Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File:                     DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier:          UHjuyDbdln8xf7+t+0B3G+wV3/NP9MztGJPOlpipLWE=
Subject key identifier:   E6:8F:8C:16:B5:25:7C:DC:26:E4:19:55:E3:8C:64:4E:97:EC:7F:CB
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer:       /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial:       019EBF5A977C0C1E75458E481BB419BD5545
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number:          103F
Signing time:             Sat 13 Jun 2026 05:00:45 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:45 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:45 +0000
Files and hashes:         1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: s+oF9JxR2kvTmu2fXdurvkd3XMVvuOwIZK5cu3yae7g=)
                          2: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (hash: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:97:7c:0c:1e:75:45:8e:48:1b:b4:19:bd:55:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
        Validity
            Not Before: Jun 13 05:00:45 2026 GMT
            Not After : Jun 14 05:00:45 2026 GMT
        Subject: CN=e68f8c16b5257cdc26e41955e38c644e97ec7fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:31:20:dc:08:3c:d2:5f:95:5f:d9:fb:9c:
                    13:26:d8:2d:42:88:cd:ab:78:59:9a:8d:32:e5:18:
                    26:5a:53:51:23:de:e3:91:b8:8b:12:3d:17:c9:91:
                    41:ff:b7:4b:c0:6c:bc:71:8c:05:ef:67:c8:45:ec:
                    f6:b0:9a:eb:ae:d4:f3:0e:2c:e8:a0:31:7e:d2:32:
                    dc:e3:4f:3a:43:f3:f6:a6:0a:cf:37:e4:6a:3c:06:
                    b5:29:ef:27:0b:57:fd:1e:9f:73:01:b7:e2:6c:4b:
                    79:61:b7:87:c8:96:6d:cf:af:bc:6a:cd:e0:fa:e7:
                    ce:fb:07:75:a2:a5:d3:d1:64:03:72:68:7c:86:67:
                    bf:fb:05:79:09:72:4b:53:af:1a:dc:99:7e:f6:a6:
                    70:42:51:eb:60:c0:08:e7:7d:9c:9a:96:91:38:d3:
                    67:da:a4:09:84:a1:2b:30:6d:9a:a5:80:60:fa:f4:
                    0d:10:fd:eb:fa:72:0f:a6:e4:82:b8:08:42:d4:50:
                    28:a2:29:cf:f2:8c:c1:5b:f0:49:df:f4:2e:0d:b1:
                    6e:8f:71:b8:3d:70:bf:69:a0:c3:13:c5:51:79:27:
                    fd:6e:2b:ee:3a:d9:00:1d:76:79:f2:a0:95:70:6e:
                    95:58:78:8c:67:b9:bf:d3:a2:21:5c:43:b7:03:ca:
                    6a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8F:8C:16:B5:25:7C:DC:26:E4:19:55:E3:8C:64:4E:97:EC:7F:CB
            X509v3 Authority Key Identifier:
                keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:9d:c7:b9:3d:48:ca:ca:f6:f2:f6:36:d2:55:2c:64:b5:59:
         3c:b3:c1:39:71:ea:ce:8d:8a:53:88:a9:b7:98:86:a3:9d:c0:
         52:1c:5a:01:d7:83:45:12:12:36:fb:a0:bf:13:bb:a3:c5:ad:
         bf:94:66:4e:a5:59:af:d3:70:45:c9:ca:30:42:f2:6e:23:14:
         37:2a:78:d1:72:ad:23:fb:a2:0f:ae:e0:71:66:00:31:7c:f8:
         6a:5e:c3:d2:80:f2:ed:0a:12:9f:78:83:89:51:10:ab:35:da:
         d3:44:e8:0a:c1:4e:5a:66:bd:6e:3a:68:d5:99:8a:8e:4d:ea:
         eb:e2:19:74:1d:1c:51:3c:c2:d0:8d:5e:c6:ef:0f:92:cf:04:
         d2:71:a0:42:27:65:38:a5:26:14:69:49:77:20:8e:91:d1:5a:
         fe:61:f2:d7:d1:35:09:7a:17:e1:79:54:98:25:1e:f0:e7:ca:
         d9:44:14:22:29:35:b5:e9:27:63:7c:ec:68:58:9c:04:45:06:
         3c:7a:d6:a4:45:ac:9f:ea:85:bb:51:cb:47:11:45:6d:71:41:
         b8:e8:f3:4c:19:a6:90:fd:68:19:db:23:1f:b4:05:a4:c3:f1:
         13:64:87:a3:f8:d9:26:e9:be:25:80:54:23:94:71:16:e2:4c:
         65:23:4a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:33:21 2026 by rpki-client