Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
File:                     DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json)
Hash identifier:          dA3zg59yKtgq63n79Y0NZ8nZvJuhVFleWR0zSi+Z6e4=
Subject key identifier:   5C:0C:9F:5A:6D:F1:15:37:71:0B:10:B0:ED:1F:17:3D:99:43:DD:54
Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76
Certificate issuer:       /CN=0ea54639316f5cd5287f841d7f8cff16521d0576
Certificate serial:       019FA907AB8D92F8F83A6F049B94811C90C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
Manifest number:          0707
Signing time:             Tue 28 Jul 2026 14:01:19 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:19 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:19 +0000
Files and hashes:         1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: nYAmpdZUTbznImnxFYkjRceNUNdbu+V0rc0qPQPtOdk=)
                          2: GPyDbQSHNR39KOU_xi7-Id9KAQQ.roa (hash: BJA1H3BJte9PdHpAhJG8NebAV+K9kBOQF7cMdvjOdG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:ab:8d:92:f8:f8:3a:6f:04:9b:94:81:1c:90:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576
        Validity
            Not Before: Jul 28 14:01:19 2026 GMT
            Not After : Jul 29 14:01:19 2026 GMT
        Subject: CN=5c0c9f5a6df11537710b10b0ed1f173d9943dd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:ba:f0:a2:93:ca:bb:56:11:64:2d:41:e9:
                    79:fd:5a:fd:40:fa:80:e9:67:27:d9:cc:db:80:ef:
                    ab:20:d8:7a:33:34:6c:ec:74:dd:d0:c6:e0:a3:89:
                    0e:1c:46:38:65:1e:83:a3:6f:00:8d:3b:44:42:bf:
                    6c:0f:9e:a6:43:da:9c:0b:3b:e4:ab:83:a9:62:97:
                    52:9a:99:07:91:6e:88:67:77:a8:ac:6c:85:11:34:
                    cf:df:bc:60:33:2a:34:6b:72:9e:55:9f:86:6e:72:
                    e5:a2:8c:dd:99:06:59:31:74:5d:80:91:77:ca:6a:
                    dc:a0:b4:07:8b:f6:2b:c9:39:ae:92:ca:64:84:b1:
                    77:dc:8c:65:f9:9c:ac:ea:dd:eb:21:7a:0c:f8:04:
                    92:a0:29:2d:8e:be:03:ea:be:64:41:ee:17:93:09:
                    58:31:f6:95:5a:71:d8:23:6b:b3:b7:ab:03:53:08:
                    6a:57:7c:5f:03:4d:49:7e:f2:ce:02:d2:7e:20:df:
                    90:5a:21:86:ac:6a:0e:49:b2:d4:88:05:e0:e9:97:
                    63:04:dc:a5:95:2d:c5:48:5a:e7:25:6b:5f:f3:2b:
                    ef:4b:c0:c7:eb:cb:7e:76:7a:ba:14:f4:18:b9:6f:
                    0c:0b:42:de:28:1f:66:3d:47:21:ec:d1:67:16:0b:
                    ff:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0C:9F:5A:6D:F1:15:37:71:0B:10:B0:ED:1F:17:3D:99:43:DD:54
            X509v3 Authority Key Identifier:
                keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:39:81:26:2b:c2:5d:1f:b1:24:f0:b4:52:3d:28:74:4f:70:
         c6:6e:af:bb:8c:a4:fb:d5:c6:95:3f:df:13:a5:51:a8:0b:13:
         a8:fb:9a:b9:dd:ce:90:b5:bd:2c:29:3d:2f:d7:58:ff:e7:5e:
         b0:f8:60:8c:c1:ac:6c:f6:1e:36:9f:bb:37:a9:3f:27:5d:07:
         c2:2f:68:2f:6b:a1:b1:98:3f:a4:ee:d7:e1:0b:2b:08:05:7e:
         ed:8d:8f:0a:57:f9:00:4f:d0:b4:23:2b:4b:d2:d4:43:fe:99:
         63:73:7b:e7:ee:7e:25:14:1c:b5:cb:79:86:cc:44:e6:6c:51:
         85:0e:7e:3e:cf:03:41:a9:96:d6:d9:08:f7:e5:64:46:e0:16:
         bc:8e:15:92:8e:d2:a3:3d:0d:30:2d:e2:87:a9:6d:b0:63:a8:
         30:5f:e4:cf:54:60:28:9c:48:7a:6e:d1:b6:7e:cd:4f:7a:f4:
         f7:77:8f:e2:59:ec:2f:f5:0c:8e:0b:f8:80:ed:3b:e6:a7:42:
         13:ed:bd:26:91:53:bb:06:0d:56:ad:9b:7a:25:96:65:90:82:
         81:da:99:28:f7:69:08:f0:32:f6:5b:9f:8d:49:85:aa:62:f8:
         74:53:e6:a5:59:17:f6:2b:12:01:c6:74:d3:fd:be:a5:ac:93:
         f9:42:c6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:32:31 2026 by rpki-client