Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
File:                     0DjDOLEo-Drewvadk8MsU1PKA5g.mft (raw, json)
Hash identifier:          pAeVfsTTWDdeIEeLkTW7/vPWaOSfS6C2Pk6ocm3JkWQ=
Subject key identifier:   FA:B1:FD:96:1A:68:AE:AD:3D:49:E5:6F:9B:FD:CC:1F:21:BF:38:CD
Authority key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Certificate issuer:       /CN=d038c338b128f83adec2f69d93c32c5353ca0398
Certificate serial:       01A001019CA099C530E77C6E77F515BF25B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
Manifest number:          169E
Signing time:             Fri 14 Aug 2026 16:01:17 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:17 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:17 +0000
Files and hashes:         1: 0DjDOLEo-Drewvadk8MsU1PKA5g.crl (hash: t/Tbdw8fPqcISaHDDfg31w2RejZ7mASKYlEkAHytztQ=)
                          2: iYtloRWl9kFypd8JJUfmPgfj4cA.roa (hash: S73CmXUZ6HVY4mwA83JVTETkq549rHQpfRMzqNjQiJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:9c:a0:99:c5:30:e7:7c:6e:77:f5:15:bf:25:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d038c338b128f83adec2f69d93c32c5353ca0398
        Validity
            Not Before: Aug 14 16:01:17 2026 GMT
            Not After : Aug 15 16:01:17 2026 GMT
        Subject: CN=fab1fd961a68aead3d49e56f9bfdcc1f21bf38cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c6:3a:d1:c8:4d:12:d1:b4:37:a1:d8:d2:f1:
                    61:f5:76:0d:d9:42:86:d6:9b:fa:86:6a:9c:14:c1:
                    eb:9a:36:5f:92:4f:06:61:0c:8f:a9:ff:de:78:c9:
                    59:6f:0a:ba:33:5d:08:b1:aa:e5:eb:ec:4e:94:e5:
                    5b:e3:da:5d:40:0b:5b:d2:4d:6f:e1:42:cd:83:cd:
                    83:e8:2f:a9:cc:ce:61:73:d1:48:86:e4:7e:46:31:
                    0b:6a:6f:e9:e6:ed:91:b4:1a:3a:45:e4:7b:c7:51:
                    37:22:7d:3d:f7:ee:b8:f4:bd:8e:8e:b6:5b:9b:a6:
                    9d:a2:35:ab:23:7f:a6:b0:89:49:b1:5b:99:6a:c0:
                    74:54:27:3e:48:e6:76:57:06:6f:51:2d:2e:20:7c:
                    0a:38:8c:a8:2b:b3:6d:3a:78:61:e9:89:12:f5:a3:
                    cd:f3:97:43:7e:05:61:25:af:c8:21:e4:ee:31:00:
                    35:59:1a:b3:c0:a1:e5:3b:7c:97:2d:de:de:8d:e7:
                    3f:bc:80:18:cd:85:48:d1:f1:b6:ff:29:31:92:24:
                    96:99:1a:80:07:3f:bf:2e:b5:01:3b:dc:f5:8c:a8:
                    35:2d:11:08:99:0f:ef:d1:fb:d6:26:fd:10:8e:21:
                    2d:4b:70:4f:a9:66:30:23:a6:51:dc:c8:76:96:01:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B1:FD:96:1A:68:AE:AD:3D:49:E5:6F:9B:FD:CC:1F:21:BF:38:CD
            X509v3 Authority Key Identifier:
                keyid:D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:90:0a:06:73:f2:65:64:5d:e9:ab:cc:de:42:73:a7:fe:23:
         ed:65:f6:34:1f:ea:eb:8d:07:fc:b3:58:ee:31:20:d7:50:92:
         2e:53:07:1e:3b:54:89:92:af:d4:be:92:e0:48:a6:c0:74:2f:
         4c:40:3b:b4:d5:ec:18:b5:0f:a3:8e:f6:8c:da:9a:ea:73:46:
         c3:53:a7:87:6c:1f:eb:ea:c8:6d:8d:da:fd:e6:17:8c:a0:4f:
         e1:1d:9b:51:d7:63:a4:79:5d:63:75:55:f9:1b:4c:d3:3a:94:
         70:0f:46:7f:e4:26:f4:2d:db:4a:20:dd:74:7a:56:4f:cc:fe:
         ce:76:cc:45:ea:47:d6:fd:26:0e:34:61:d5:5d:fa:e2:bc:a6:
         99:29:10:56:46:c0:05:89:ef:64:4f:4b:a9:59:56:61:f0:07:
         bd:c0:c9:dc:32:18:e1:19:90:64:0c:88:9f:5e:94:ed:d2:6f:
         d7:e7:45:a1:a2:43:76:ac:af:4f:ea:0a:30:ed:33:2a:e5:b7:
         2a:9e:1d:09:78:42:78:be:a0:5c:8c:03:51:a1:29:8b:95:e6:
         67:44:9b:1a:7b:d9:81:00:22:d7:ef:f4:ea:87:ba:6f:bc:fc:
         ba:b2:8b:12:fe:21:e5:9c:84:3f:7c:03:37:ae:0d:1e:69:a4:
         85:b5:34:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:40 2026 by rpki-client