Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
File:                     dzAW-WK1v7DODq26fwhzCWUB4SM.mft (raw, json)
Hash identifier:          ZU3BnFqmMUCrgf2s1ny/Ll37JfvjaykfoIPqpXTWMuA=
Subject key identifier:   7D:C8:7E:79:75:C3:67:F0:F7:EA:B1:40:43:A9:91:B3:A1:3E:53:29
Authority key identifier: 77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23
Certificate issuer:       /CN=773016f962b5bfb0ce0eadba7f0873096501e123
Certificate serial:       019E28B90017D1DB7DD121B90E9477F36E5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
Manifest number:          071B
Signing time:             Thu 14 May 2026 23:01:13 +0000
Manifest this update:     Thu 14 May 2026 23:01:13 +0000
Manifest next update:     Fri 15 May 2026 23:01:13 +0000
Files and hashes:         1: bO5zh83JPBsDB9dYi7999N7x4VQ.roa (hash: 2nRlkOqwn2pz6pnUvZfg8RMKFwShSWGr7lN2y/FxSOU=)
                          2: dzAW-WK1v7DODq26fwhzCWUB4SM.crl (hash: 6Qoc+nBZw7TBLWRMoGJsMyl+Pr6DyNymPgdoikrdk/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:b9:00:17:d1:db:7d:d1:21:b9:0e:94:77:f3:6e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=773016f962b5bfb0ce0eadba7f0873096501e123
        Validity
            Not Before: May 14 23:01:13 2026 GMT
            Not After : May 15 23:01:13 2026 GMT
        Subject: CN=7dc87e7975c367f0f7eab14043a991b3a13e5329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cf:6f:c1:93:7f:16:7f:2d:18:9a:1c:7d:ff:
                    0d:23:07:41:8d:26:0e:69:06:fb:c2:86:32:96:65:
                    52:ee:11:18:e8:c3:e4:34:10:13:1d:96:78:2e:c6:
                    7b:7e:1d:3b:47:ed:8b:5b:48:a4:01:bd:df:b9:d8:
                    fb:4c:ba:be:aa:40:e2:da:e2:40:bf:96:5f:d1:fc:
                    5f:47:8c:01:ab:75:35:e9:91:2b:a8:f9:b1:86:ca:
                    a9:33:2a:61:92:03:ee:d8:12:b6:a4:2e:78:54:4b:
                    a8:bc:f7:19:82:da:96:83:4a:d6:6d:22:95:0f:50:
                    04:1e:fc:11:4a:5a:f6:70:3d:98:4a:5e:18:dc:72:
                    28:ff:3a:78:f0:ef:85:2a:89:55:2c:2a:fc:12:d9:
                    28:97:58:b7:35:ad:34:bc:b8:48:ed:b3:b6:14:eb:
                    5a:1e:e3:eb:91:52:64:15:01:49:05:1c:27:17:bd:
                    2d:5a:06:a4:b4:19:d2:1f:53:b8:7f:61:6d:b3:a8:
                    ce:de:bf:04:35:0d:01:20:18:cd:49:67:46:9c:81:
                    45:ed:1b:7e:4d:08:ab:d9:a0:d1:42:af:bd:ca:3a:
                    d8:9c:f0:5e:2b:67:3e:b0:70:92:c7:0f:7f:2c:b0:
                    bf:6d:eb:cf:e2:f3:72:6a:9d:a7:f2:50:79:51:c5:
                    b5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C8:7E:79:75:C3:67:F0:F7:EA:B1:40:43:A9:91:B3:A1:3E:53:29
            X509v3 Authority Key Identifier:
                keyid:77:30:16:F9:62:B5:BF:B0:CE:0E:AD:BA:7F:08:73:09:65:01:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzAW-WK1v7DODq26fwhzCWUB4SM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/626fb4-e8cd-45f0-8dc8-765e9c203be3/1/dzAW-WK1v7DODq26fwhzCWUB4SM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:a2:73:dc:45:b9:82:e4:c0:58:46:54:27:cf:29:38:d6:8f:
         e5:e2:b6:7a:6e:75:1e:e6:f9:fd:db:b6:34:43:26:39:ac:d9:
         a8:9e:6a:a1:59:af:4c:67:ab:24:11:89:56:36:5a:9b:a9:f3:
         97:a9:5c:71:06:5e:cf:40:c8:2b:cf:7c:92:af:0e:0b:54:62:
         42:96:9a:c1:9d:49:9a:79:d0:10:79:1f:b9:09:40:ae:b2:f4:
         d3:e8:7c:d2:0f:f2:48:76:a0:cf:95:2b:54:d8:7a:9b:ba:cf:
         f3:6e:04:65:32:3b:9e:32:66:26:4e:76:37:6f:4a:59:d1:20:
         68:71:8b:15:d3:35:ea:20:3b:ea:34:3a:ac:6a:1f:3e:3f:c1:
         5f:be:77:76:dd:4f:f2:13:ff:9c:ca:76:00:c8:22:f3:b8:df:
         e0:f2:72:9c:61:05:68:a5:d4:11:b5:39:5d:bd:ca:62:ee:ab:
         b9:7a:2c:61:c9:2c:88:7b:02:a8:b1:4e:7f:45:be:75:79:bf:
         6b:c2:6e:b3:cc:e0:e6:bc:4b:61:e4:9e:fe:8d:08:86:3d:32:
         09:ed:c9:c4:34:d7:13:d9:7b:a6:ee:49:8a:91:6c:af:f9:8d:
         c9:c2:51:c2:d7:46:eb:23:8c:6a:e3:23:db:aa:b0:f0:9c:22:
         08:68:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 01:40:49 2026 by rpki-client