Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File:                     dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier:          s2Wy+kBxc2QMTTihzxnvDDnm8/lu92Wp3mIIQkaawxA=
Subject key identifier:   D2:0D:A3:23:94:F9:8A:9D:EF:F8:EE:5A:07:0C:CE:8E:E4:E3:6A:BA
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer:       /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial:       01A001DD2ECF6E7B8901142F43D828498469
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number:          0810
Signing time:             Fri 14 Aug 2026 20:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:07 +0000
Files and hashes:         1: bO5zh83JPBsDB9dYi7999N7x4VQ.roa (hash: 2nRlkOqwn2pz6pnUvZfg8RMKFwShSWGr7lN2y/FxSOU=)
                          2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: vC/Pmdd0om9WWMLVKD23iBqa+KYejKVTRlqDPovC6Ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:2e:cf:6e:7b:89:01:14:2f:43:d8:28:49:84:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
        Validity
            Not Before: Aug 14 20:01:07 2026 GMT
            Not After : Aug 15 20:01:07 2026 GMT
        Subject: CN=d20da32394f98a9deff8ee5a070cce8ee4e36aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c0:0f:23:a5:40:fa:8d:a2:a8:34:b9:a5:52:
                    dd:1c:ec:98:7b:6f:1c:9a:73:24:31:2d:86:3a:07:
                    3b:ca:46:05:74:e1:18:17:9f:e5:7d:fc:b3:75:9e:
                    5b:f3:b6:90:9d:7f:0a:90:19:14:a1:6c:44:73:d6:
                    54:29:83:0b:c1:6e:7f:01:07:d1:00:9e:ff:46:fb:
                    3d:ed:dc:82:7b:a4:01:2d:57:67:7e:a5:cd:91:14:
                    f3:b7:86:70:53:09:d1:98:92:0e:95:70:5f:44:c0:
                    91:6b:e0:23:ad:eb:2d:9e:34:e3:34:64:b6:95:77:
                    75:3a:90:be:85:a1:1d:f1:62:34:01:d4:7d:3c:2d:
                    4d:9d:05:2d:a8:ad:95:56:7e:a8:99:d9:e2:64:f8:
                    36:c2:5b:72:48:13:8a:8d:19:d7:69:c7:41:43:45:
                    d4:bb:a4:87:d1:e8:6b:96:8d:28:17:ab:29:cc:92:
                    57:dd:de:7a:a8:1b:e1:c8:66:53:2e:70:b5:88:42:
                    f6:c6:89:b2:47:ef:2b:13:2e:04:ab:4e:69:e2:e6:
                    f7:90:1c:65:f8:88:58:a9:34:88:03:d5:4b:0a:81:
                    36:7a:98:f2:54:2b:a6:61:f9:33:69:a6:d2:c3:1c:
                    17:86:f9:14:b8:79:82:13:da:f8:6f:53:fc:00:bd:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:0D:A3:23:94:F9:8A:9D:EF:F8:EE:5A:07:0C:CE:8E:E4:E3:6A:BA
            X509v3 Authority Key Identifier:
                keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:6f:f2:5e:22:5c:b9:03:23:1d:98:42:c7:8a:fe:ca:fa:52:
         75:a7:20:b7:92:bb:90:63:fb:08:b9:07:91:83:96:1d:77:48:
         fa:10:d4:e8:35:d1:50:5e:8e:0a:d3:be:d6:bb:a8:c6:96:d5:
         92:99:15:0c:bd:a0:4e:ce:55:d5:25:7d:91:04:a3:55:3e:50:
         3a:5b:a7:37:07:9c:e4:ac:0e:d4:e1:70:94:27:b8:cd:82:35:
         30:8f:6b:59:ae:1d:b1:11:38:a1:6c:82:3f:09:20:32:d4:3c:
         90:94:83:1b:2b:c6:ac:06:8f:5c:1b:77:16:bc:dc:4d:c3:98:
         0e:c8:1b:cf:b1:9a:dd:dd:49:3e:c0:bc:94:61:d2:b0:27:85:
         ea:75:73:d2:51:4d:06:11:77:43:a6:08:e5:ad:e7:a5:cf:1a:
         3f:2a:92:83:3d:2c:62:24:79:40:65:a3:69:e7:f8:dc:c6:f1:
         b8:b3:76:40:e7:bd:94:8f:bc:51:9e:33:be:3b:ba:30:56:cc:
         98:c7:f3:90:43:51:9c:e6:2d:68:bf:6e:1b:6e:af:15:27:72:
         ef:2e:3f:a0:cb:cf:a5:ea:d8:44:7b:81:b4:c8:46:b3:cc:e7:
         b1:cd:9e:76:ae:ab:11:0e:52:89:da:a4:01:f3:03:bf:4b:46:
         f4:7e:35:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:27 2026 by rpki-client