Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
File:                     dbeVBmFQocNn2rzPaclwqwxyMhU.mft (raw, json)
Hash identifier:          n852/Mixivemn/SGf85YMZ5QSo638q9KPQ1PhT+fjt4=
Subject key identifier:   33:DE:7F:6E:6A:48:5C:F8:5D:40:9B:43:3B:E5:6A:AA:74:A9:91:6A
Authority key identifier: 75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15
Certificate issuer:       /CN=75b795066150a1c367dabccf69c970ab0c723215
Certificate serial:       019FA0E05DC8AF329CE162E8B5CCF84A04D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
Manifest number:          0DB5
Signing time:             Mon 27 Jul 2026 00:01:26 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:26 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:26 +0000
Files and hashes:         1: 0T8fcmm1hsNnOmqM2PEgoAyliqU.roa (hash: 9ZfWKoxYg5iUkW9bq0QBmY+p7hBHHw7kGA3tl6yyKw0=)
                          2: FLA5zAJXuRYhVvLbMvHegLVx03k.roa (hash: ALcLJ5P9PXv6U4nYIysJQ7DHdsSCbcTf30882RyAGwc=)
                          3: QLKMe_jElWZCYxaDhAzkorlz3LQ.roa (hash: vuhA+iGQjke4jhUjZeVHGZ6IY30SRz7Sp3mzEHAQJQs=)
                          4: TSfqyIUxAgfu2d6E5vUEde-a71w.roa (hash: m9pFo8gt/WhMRWsNe6yus9/BFb/kzFEfeC7Fbw2hXyw=)
                          5: dbeVBmFQocNn2rzPaclwqwxyMhU.crl (hash: ai78icmN3vjvnPAJ3BKJTIrblCJw71+3arlx+xaGp88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:5d:c8:af:32:9c:e1:62:e8:b5:cc:f8:4a:04:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b795066150a1c367dabccf69c970ab0c723215
        Validity
            Not Before: Jul 27 00:01:26 2026 GMT
            Not After : Jul 28 00:01:26 2026 GMT
        Subject: CN=33de7f6e6a485cf85d409b433be56aaa74a9916a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f0:5f:a6:6d:37:79:73:a3:2d:2b:44:cb:38:
                    5b:a2:b1:7d:12:a5:c4:5d:34:ca:8c:f7:ba:fc:39:
                    b8:85:66:0b:28:23:86:c4:76:fb:d3:ed:39:22:47:
                    92:9d:74:cd:f9:6b:b2:00:dd:35:94:00:fb:98:72:
                    88:0f:08:90:83:7a:fa:f4:22:a3:72:d8:2c:62:8a:
                    0c:53:ae:07:e7:bf:99:8f:a8:3f:98:ce:49:2e:04:
                    11:e4:2f:64:11:b8:56:a9:7a:cc:ee:29:6b:91:4c:
                    6c:8b:d5:94:35:49:55:98:ed:c4:ad:4d:cb:bb:8b:
                    a0:82:73:d7:e3:76:13:98:4f:90:01:cc:a4:25:a1:
                    5b:7c:63:e4:99:e3:bd:83:ab:54:73:22:fd:60:54:
                    ff:ee:1b:2f:0a:2c:13:b2:5f:aa:5a:ae:65:ed:70:
                    4a:11:b4:fe:b2:1e:e0:1c:d4:a4:ae:c9:1e:cc:2e:
                    ce:63:c0:5e:87:2a:8d:7f:19:ae:13:21:c5:a6:d1:
                    17:a4:58:3f:cd:6b:4d:2b:6c:9e:65:3a:c7:10:bd:
                    d8:f1:f5:72:b5:83:f4:1f:91:a7:43:51:37:65:b8:
                    51:a8:0f:6e:90:39:4c:ce:8c:82:cb:c2:03:57:db:
                    be:53:26:cf:17:b8:0b:b6:63:0b:f6:17:af:e9:1f:
                    28:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DE:7F:6E:6A:48:5C:F8:5D:40:9B:43:3B:E5:6A:AA:74:A9:91:6A
            X509v3 Authority Key Identifier:
                keyid:75:B7:95:06:61:50:A1:C3:67:DA:BC:CF:69:C9:70:AB:0C:72:32:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbeVBmFQocNn2rzPaclwqwxyMhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/466aab-a470-4344-a367-547be4cfa457/1/dbeVBmFQocNn2rzPaclwqwxyMhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b6:93:cc:ef:d6:a7:75:d0:8a:1f:6c:1f:95:95:8e:a6:99:
         6d:e0:15:fc:ee:92:fa:18:39:26:0d:24:7e:9f:e6:7a:15:c2:
         e6:6f:83:d6:4f:e9:e5:6f:2c:bf:ea:bc:ed:cf:dd:ca:d1:0a:
         f4:27:e5:f2:32:e5:bf:bd:d4:b8:f0:a0:68:a0:be:2c:d7:11:
         bf:7f:67:04:4d:f5:7d:b9:60:58:77:04:27:d2:be:7f:dd:d0:
         67:91:9d:ee:6b:cb:6d:cf:0c:cb:76:58:53:c5:2a:4c:d7:57:
         cf:cd:0d:05:26:24:86:89:e1:f5:01:9e:05:61:45:01:04:11:
         4b:76:91:bb:a7:90:58:d8:64:f7:44:e8:61:1e:c3:0d:9a:c4:
         f9:e7:1a:55:15:5d:00:a2:e0:84:67:f6:40:9d:a3:4c:d2:4c:
         04:ad:4d:eb:ab:78:2e:78:c6:99:64:6c:48:56:1c:da:05:e5:
         01:79:87:74:0f:f3:94:94:31:a6:5c:49:e7:2a:82:0f:af:77:
         78:1f:73:c0:aa:18:38:45:7d:b5:9a:23:78:62:c2:b5:93:d4:
         5f:af:c6:2d:46:3d:53:12:85:23:ff:fd:c2:ed:ff:1d:c0:77:
         d6:25:d3:ba:ae:d7:96:b8:07:36:bd:d2:85:10:0e:6f:af:67:
         8d:7e:f7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:11:40 2026 by rpki-client