFwX6uc=)
                          4: R9CKdSuhKcix03lDYUZNj_9bSZw.roa (hash: 25D9RZgSbgAoxxPe4MQJY7sqqlRu8rIg+8wl9bKE/EI=)
                          5: aCdtB2nYu55hGLQQzrV3-u62JS4.roa (hash: 0jBdXE3UE70+A74fzbLHoyPujmWBV5PBwxsIako4QUY=)
                          6: fcJRAvhE3GJ9JzGChcUs2vcrezw.roa (hash: IUgxFKpPcgKwv0m19KbyxHATCx8pJEqt3FiR48y3FC8=)
                          7: wYnksyA9j8IE38MK44WdI8QthwY.roa (hash: kUGjESP6hpImIv040oxFMoVXOTG5+DBRjTAXej9uu34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:30:93:f0:93:34:08:7f:59:9d:56:d4:04:6d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
        Validity
            Not Before: Jul 28 17:01:01 2026 GMT
            Not After : Jul 29 17:01:01 2026 GMT
        Subject: CN=de8157532e415356344251ee6dafbb51dc276f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:a2:4e:a4:43:92:2a:74:d6:4b:30:74:d3:
                    9e:87:a2:24:8c:ea:ea:27:34:e2:4a:e6:54:cf:11:
                    fe:49:95:1a:e8:0c:fe:cc:e0:4b:59:d3:89:90:ba:
                    99:de:64:0e:94:5b:71:15:49:58:5d:dc:d9:52:19:
                    f1:91:dc:97:c1:7e:ab:d8:13:19:29:6c:ea:30:03:
                    a4:c1:d4:05:64:65:2b:72:97:b3:38:c9:5d:21:82:
                    30:30:da:1c:74:ff:88:6b:ba:35:47:d5:30:de:16:
                    3b:f0:c5:30:09:7f:6d:22:54:ba:91:f8:61:61:d5:
                    71:d2:36:73:0f:46:e7:d5:e4:c4:2a:26:30:3f:f0:
                    43:d6:19:b6:95:92:b9:1f:91:2f:7a:c7:6c:3f:aa:
                    88:e7:86:4c:29:ee:ef:67:8f:cd:3c:67:1b:f2:91:
                    e7:ea:e8:48:f2:75:de:b2:c3:03:1b:75:ba:5d:70:
                    03:38:d9:1b:24:fb:e3:c9:b8:dd:59:0c:ca:cd:a6:
                    dc:7e:53:76:4f:47:51:70:89:e6:cb:da:a9:25:22:
                    e9:b8:5f:2b:d6:6f:1e:ca:06:c9:0a:ae:ce:7c:0b:
                    60:a8:3a:74:15:d2:0e:d7:12:2b:6e:e6:9b:92:a7:
                    9e:73:bd:e7:33:18:34:81:eb:67:d2:29:e9:ca:28:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:81:57:53:2E:41:53:56:34:42:51:EE:6D:AF:BB:51:DC:27:6F:14
            X509v3 Authority Key Identifier:
                keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:89:58:9b:7e:93:6a:98:7b:4e:aa:66:ca:d7:0f:78:1b:
         6c:31:21:dc:12:f3:1e:88:ef:72:a8:a9:b3:50:7b:a4:d3:24:
         79:c8:98:08:24:5e:83:09:1c:71:21:b7:80:79:20:9a:bd:ee:
         4b:fd:6e:76:f7:38:13:ff:1f:d3:b8:1f:d4:57:8f:a0:2f:0c:
         e2:2e:dd:56:ed:25:7f:50:9b:89:b5:b0:64:02:08:52:35:5d:
         24:5c:75:09:90:b2:e4:6c:2b:52:dc:2c:3f:c1:b4:18:53:e9:
         27:64:0b:55:8a:22:e6:a3:e8:ee:a6:24:85:27:dc:7b:b0:05:
         03:02:7b:d7:36:64:67:94:b4:8d:44:e4:a3:b6:d9:7d:7d:fd:
         7e:0e:10:22:a2:9b:8b:4e:f9:3a:93:63:4a:6a:b6:d9:c6:b0:
         9b:a5:46:29:d6:d8:d9:d5:1b:69:3d:5b:4b:32:e9:cb:79:af:
         d6:b7:bc:19:9a:33:5b:51:73:e8:6c:09:65:93:4c:0b:4c:94:
         db:d2:84:83:a1:d0:7e:f2:6b:ae:86:16:fa:db:89:7b:d2:50:
         73:d6:34:27:90:27:cf:c1:50:a0:e8:3b:48:7b:e1:b9:d3:74:
         eb:f0:f6:6f:fd:dc:a2:ca:e3:26:55:a2:1b:00:2b:fc:f0:9a:
         89:e0:6c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:08:52 2026 by rpki-client