Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File:                     Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier:          eivkB5ybBy05LyzoCc1hjAZ/BmBvJxN43Y9CqjzjcIU=
Subject key identifier:   0E:93:CB:49:EE:54:C9:F4:EC:64:92:F9:A9:AE:F1:2C:B9:7F:43:7C
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer:       /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial:       019EBFFEF8E027300F7DDD67386CE2E26166
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number:          14F0
Signing time:             Sat 13 Jun 2026 08:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:18 +0000
Files and hashes:         1: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: gAz76/lBh0341BaAVKawhnryLSZVucyQPmuK1so5dCE=)
                          2: _SVgDeMt7OyK763J59KOgA7Y4X0.roa (hash: JZm207g6Ascmgp0WtNlIOYunKJNalG/ciHHMl9wcILk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:fe:f8:e0:27:30:0f:7d:dd:67:38:6c:e2:e2:61:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
        Validity
            Not Before: Jun 13 08:00:18 2026 GMT
            Not After : Jun 14 08:00:18 2026 GMT
        Subject: CN=0e93cb49ee54c9f4ec6492f9a9aef12cb97f437c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:21:d8:0d:46:be:1d:44:58:24:3b:9f:5c:5c:
                    aa:28:68:5e:83:43:46:b1:6b:0f:00:f5:3f:58:f5:
                    e4:5b:99:70:00:7b:03:85:11:35:0c:22:6c:4b:04:
                    33:a7:12:58:ef:bf:4f:f9:14:ae:8f:c9:75:11:f8:
                    00:d4:b3:a2:7f:99:06:53:b1:d2:4d:83:a1:ce:fe:
                    5a:11:0f:dc:68:f1:a6:b6:59:cb:c1:6e:b0:df:e7:
                    fd:a3:d0:5c:1b:78:0b:8c:d8:18:bd:da:f3:5d:09:
                    4f:0e:0b:0a:c5:bd:7b:39:8b:d2:28:9c:a4:3c:ab:
                    cb:de:e2:0c:3b:32:a0:c1:e7:48:a2:e8:28:89:be:
                    99:82:29:6c:b9:44:0d:c4:1e:db:91:6f:a2:b0:56:
                    c1:be:b4:6e:7c:57:44:30:8c:96:f7:e7:a5:67:b2:
                    1b:c5:66:93:1f:d2:3f:5b:17:ff:dc:af:9a:bd:e5:
                    fd:27:d1:77:9d:0e:86:71:83:a0:45:3d:ea:c2:70:
                    ec:13:99:ab:9b:67:c7:b6:2a:10:8f:e4:71:2a:ab:
                    72:70:a0:45:00:4f:32:b8:78:26:a4:96:d7:b6:e7:
                    48:e6:00:68:9c:f9:ad:49:75:cb:99:1e:83:9a:19:
                    dd:66:34:24:37:d5:e9:8a:9c:be:4c:9e:c0:da:fd:
                    35:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:93:CB:49:EE:54:C9:F4:EC:64:92:F9:A9:AE:F1:2C:B9:7F:43:7C
            X509v3 Authority Key Identifier:
                keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2c:4b:4d:f0:b1:a1:b8:27:bf:4c:9b:d8:24:26:d5:e3:db:
         1a:58:df:1b:f4:3a:01:96:a7:c0:f3:64:d6:43:7d:ee:40:3f:
         ef:31:f5:cb:88:22:e3:7b:e3:0c:c3:a7:83:f9:9d:c5:29:be:
         2b:c3:1b:e3:47:eb:67:ab:db:79:6d:aa:5b:b9:e8:7a:8c:ef:
         97:f6:eb:7a:be:d8:23:01:3c:e5:c7:60:b3:cf:01:0d:39:33:
         dd:b0:ca:aa:f6:c9:9b:45:ab:34:15:97:fa:d3:c9:ab:33:0b:
         66:5b:3a:48:25:ea:19:95:57:4b:56:4a:e3:88:39:12:5d:ab:
         1d:e0:19:a3:0a:4c:60:df:40:14:df:d2:64:f3:87:1e:19:90:
         2c:a4:2e:4f:e9:3d:87:57:02:10:39:99:62:44:0c:01:e2:f1:
         15:b1:a7:04:67:0b:fe:d5:1a:af:ca:aa:ee:47:d2:4f:25:ce:
         83:96:6e:89:c7:12:cf:d6:6b:f6:76:d0:23:e9:0c:34:40:e5:
         1f:c3:73:3b:5c:13:f6:60:1f:d2:66:eb:a4:f4:fd:ca:cb:24:
         68:b1:99:02:ad:39:56:5c:35:52:1a:b3:84:f4:2a:14:88:0f:
         3d:ba:66:10:dd:52:13:7d:31:ec:4d:50:0d:b9:26:3d:91:8b:
         7c:10:0a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:30:11 2026 by rpki-client