Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
File:                     Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft (raw, json)
Hash identifier:          OuefplVBemv+Jcd6ljA9zBkDucvoxHRYrNd8yKZxAko=
Subject key identifier:   D6:03:3B:E5:96:64:46:7C:C0:44:C4:39:37:A9:60:0C:05:C1:B0:6A
Authority key identifier: 0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD
Certificate issuer:       /CN=0dde6317311fe6d538577c17fec982b82eea9abd
Certificate serial:       019CAAFCFB9321909F2169803CBE93F7CB64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
Manifest number:          13DC
Signing time:             Sun 01 Mar 2026 20:00:31 +0000
Manifest this update:     Sun 01 Mar 2026 20:00:31 +0000
Manifest next update:     Mon 02 Mar 2026 20:00:31 +0000
Files and hashes:         1: Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl (hash: Q1eS63oQJ7/STNlaD8ooUPEb/eyHlecbK0A61TRwSGg=)
                          2: _SVgDeMt7OyK763J59KOgA7Y4X0.roa (hash: JZm207g6Ascmgp0WtNlIOYunKJNalG/ciHHMl9wcILk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:fc:fb:93:21:90:9f:21:69:80:3c:be:93:f7:cb:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dde6317311fe6d538577c17fec982b82eea9abd
        Validity
            Not Before: Mar  1 20:00:31 2026 GMT
            Not After : Mar  2 20:00:31 2026 GMT
        Subject: CN=d6033be59664467cc044c43937a9600c05c1b06a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:eb:7b:46:b3:77:d3:9e:4f:13:22:93:4a:c0:
                    ce:3d:25:ad:b6:07:68:f6:74:5a:3a:50:47:56:fe:
                    ce:a6:68:5a:02:18:92:1b:5e:42:fb:7c:2a:dc:f0:
                    57:12:b1:f7:85:df:1e:57:47:02:3d:72:a5:97:73:
                    46:b6:8c:ed:ed:ae:54:f9:68:c8:a4:d5:a3:61:92:
                    5d:2b:de:a7:00:5a:e2:d3:aa:39:ba:67:31:dc:20:
                    91:ab:b2:c0:61:f6:47:87:7b:39:c8:01:fe:7b:ef:
                    ff:21:82:4a:fc:8e:f3:b7:cb:f7:99:37:94:3c:a1:
                    f2:9b:7f:53:27:bc:b8:41:1a:ae:2f:51:9e:78:c2:
                    12:07:20:ec:0d:53:d8:f1:04:eb:d7:c2:2a:e0:eb:
                    20:51:82:91:75:da:0e:7b:3a:6b:35:eb:41:53:ad:
                    9f:fe:6b:34:e1:1e:ed:44:1b:e7:63:65:70:ef:7b:
                    10:c9:46:6b:50:8e:8d:ea:60:76:2f:54:bd:54:d9:
                    18:30:4c:db:b0:03:9c:6e:ab:75:75:59:b5:41:be:
                    5e:dc:4f:24:73:75:90:b8:5d:86:60:15:c1:b0:63:
                    62:d1:e3:6b:37:4c:15:76:3a:a3:4d:f4:3e:08:53:
                    0f:60:5d:38:fa:8b:b1:5f:ad:48:d4:0a:87:2f:1c:
                    e5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:03:3B:E5:96:64:46:7C:C0:44:C4:39:37:A9:60:0C:05:C1:B0:6A
            X509v3 Authority Key Identifier:
                keyid:0D:DE:63:17:31:1F:E6:D5:38:57:7C:17:FE:C9:82:B8:2E:EA:9A:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd5jFzEf5tU4V3wX_smCuC7qmr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/794e80-e70a-4043-bb72-eca4545e178b/1/Dd5jFzEf5tU4V3wX_smCuC7qmr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d8:e2:6b:3c:31:d0:69:d0:dd:bb:a4:b4:63:f7:ed:ad:64:
         b3:92:47:76:42:7a:50:52:9f:65:57:de:59:62:7e:63:a4:38:
         7e:f6:dc:f0:04:01:18:9d:43:42:89:e1:cd:ed:80:02:32:25:
         0c:42:18:42:bc:12:b8:07:fd:f3:43:5e:c1:8d:5d:5a:23:18:
         21:6c:c0:7b:76:42:aa:c5:7c:23:61:ba:8e:f8:f7:cb:9b:6f:
         d4:51:5e:be:0c:2c:b0:aa:fa:9e:dc:3c:ab:73:19:06:1a:b5:
         48:f5:ff:1c:b9:19:00:43:d1:ee:14:24:1f:4a:71:9a:2d:fb:
         10:0e:3a:be:f9:82:70:87:9e:55:7d:66:ec:9e:53:b3:f6:1a:
         e4:2e:4f:2b:df:22:62:fe:49:b7:46:be:32:10:11:29:2d:29:
         b9:32:1d:17:e5:2f:a4:a4:93:b1:83:ad:97:1c:e3:2d:e3:aa:
         80:20:58:95:8b:b8:6f:0d:58:47:9d:de:b0:87:bf:a0:7a:28:
         80:10:21:bb:94:c5:c8:30:46:11:6c:7a:a4:fa:d7:b3:9b:23:
         0a:ee:99:f2:04:86:50:05:d8:8a:49:73:fc:3f:25:13:cb:81:
         e3:7a:80:f8:fe:af:e6:43:32:fe:5b:3f:c0:f2:3a:ad:c5:5d:
         00:5d:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:55 2026 by rpki-client