Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
File:                     DgE0-vunLgYznK3FXV8TuuSCsS0.mft (raw, json)
Hash identifier:          C3SHIpnveOy93ImzJkVWB30MpC19krh0agy8uHdTv5o=
Subject key identifier:   8D:DD:F5:B4:7F:4E:43:49:01:21:0E:6E:C3:F3:F8:94:F6:A3:7D:B1
Authority key identifier: 0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D
Certificate issuer:       /CN=0e0134fafba72e06339cadc55d5f13bae482b12d
Certificate serial:       019EBF23FE77579C2A819EB114434992B68F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
Manifest number:          195D
Signing time:             Sat 13 Jun 2026 04:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 04:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 04:01:07 +0000
Files and hashes:         1: DgE0-vunLgYznK3FXV8TuuSCsS0.crl (hash: flym31uHKcfc/5svXxtYeXnzVUty/OaVPFf4d1XKeWA=)
                          2: FNGdELpGS2bwEGg4hvaYUE_r1O4.roa (hash: Ei6sBNoGSjj3ahbV1+2LrTjtk8IEn6iFKEC198BdvPQ=)
                          3: cfuyV7WY5uCzefphkg9dkFiDF4o.roa (hash: 56j+8wClcw9KajdQHM4PT6tZ5VXaRrrlOf4m/1pMO8M=)
                          4: zdTKCzMNYrD_vxLGScehqegrrJk.roa (hash: Al6OIKoNSWVa63JvchjYlE1VIlKOSAurCVguG0aSQOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:fe:77:57:9c:2a:81:9e:b1:14:43:49:92:b6:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0134fafba72e06339cadc55d5f13bae482b12d
        Validity
            Not Before: Jun 13 04:01:07 2026 GMT
            Not After : Jun 14 04:01:07 2026 GMT
        Subject: CN=8dddf5b47f4e434901210e6ec3f3f894f6a37db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e9:66:92:df:0e:38:84:18:92:f8:46:31:f8:
                    71:2f:55:94:0d:38:09:e2:10:b6:00:d7:30:15:da:
                    5d:c0:bf:d6:86:bd:f1:3d:aa:47:15:ee:66:11:40:
                    a5:a6:fe:08:3f:3c:e5:41:0e:70:d0:0e:fd:5e:92:
                    f4:35:13:ae:77:c2:17:1e:a9:ce:85:4c:05:80:db:
                    65:8b:f6:40:45:18:9c:ea:d3:ae:b0:6d:f9:d1:3a:
                    c9:41:d2:a2:b6:48:49:3c:3f:8a:84:41:1a:6f:48:
                    97:e2:81:ba:eb:54:b9:c4:9d:47:87:93:fb:18:d7:
                    b5:6c:28:68:b6:4d:17:04:17:02:37:41:bf:10:2b:
                    54:9a:e1:d4:01:0a:7b:77:aa:c5:47:68:8a:ed:e5:
                    15:6c:ba:ea:fc:b8:4a:91:27:41:6d:ea:ec:df:17:
                    8b:65:cf:d2:f3:62:44:42:55:11:e1:da:bd:b4:9d:
                    d6:b7:6d:a2:e3:ac:1d:8b:72:d7:c0:a7:a3:5d:37:
                    14:d1:c6:e3:ef:ba:77:10:fa:03:9c:c5:8c:04:6a:
                    cb:11:f6:0d:9a:cb:be:9e:6d:2d:02:a7:3d:93:5d:
                    53:67:6d:8f:bb:82:c4:06:68:d8:9a:84:86:fe:55:
                    8b:8d:b7:30:ae:ef:1d:21:97:33:ec:66:23:93:56:
                    58:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:F5:B4:7F:4E:43:49:01:21:0E:6E:C3:F3:F8:94:F6:A3:7D:B1
            X509v3 Authority Key Identifier:
                keyid:0E:01:34:FA:FB:A7:2E:06:33:9C:AD:C5:5D:5F:13:BA:E4:82:B1:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgE0-vunLgYznK3FXV8TuuSCsS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a821df-6b49-4489-8a77-d1246cc2c34e/1/DgE0-vunLgYznK3FXV8TuuSCsS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d0:96:db:7b:ca:c4:e7:41:f3:5d:b4:1e:b6:4b:db:78:f2:
         1a:58:c9:5c:2c:0e:eb:42:9c:05:ca:aa:49:95:49:94:c1:9e:
         69:41:9a:b0:46:e9:14:e6:64:8b:b1:44:92:f1:6a:31:a4:41:
         6b:b2:79:a1:39:18:50:c2:fa:33:11:4c:e0:e2:10:71:fc:9c:
         a1:f2:d6:0e:1f:ef:ec:c9:f1:0c:2e:04:af:d2:ad:85:91:05:
         61:1e:a0:5e:41:6a:14:b5:4a:91:b2:ac:ed:e5:4a:6d:b9:27:
         e5:58:b4:eb:5c:7d:31:e1:5e:50:85:b8:6d:c5:6d:52:5f:18:
         ac:bd:ff:e0:87:04:cc:3d:9a:bb:7e:ff:50:2c:7b:3b:30:d4:
         71:c8:11:fd:3e:0f:2d:24:b2:19:31:15:b1:ef:9b:b3:52:4f:
         90:29:52:75:d4:7a:dc:c0:3a:f6:1e:da:db:28:ad:76:35:3b:
         3e:6a:df:13:e7:3d:8b:da:64:e0:66:a3:41:2a:2f:59:ad:30:
         f2:bd:5d:07:20:4b:a4:3c:a6:83:45:46:4e:3a:44:e7:85:08:
         bd:4e:7a:5e:a9:7c:35:3e:ad:0d:96:1b:c3:0c:37:d5:21:a5:
         33:0b:6e:ae:a8:19:9e:84:ac:82:ab:ab:b6:38:25:6a:23:93:
         0a:f3:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:07:44 2026 by rpki-client