Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
File:                     dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft (raw, json)
Hash identifier:          8uPjOClSUKvPZ6f3yFZDjWCXLaaV8rwVZm0qN4AasTM=
Subject key identifier:   37:E5:5D:7B:19:23:25:89:1A:A8:6F:17:F8:F5:2B:9D:42:1D:FD:DE
Authority key identifier: 74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F
Certificate issuer:       /CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
Certificate serial:       01A0032676ABDA9102C199EF957A63333AA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
Manifest number:          0EBD
Signing time:             Sat 15 Aug 2026 02:00:47 +0000
Manifest this update:     Sat 15 Aug 2026 02:00:47 +0000
Manifest next update:     Sun 16 Aug 2026 02:00:47 +0000
Files and hashes:         1: KMvjq5V4Ksx01k9TjiIKtXCe5pA.roa (hash: 1beuOrWqdA+O+erqVb2gqs5tEOIpMoZMwqBtE6QzSbA=)
                          2: dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl (hash: Ad5vH9kcfQyW5D9KrPmiErpwCfLlDvfD4wrLzYYxNOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:26:76:ab:da:91:02:c1:99:ef:95:7a:63:33:3a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746c0e1a733ad833bcbe50a812448bf5e099e95f
        Validity
            Not Before: Aug 15 02:00:47 2026 GMT
            Not After : Aug 16 02:00:47 2026 GMT
        Subject: CN=37e55d7b192325891aa86f17f8f52b9d421dfdde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:94:da:1b:2a:71:e9:8e:ca:47:c7:44:16:cc:
                    4e:23:c3:ef:f2:d5:c6:c2:27:8e:ba:80:d4:34:35:
                    ad:86:c3:2b:f7:1f:8e:3e:b8:b4:b2:d4:54:04:f2:
                    57:3c:17:7c:2c:62:c6:6b:f6:34:02:27:3c:f3:ff:
                    9c:97:ef:7f:4b:98:72:cb:85:5a:fd:1b:58:8b:50:
                    74:6d:7c:90:fa:dc:56:5a:85:2d:f9:18:a3:80:69:
                    6f:46:55:53:c4:6c:08:a4:16:31:57:94:9c:3f:8d:
                    d9:ad:0b:97:35:c0:eb:42:71:68:cf:d3:00:ce:c0:
                    98:1c:69:a4:28:f9:be:47:45:87:1b:66:5c:71:c2:
                    b3:aa:05:20:44:c4:3c:2d:f3:ce:e3:2e:62:e0:b2:
                    78:db:eb:22:14:ec:8b:c7:a4:6a:11:b9:39:4d:18:
                    ef:60:f4:03:32:53:14:b5:06:19:6a:68:42:ea:50:
                    46:b0:c1:a8:e6:e8:01:30:2f:77:84:77:1e:cb:6c:
                    5c:c4:7b:b3:d2:f9:dd:f3:f7:4e:e4:0b:1a:d5:68:
                    f7:22:bd:64:52:bc:5c:a0:ae:4b:cb:fa:02:9e:19:
                    e1:c7:41:03:2b:3b:42:f4:17:99:eb:a9:e9:df:36:
                    44:28:70:c8:8a:f4:d9:0b:36:ba:96:50:0e:09:53:
                    c7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E5:5D:7B:19:23:25:89:1A:A8:6F:17:F8:F5:2B:9D:42:1D:FD:DE
            X509v3 Authority Key Identifier:
                keyid:74:6C:0E:1A:73:3A:D8:33:BC:BE:50:A8:12:44:8B:F5:E0:99:E9:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGwOGnM62DO8vlCoEkSL9eCZ6V8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/61ea48-3e39-41e8-b22a-6c9a825581cb/1/dGwOGnM62DO8vlCoEkSL9eCZ6V8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:3f:37:c4:f7:af:5b:5d:2f:75:f7:7c:e4:ce:24:88:bf:a6:
         cf:9f:9d:3f:74:69:d6:df:f7:84:c9:18:95:e7:ed:0e:a4:5a:
         2c:d9:38:1f:08:0f:ce:55:bd:1e:e3:f9:02:71:21:8f:04:57:
         70:5f:b2:bf:f5:a0:1c:d3:05:85:53:0f:31:47:40:95:3d:46:
         49:e4:26:2c:dc:3c:28:2c:db:69:96:39:df:ee:33:81:42:9d:
         03:cb:a3:ab:78:3c:0a:5b:dd:ae:d6:75:5c:03:49:2b:4d:99:
         08:6b:75:7e:d9:59:dd:2c:95:92:15:bb:88:bd:cb:43:d7:8e:
         82:74:17:2b:6f:13:ad:19:d3:d6:e3:02:c8:6e:ae:05:a4:9f:
         d6:76:79:9c:e2:21:82:f3:c3:b6:b5:d3:55:b0:07:e9:1d:57:
         60:9c:79:6d:e5:4c:74:03:cc:99:14:7d:74:56:24:5c:b7:92:
         da:bf:29:21:24:b0:57:ae:a2:4f:04:51:07:cd:40:fd:02:42:
         f7:e1:5a:f6:92:04:48:71:de:01:d8:97:79:56:d7:08:a3:e5:
         56:9a:cd:51:92:b5:66:cc:61:5e:cc:a2:5c:0c:23:9e:c2:da:
         8f:20:dd:0f:cc:c7:f2:9b:bb:92:07:e6:8a:82:8e:d6:91:e8:
         67:2e:56:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:53 2026 by rpki-client