Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
File:                     DxgybgAap_xW-DUxMVN2-equCYg.mft (raw, json)
Hash identifier:          Z4DExNh2UrrbRo+ujRz/FZxXeydeuvA/Hi71htOSYnY=
Subject key identifier:   C2:41:4C:F4:C4:F8:AC:7B:9E:D8:4A:71:FE:3D:7A:DA:C3:20:A5:39
Authority key identifier: 0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88
Certificate issuer:       /CN=0f18326e001aa7fc56f83531315376f9eaae0988
Certificate serial:       01A0024A9E02CEF85BA5A63F0A67C2C09888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
Manifest number:          0C78
Signing time:             Fri 14 Aug 2026 22:00:39 +0000
Manifest this update:     Fri 14 Aug 2026 22:00:39 +0000
Manifest next update:     Sat 15 Aug 2026 22:00:39 +0000
Files and hashes:         1: 64Gcj0h8vNXf7GFNZxmMm2mfr1E.roa (hash: pu8wgjr4VrA4g+LsPAV0cojDn7FfUUvf2NSJDNpkiw8=)
                          2: DxgybgAap_xW-DUxMVN2-equCYg.crl (hash: JjGB6UXSqNkgWj/wmNTeTEB0gomYHj2rSHK/UpE4IQQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4a:9e:02:ce:f8:5b:a5:a6:3f:0a:67:c2:c0:98:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f18326e001aa7fc56f83531315376f9eaae0988
        Validity
            Not Before: Aug 14 22:00:39 2026 GMT
            Not After : Aug 15 22:00:39 2026 GMT
        Subject: CN=c2414cf4c4f8ac7b9ed84a71fe3d7adac320a539
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:11:40:fd:af:17:60:cc:8c:e3:f7:c0:ce:
                    6a:0f:ae:03:55:34:b0:c3:db:f1:c5:cc:c5:0a:ab:
                    db:60:33:c9:00:6c:e4:08:02:6b:4f:55:11:c5:0c:
                    67:8b:47:d4:74:31:5e:44:b6:f6:c0:ee:58:89:50:
                    a3:1b:ec:96:21:2a:ce:3e:f6:73:ff:e4:15:33:05:
                    8b:f7:0f:96:29:f0:18:84:a2:32:fe:12:04:21:37:
                    6b:1e:8b:e8:9c:47:57:7c:ac:91:87:d0:2f:de:79:
                    b7:28:3e:19:66:2e:d6:84:6a:20:6a:20:54:bb:5a:
                    d2:a7:d0:33:89:c8:aa:d5:4c:c3:25:a9:a7:36:7d:
                    f7:25:e0:a9:f3:5a:33:4b:99:5f:37:7a:85:35:c1:
                    54:d4:2c:10:1e:48:50:15:69:11:91:c5:01:46:ec:
                    7e:dc:a0:b2:48:fa:5e:af:5b:a0:45:b9:4b:14:61:
                    9b:84:78:94:a9:56:b0:59:05:fc:7d:b5:af:78:ee:
                    1c:13:c5:cc:f9:1e:fc:64:a1:5e:6d:41:e1:4a:43:
                    38:e2:fd:a0:52:8e:ef:28:f3:f0:dc:03:ab:e8:11:
                    33:0a:5e:b5:e7:56:83:a5:c2:15:c5:7e:bf:e4:07:
                    b7:77:b2:c3:bb:4a:84:14:67:5d:fe:be:3a:d5:e8:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:41:4C:F4:C4:F8:AC:7B:9E:D8:4A:71:FE:3D:7A:DA:C3:20:A5:39
            X509v3 Authority Key Identifier:
                keyid:0F:18:32:6E:00:1A:A7:FC:56:F8:35:31:31:53:76:F9:EA:AE:09:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxgybgAap_xW-DUxMVN2-equCYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/a7e45c-f297-4520-abe6-6b813693bc8c/1/DxgybgAap_xW-DUxMVN2-equCYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2c:8f:b3:c5:9f:87:03:2b:f4:60:54:1c:8c:12:a5:01:54:
         ec:88:5e:e5:17:a0:55:43:94:ed:2b:c4:42:1c:d0:8e:93:3f:
         c2:1b:fc:0a:5b:cc:1f:81:f3:aa:89:fe:e1:38:38:5e:01:e4:
         b9:d5:68:e3:46:f9:78:f7:fa:b1:17:4b:f5:b3:fc:4f:25:7f:
         08:e0:d7:cb:ec:a1:a7:88:87:10:8a:3a:12:65:ea:2f:ad:1d:
         bf:2b:5b:08:9c:53:bf:d1:62:99:39:2a:20:7f:12:09:43:d8:
         f9:06:97:09:ab:5a:38:86:f2:31:51:de:ac:7d:85:01:de:0d:
         5b:d5:c7:85:7c:36:8d:2a:fe:07:09:01:44:c2:9b:df:03:81:
         4d:c3:a2:d1:a5:53:24:2a:8b:db:de:49:5f:75:86:84:99:d5:
         20:ce:86:d6:b4:ca:62:d8:f5:33:d9:9b:7a:a1:90:3d:19:b8:
         4c:b8:42:09:d4:48:c8:6a:ca:c8:64:92:f3:68:c6:93:87:6d:
         e9:92:1c:6f:32:b8:57:db:9d:77:e5:47:82:56:8c:91:ba:e4:
         ef:09:d8:7a:36:f1:07:51:68:57:c9:ee:0f:bd:39:39:49:94:
         4c:b8:c6:ec:ad:67:a0:91:d4:7c:ce:c5:b6:82:cc:86:4e:a8:
         62:24:72:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:37:11 2026 by rpki-client