Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
File:                     Dv0crRIZAnVQiePKgLptfMxLm3E.mft (raw, json)
Hash identifier:          o5NW8so63twr3Rfc5vpvlFsVcKUT129FQJxoVOpZTxA=
Subject key identifier:   D5:D2:E4:60:8B:B3:BF:DE:60:37:B7:4E:C6:13:62:2E:5B:A0:EE:DF
Authority key identifier: 0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71
Certificate issuer:       /CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
Certificate serial:       019F197A942D275F28741044AFEF49CD4022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
Manifest number:          0F84
Signing time:             Tue 30 Jun 2026 17:01:31 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:31 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:31 +0000
Files and hashes:         1: Dv0crRIZAnVQiePKgLptfMxLm3E.crl (hash: 1P3rQHblPs2baWJ3jGN/ZFstAvIE+B0KNj+XpaDP1C8=)
                          2: Ync302nWoIDxqRaEpHli5zPb-l0.roa (hash: CuUUdJvVMWZ1G3401/kid+n0FU2EaOY59WBjrBRwy1o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:94:2d:27:5f:28:74:10:44:af:ef:49:cd:40:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0efd1cad121902755089e3ca80ba6d7ccc4b9b71
        Validity
            Not Before: Jun 30 17:01:31 2026 GMT
            Not After : Jul  1 17:01:31 2026 GMT
        Subject: CN=d5d2e4608bb3bfde6037b74ec613622e5ba0eedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:cf:c0:82:06:bc:39:a8:06:7b:be:05:46:85:
                    e3:58:71:5f:54:fd:db:1b:0a:10:4d:74:fb:a4:42:
                    ed:df:58:f4:dd:68:fc:85:6e:d5:b7:f7:28:c2:07:
                    38:81:3b:b8:93:2f:e8:a2:b4:7c:75:a2:83:ab:4d:
                    cb:a6:fd:9e:bb:8c:f7:c0:1f:3a:28:af:a0:41:8a:
                    05:da:22:67:60:8f:17:56:23:ac:93:0d:76:07:bf:
                    9c:53:bd:6d:42:a3:ce:37:ac:32:54:b2:96:65:66:
                    8d:05:d9:f8:1a:a0:3a:07:7b:8f:47:18:bf:59:b8:
                    5e:96:37:31:b0:e0:d7:bb:7a:37:6d:83:ee:50:f9:
                    f5:23:87:a0:35:a0:7a:bc:aa:3d:76:e2:46:84:e8:
                    7f:be:1e:42:e9:d7:f6:d5:ac:8d:c4:b4:70:ee:b4:
                    6f:0f:3c:92:c5:c7:a8:dc:9e:d1:0a:54:fd:8e:55:
                    79:36:bc:8c:3a:21:89:2d:3b:04:60:dd:d8:92:30:
                    c1:4f:b4:de:64:66:e9:85:49:c6:45:67:a8:af:5b:
                    9f:29:cb:8c:9f:6f:64:ec:42:c6:6a:2a:40:30:24:
                    70:b9:54:de:d5:df:5d:8f:49:30:90:35:4b:4c:cd:
                    b4:2d:e3:0a:89:da:30:0f:f0:12:88:7d:16:03:20:
                    0f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D2:E4:60:8B:B3:BF:DE:60:37:B7:4E:C6:13:62:2E:5B:A0:EE:DF
            X509v3 Authority Key Identifier:
                keyid:0E:FD:1C:AD:12:19:02:75:50:89:E3:CA:80:BA:6D:7C:CC:4B:9B:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dv0crRIZAnVQiePKgLptfMxLm3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/df99d3-5028-4361-b795-3af4a9463b77/1/Dv0crRIZAnVQiePKgLptfMxLm3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:20:0a:d8:5f:b4:20:d0:b1:b6:11:1f:47:e6:32:f5:82:de:
         21:a3:a4:f7:c5:62:39:e2:33:31:da:e3:26:01:6c:ec:d5:1f:
         9b:ef:91:13:a9:41:b2:40:41:5a:6e:7b:46:b8:23:11:85:4d:
         3a:43:e8:c6:ca:7e:1e:66:2f:17:ac:4a:6f:d3:4b:a3:d9:09:
         42:66:82:a2:37:60:90:6b:8b:76:79:39:f0:03:6b:12:56:00:
         df:73:7e:12:e4:37:77:e5:db:bf:37:5a:e5:0a:ad:41:e5:8e:
         b2:75:cd:98:ea:97:d5:1c:04:8e:b8:d2:3b:30:1e:a6:fa:76:
         f5:c0:31:6c:dd:3b:e4:f2:8c:14:ae:4e:b6:ec:1c:fb:66:08:
         29:5b:86:bd:b6:75:c8:19:69:e7:f5:e9:ea:e5:32:9d:e5:e6:
         de:c7:82:b9:39:98:e5:0e:19:e2:44:74:32:62:a7:de:04:70:
         c7:6c:ac:b7:10:e9:bb:fc:a9:8b:26:76:6a:65:9e:3e:a3:da:
         88:63:30:ce:64:12:aa:15:ec:9d:10:72:4a:1e:60:9e:ed:44:
         e3:ff:e3:23:0b:68:03:ea:20:f9:60:4f:79:c3:5a:b2:c1:ff:
         d6:06:4f:57:f4:40:31:ea:a6:30:30:77:b0:f6:1b:16:4a:12:
         3f:58:5b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:48 2026 by rpki-client