Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File:                     dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier:          muj20H9PFIY8Cu9MGKgto1zoCWtzfYQWdPrH3MxiYVM=
Subject key identifier:   67:11:4F:C3:E6:D3:BA:D2:39:54:50:B1:AF:C0:3F:63:0F:45:0A:70
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer:       /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial:       01A003CBA770292766D4E4C5FCFDF7DBD464
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number:          1A03
Signing time:             Sat 15 Aug 2026 05:01:13 +0000
Manifest this update:     Sat 15 Aug 2026 05:01:13 +0000
Manifest next update:     Sun 16 Aug 2026 05:01:13 +0000
Files and hashes:         1: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: kbhU0OOW+DS0hv/q9fS8HWvsYIwOhr7k1PS360NL10Q=)
                          2: hPEOUrTaqxkP0HraBv5tFWum52o.roa (hash: a68ZRNdry4Fa8CMUTj7dyBiReCufFH2K20dWi6+LdmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:a7:70:29:27:66:d4:e4:c5:fc:fd:f7:db:d4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
        Validity
            Not Before: Aug 15 05:01:13 2026 GMT
            Not After : Aug 16 05:01:13 2026 GMT
        Subject: CN=67114fc3e6d3bad2395450b1afc03f630f450a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:73:2e:df:70:91:be:cd:7c:6f:28:08:d0:57:
                    90:0c:2c:a8:a1:ae:39:5b:6d:3b:56:b3:df:41:56:
                    76:de:ed:81:fa:4e:df:6d:28:0b:cb:94:54:56:0e:
                    20:98:88:2c:9c:8a:5e:52:d6:c1:d1:64:5c:74:33:
                    96:e5:40:cf:fb:9f:77:dc:e0:e2:d9:f5:07:d2:02:
                    77:57:61:06:a5:69:40:79:f9:4f:3c:a8:0f:9c:43:
                    8b:12:36:a5:12:75:4c:aa:29:7e:4a:b6:fa:f6:87:
                    61:88:53:1b:a3:d0:7d:de:6d:a4:3d:a0:29:fb:f7:
                    a8:2e:e9:6a:ce:04:be:8e:4b:ed:43:4d:57:6a:b4:
                    9e:46:80:0f:2f:21:a8:1c:a6:d1:82:ef:eb:de:b5:
                    df:10:1f:8d:1a:81:46:30:ad:79:0f:20:3b:5a:65:
                    de:48:48:d7:b3:a7:d8:30:1e:1a:25:87:60:b2:c4:
                    1e:a5:e7:46:8b:ca:ef:e0:7c:16:33:8c:63:2f:88:
                    3a:b7:59:85:f0:72:ff:35:e4:68:7c:d0:b9:bf:e2:
                    a8:4b:86:c0:03:e4:98:e6:14:11:4c:7e:0f:13:99:
                    ba:6e:a6:d4:c4:0c:1a:3f:6e:6c:74:b0:8b:4c:20:
                    f3:a1:e0:d9:b1:f0:9a:3a:d7:ad:20:40:08:82:3b:
                    79:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:11:4F:C3:E6:D3:BA:D2:39:54:50:B1:AF:C0:3F:63:0F:45:0A:70
            X509v3 Authority Key Identifier:
                keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f7:b1:c1:57:49:64:e6:54:7c:c2:0e:d5:97:62:f5:f5:d4:
         dc:4e:03:b7:d7:82:ef:49:66:1b:e1:2d:a5:c0:4f:2f:94:f9:
         3f:50:f8:b1:ea:86:3c:ac:ad:f1:ad:c1:7e:ae:86:c8:cd:99:
         66:cf:89:f5:24:d4:ad:2d:f9:d7:08:7d:30:c1:6e:b1:40:0e:
         80:e0:67:44:f7:de:5f:11:e3:11:49:c5:58:c4:79:28:b6:0d:
         a5:0b:c9:3f:db:de:21:0d:f4:9d:ce:9a:fd:5d:44:9b:dd:05:
         6d:03:ea:6f:c1:44:b9:77:bd:d6:90:f3:80:68:0b:dd:ca:0d:
         eb:96:01:e9:1b:43:29:2c:7b:c2:e4:e3:a2:af:a7:38:71:17:
         e2:bf:ed:3a:9c:2c:5d:ae:36:0d:05:52:93:ed:08:28:e6:cd:
         f1:9d:f3:87:23:35:b5:f2:2c:5e:f0:fb:4a:8b:c2:2f:21:46:
         c9:c5:96:d2:b5:46:d4:fe:13:a2:4f:71:6d:43:cd:57:9c:9a:
         61:2b:a3:72:1d:f9:48:1b:52:89:01:a5:1d:a6:a8:85:5c:83:
         7b:68:b4:32:56:14:f7:bb:39:5a:05:1e:5a:7d:ac:7e:96:37:
         71:a0:43:4f:31:9f:d0:59:28:47:3f:b9:db:24:57:e0:a9:bf:
         11:bb:c1:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 09:36:11 2026 by rpki-client