Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
File:                     DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft (raw, json)
Hash identifier:          z26hsvwSp7ewAzF2MV5b6dT1fYxmO3BuDagdyLyyRUE=
Subject key identifier:   4D:93:D5:C3:83:76:72:77:02:B3:5E:81:F2:9A:45:C9:26:F3:02:5C
Authority key identifier: 0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7
Certificate issuer:       /CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
Certificate serial:       01A08C0D3EAA36E479B7479018B426E62FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
Manifest number:          01E5
Signing time:             Thu 10 Sep 2026 16:01:13 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:13 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:13 +0000
Files and hashes:         1: DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl (hash: 66BqCkWlLpVQkfxq9oR5///xCMppChuOFAQE4s+NbPg=)
                          2: u3zxwv8aiDPFhl4Oxz0_bf9g92U.roa (hash: wBX3vONdNDvp84LOZvpcknzsgcTIkj6k0n194mkJDS8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 16:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:3e:aa:36:e4:79:b7:47:90:18:b4:26:e6:2f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
        Validity
            Not Before: Sep 10 16:01:13 2026 GMT
            Not After : Sep 11 16:01:13 2026 GMT
        Subject: CN=4d93d5c38376727702b35e81f29a45c926f3025c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:58:52:31:d2:de:1c:f6:fb:97:d1:e3:ce:3b:
                    c9:32:53:96:af:2a:87:1a:e4:0a:38:ac:45:88:70:
                    f5:40:da:1e:00:fb:80:34:19:69:24:fe:9d:26:76:
                    18:ec:f1:6a:34:47:6d:a8:33:57:93:a6:71:94:9e:
                    40:84:61:0d:e2:45:8b:27:6b:86:12:11:a8:9a:92:
                    d8:4b:54:0b:94:2f:2e:a9:da:cd:bb:7d:ee:0d:21:
                    8d:bc:29:4f:13:43:ba:a8:4b:ca:3a:78:58:65:6a:
                    73:93:59:b6:f8:2e:b6:90:00:5a:e8:f8:93:97:27:
                    44:c5:ff:8b:a5:11:0e:3a:f2:47:75:e9:d9:9d:4d:
                    8b:e9:f5:14:93:6f:bd:61:81:2d:c0:ca:c7:87:69:
                    2f:ed:a8:9b:80:37:36:df:8a:a8:18:96:a3:1a:35:
                    64:f5:9e:87:03:09:10:2d:db:43:85:b7:eb:2e:a2:
                    34:55:59:6e:85:6b:a3:aa:28:12:85:b2:0f:ba:a9:
                    39:00:b9:f6:dc:35:a0:78:b8:71:ad:9e:24:44:d2:
                    3b:e1:36:65:9c:dc:89:48:79:41:67:61:82:24:3c:
                    74:a2:15:7d:25:65:8e:6a:ca:cf:1d:41:9d:32:00:
                    ef:e8:63:5b:9c:ff:2d:4f:5e:f4:39:96:52:8c:40:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:93:D5:C3:83:76:72:77:02:B3:5E:81:F2:9A:45:C9:26:F3:02:5C
            X509v3 Authority Key Identifier:
                keyid:0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2a:29:b6:c5:3f:97:2f:57:34:ae:4f:c1:ef:91:b0:f1:ec:
         c6:6c:cf:5c:0a:a8:31:58:a4:da:4d:5a:05:f9:c6:e4:a8:03:
         29:f9:b5:88:f6:61:79:39:b1:ee:89:8d:c0:d7:5b:da:97:1d:
         9b:75:34:53:96:07:68:09:6b:9c:94:d8:bf:c2:e0:70:54:67:
         a9:5c:36:c7:ff:fc:45:4a:22:39:f8:0b:64:88:8a:22:d4:4a:
         6b:3c:53:7a:6c:35:16:b9:84:d8:23:76:84:fb:96:66:cc:26:
         ea:46:da:eb:04:8e:be:01:08:76:6b:ef:86:14:0b:21:be:3a:
         59:a9:25:83:f4:5e:d5:42:e2:72:82:e6:dc:20:26:9b:29:07:
         c3:b8:d7:2b:51:56:72:8d:26:9d:ca:05:7b:ca:9e:86:e6:df:
         0b:39:9d:f3:6b:36:39:c6:de:e2:54:e5:c8:fa:e3:2d:c0:47:
         e6:67:cc:88:ee:b1:16:18:d0:ae:a2:39:11:3c:0b:b8:60:76:
         e9:cf:03:2d:9f:ed:78:35:48:41:78:e7:21:fd:2c:29:ed:5c:
         eb:66:fc:d2:f7:8d:fd:35:18:5a:20:2d:8a:85:5d:78:e7:5d:
         43:be:f8:dc:cd:3a:31:d5:7c:92:c1:2f:1e:06:7c:85:16:0b:
         9c:27:76:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:39 2026 by rpki-client