Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File:                     DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier:          XMNG2833ELt8pkd3A1DuxCv1buQJHUdVeZRn8xwDFIc=
Subject key identifier:   97:B5:28:51:7D:35:43:7D:D6:D0:D5:09:CD:2E:91:28:9C:81:1D:BF
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer:       /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial:       019F122EC3C209395CCAB00097ABE59376D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number:          148A
Signing time:             Mon 29 Jun 2026 07:01:22 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:22 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:22 +0000
Files and hashes:         1: 1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa (hash: GVSG8HQq960x0d4CpK5jN+FSCHq1SzLhEkFhDXdwhwI=)
                          2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: ukkfBFYwFS+DJEdVuCthjrfzMkuw0WcWqvJaF4TCOUg=)
                          3: Pk5JLOSd1QInAh2OTvMfyyR1NPI.roa (hash: O7rw9h1GQCgx5zvERGlnO4YLbgkL7RaVJgOWvuy279I=)
                          4: oVjc2gbj8Z3HA7eAzKIRnl2lQMA.roa (hash: zAAZk1U4VBtTI0cONSxWT3e4cbR3Hkt4vRra+VHSqCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 07:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:c3:c2:09:39:5c:ca:b0:00:97:ab:e5:93:76:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
        Validity
            Not Before: Jun 29 07:01:22 2026 GMT
            Not After : Jun 30 07:01:22 2026 GMT
        Subject: CN=97b528517d35437dd6d0d509cd2e91289c811dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:12:ee:18:5e:fd:d5:86:66:50:23:99:c7:0c:
                    fe:25:64:34:62:14:fb:ff:86:1f:fe:fb:b4:59:8f:
                    42:fb:1c:22:70:23:40:a3:b7:10:00:33:71:55:e2:
                    9e:f8:bc:b7:9b:09:98:38:b8:ab:e5:0e:ea:84:a5:
                    87:d6:74:4d:6b:3d:5a:95:1a:0d:5e:27:15:cc:46:
                    c6:e0:4e:1b:23:9e:45:06:52:a4:2a:f4:e5:d4:6a:
                    c9:47:56:8f:ad:7a:96:e5:4b:53:13:84:01:fc:44:
                    2b:61:8c:23:e2:31:cd:86:4b:e0:f7:17:38:80:f5:
                    4e:5b:06:21:67:ea:6e:ae:49:65:99:48:74:41:67:
                    8a:37:22:00:99:e6:09:87:6b:2d:b1:9e:39:2e:09:
                    81:d5:b1:56:25:52:ce:c7:63:71:6d:20:d4:0b:e1:
                    68:40:d2:f8:ae:3b:02:e3:c1:8f:46:c0:03:c2:e2:
                    d5:3e:68:76:ac:2c:da:85:f6:c5:47:06:76:36:cd:
                    44:7e:76:47:86:dd:59:a1:6a:32:a2:3e:bd:36:76:
                    04:f3:a5:11:a4:8a:3e:96:25:56:0a:89:7f:a8:c8:
                    a9:5a:47:04:de:3c:4f:80:95:e7:c2:be:9d:61:84:
                    72:4c:0a:e8:97:ab:ee:2b:b1:b9:a7:6c:9b:ff:7d:
                    41:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B5:28:51:7D:35:43:7D:D6:D0:D5:09:CD:2E:91:28:9C:81:1D:BF
            X509v3 Authority Key Identifier:
                keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:23:4f:d3:a4:58:f0:cc:68:ee:06:6c:d1:5e:56:27:ef:94:
         de:4c:e1:72:fa:7c:80:d0:51:1c:1c:23:74:70:08:57:6d:29:
         c6:06:6d:ee:0b:c8:8d:59:dd:6c:1a:fd:31:77:5b:d2:14:ab:
         c5:16:5e:34:36:aa:0d:30:98:65:31:38:6e:bd:51:7a:11:83:
         71:50:5e:bc:4f:d9:59:a0:5a:42:ca:a3:56:87:45:ed:2d:7a:
         0a:f2:57:da:04:5c:0b:bf:f3:b3:cf:8d:85:6a:23:33:30:b5:
         50:4e:28:68:32:07:89:1f:18:62:50:1c:fa:71:90:d3:63:f2:
         95:a5:dc:fb:34:6b:96:1f:f1:4c:c0:10:b6:a6:20:bd:ed:5f:
         28:78:ac:85:f1:03:13:3d:58:02:99:94:be:ad:11:82:0a:d1:
         e8:b3:04:f4:6b:e6:10:51:cf:79:49:24:9e:ed:fa:96:c6:27:
         06:2c:fe:37:78:88:21:6e:ec:09:17:45:35:d7:6b:bc:e8:67:
         6f:e5:3a:fc:e3:82:80:28:33:80:5f:5a:0e:75:6e:d1:a4:18:
         1c:24:a0:2a:62:76:2e:b7:5c:25:65:d8:a1:a6:c5:89:47:c2:
         e9:76:d1:ef:a9:c4:45:ff:d7:ad:9b:4d:e6:04:c0:de:de:90:
         ac:a1:ad:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SLsPCCTlcyrAAl6vlk3bQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3
MzgzOGUwHhcNMjYwNjI5MDcwMTIyWhcNMjYwNjMwMDcwMTIyWjAzMTEwLwYDVQQD
Eyg5N2I1Mjg1MTdkMzU0MzdkZDZkMGQ1MDljZDJlOTEyODljODExZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xLuGF791YZmUCOZxwz+JWQ0YhT7
/4Yf/vu0WY9C+xwicCNAo7cQADNxVeKe+Ly3mwmYOLir5Q7qhKWH1nRNaz1alRoN
XicVzEbG4E4bI55FBlKkKvTl1GrJR1aPrXqW5UtTE4QB/EQrYYwj4jHNhkvg9xc4
gPVOWwYhZ+purkllmUh0QWeKNyIAmeYJh2stsZ45LgmB1bFWJVLOx2NxbSDUC+Fo
QNL4rjsC48GPRsADwuLVPmh2rCzahfbFRwZ2Ns1EfnZHht1ZoWoyoj69NnYE86UR
pIo+liVWCol/qMipWkcE3jxPgJXnwr6dYYRyTArol6vuK7G5p2yb/31BNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJe1KFF9NUN91tDVCc0ukSicgR2/MB8GA1UdIwQY
MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt
NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3
LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyNP06RY
8Mxo7gZs0V5WJ++U3kzhcvp8gNBRHBwjdHAIV20pxgZt7gvIjVndbBr9MXdb0hSr
xRZeNDaqDTCYZTE4br1RehGDcVBevE/ZWaBaQsqjVodF7S16CvJX2gRcC7/zs8+N
hWojMzC1UE4oaDIHiR8YYlAc+nGQ02PylaXc+zRrlh/xTMAQtqYgve1fKHishfED
Ez1YApmUvq0RggrR6LME9GvmEFHPeUkknu36lsYnBiz+N3iIIW7sCRdFNddrvOhn
b+U6/OOCgCgzgF9aDnVu0aQYHCSgKmJ2LrdcJWXYoabFiUfC6XbR76nERf/XrZtN
5gTA3t6QrKGtmw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:39:56 2026 by rpki-client