Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File:                     DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier:          FbfsvR5FC/r5+3yMX2/1OqFMqgvlIXhkh9grNlfDdt0=
Subject key identifier:   07:7F:37:A6:B4:03:1F:6B:C4:09:57:AC:25:2B:9C:0D:E5:B4:8A:24
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer:       /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial:       019EFCF2B353DF4A7EA24E30848C16D22739
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number:          01F9
Signing time:             Thu 25 Jun 2026 04:03:44 +0000
Manifest this update:     Thu 25 Jun 2026 04:03:44 +0000
Manifest next update:     Fri 26 Jun 2026 04:03:44 +0000
Files and hashes:         1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: WLkm/0E0GVQ/+EsJ/nqScJjG8CHVpH4T78rcOSUp9zY=)
                          2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
                          3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:f2:b3:53:df:4a:7e:a2:4e:30:84:8c:16:d2:27:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
        Validity
            Not Before: Jun 25 04:03:44 2026 GMT
            Not After : Jun 26 04:03:44 2026 GMT
        Subject: CN=077f37a6b4031f6bc40957ac252b9c0de5b48a24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:d3:17:62:8f:89:ea:27:88:e9:38:71:05:
                    93:b3:17:98:da:8b:bc:3f:42:a3:22:67:61:fc:f3:
                    8d:80:c8:3f:fc:34:41:b1:90:52:c7:ee:51:f9:08:
                    18:c7:60:ad:94:34:9e:80:65:cf:f4:d2:8f:68:54:
                    f3:c2:2d:b1:76:ed:1a:b0:d6:16:26:8b:5b:15:a2:
                    de:ba:14:6f:47:e5:1e:28:75:ee:eb:fb:04:80:80:
                    b8:32:d8:07:53:b0:a7:55:49:af:15:fe:65:cb:39:
                    53:7f:e0:cf:ac:17:b2:ce:f6:f6:4d:f3:84:4e:16:
                    8e:ce:d6:44:72:03:30:00:83:b1:ad:4e:9a:d7:a5:
                    b4:8c:01:a7:13:44:d1:bf:6c:6c:01:ab:8d:9b:75:
                    59:93:aa:6c:c3:f6:32:64:4a:f0:19:1a:15:fb:a5:
                    ce:d8:53:49:1c:8b:d4:47:2c:c4:f0:f5:52:ca:b7:
                    51:bf:fe:b8:c8:15:97:e8:93:a8:5c:d1:b7:ec:f0:
                    d6:de:c5:30:02:76:1d:3a:de:8c:98:f0:a4:e4:86:
                    bf:a4:50:08:29:9e:2c:d0:20:2a:3c:0f:b0:ae:ef:
                    90:d7:1b:d5:98:9e:98:7b:a7:d0:5e:f0:2f:d9:9b:
                    a9:d7:6e:e7:6c:ff:f3:d7:f6:3a:4a:22:b0:bb:a5:
                    1f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:7F:37:A6:B4:03:1F:6B:C4:09:57:AC:25:2B:9C:0D:E5:B4:8A:24
            X509v3 Authority Key Identifier:
                keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ec:c9:49:c4:59:4b:d2:59:cf:bf:bd:fd:e9:00:f3:ac:7f:
         85:36:89:c5:2e:e5:be:fe:d3:c1:be:54:36:55:86:39:ba:df:
         97:97:54:cc:e6:82:12:87:f2:0f:9a:10:4f:7e:87:17:ce:96:
         c0:01:c6:f1:a3:69:21:ca:17:3f:c3:49:06:5b:77:33:8f:96:
         6a:1b:79:6f:7b:ac:ed:14:0b:4a:ad:84:2b:a3:ab:4d:f0:e9:
         4e:ed:f2:79:0d:81:90:69:13:b2:06:77:35:6e:4e:58:e4:30:
         dd:1c:98:17:be:3c:d1:96:5a:f3:d3:2c:23:c0:c8:88:46:9c:
         3f:1d:6c:b2:01:b5:de:d6:ab:93:0d:31:a9:50:b1:87:21:19:
         6f:e3:5e:79:ca:00:75:31:c3:73:ad:ef:e8:63:30:5d:04:a5:
         d5:af:fb:fc:9a:1f:5b:f3:a0:19:8f:23:74:d0:00:04:4b:3b:
         2b:c9:f3:6b:b0:ea:a7:87:62:95:04:78:3b:0f:81:e9:28:b6:
         81:4b:b4:26:c2:2e:04:04:6d:cb:ff:99:d8:bd:9b:06:89:3a:
         8a:7b:b1:fd:0b:92:74:67:fb:46:ad:a4:91:a4:ba:46:21:e3:
         6f:81:85:c0:d3:67:4f:33:79:eb:d8:23:f2:3a:f1:fa:58:cb:
         4d:d1:22:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:29:19 2026 by rpki-client