Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
File:                     DbD591Ww4wPMFtGmM_lYwDYDSUU.mft (raw, json)
Hash identifier:          8V/iVeWoof++FOTA8aurNK+fuv7HiPRkDp8J7EC0WYo=
Subject key identifier:   5E:FD:1E:C2:ED:76:72:52:5D:A6:93:E2:26:87:13:E5:7B:05:50:EE
Authority key identifier: 0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45
Certificate issuer:       /CN=0db0f9f755b0e303cc16d1a633f958c036034945
Certificate serial:       019E30729BC7B0D2E870247C6AA22F757389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
Manifest number:          0DF4
Signing time:             Sat 16 May 2026 11:01:17 +0000
Manifest this update:     Sat 16 May 2026 11:01:17 +0000
Manifest next update:     Sun 17 May 2026 11:01:17 +0000
Files and hashes:         1: DbD591Ww4wPMFtGmM_lYwDYDSUU.crl (hash: v9Q/SMuYojrgi6IUeDeNJBCAc3jMiqGSDcOBWADFTnU=)
                          2: YD6TzpC5R6Hp_v6ASOjqQ9toRco.roa (hash: c6e+XVaqZUDcD49245+mL48dQ3Qd5iEdgRHJAw8cJfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:9b:c7:b0:d2:e8:70:24:7c:6a:a2:2f:75:73:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0db0f9f755b0e303cc16d1a633f958c036034945
        Validity
            Not Before: May 16 11:01:17 2026 GMT
            Not After : May 17 11:01:17 2026 GMT
        Subject: CN=5efd1ec2ed7672525da693e2268713e57b0550ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:d3:62:3b:2b:03:6f:34:f7:a1:2f:d4:ee:
                    99:27:04:21:93:c1:fa:9b:8e:38:ca:76:c6:5c:19:
                    52:dd:1c:87:24:5d:b4:ee:e0:2d:ed:51:19:66:1e:
                    25:a8:b7:ae:06:bc:de:f4:1a:f2:2c:71:d7:9b:2e:
                    c5:1c:ed:a4:3e:97:e4:a0:15:02:32:c5:00:98:75:
                    be:e5:11:89:f8:91:ab:77:d4:b3:60:ab:2c:45:ec:
                    07:6e:89:f3:c6:24:d8:9c:11:44:45:b1:78:31:8b:
                    90:5a:c8:0e:ee:dd:3b:98:a3:71:9f:72:5b:31:42:
                    b7:a6:55:ca:40:7e:b4:e4:51:42:d9:64:85:57:0a:
                    7a:cf:77:da:c1:3b:1f:cc:87:8f:c6:fa:45:34:57:
                    4f:e7:21:8c:e5:15:66:d9:35:48:b3:8d:d0:4f:a9:
                    bf:97:a4:21:eb:f5:16:04:3e:f8:29:a6:f8:12:2a:
                    ed:bf:78:9f:a9:bf:b5:8f:5c:d8:56:0e:ce:b9:0f:
                    94:f9:9d:c4:8b:e2:2a:c1:81:9b:fd:df:c1:3f:c7:
                    53:e4:ad:e7:af:63:a9:98:75:7f:44:8a:bf:76:5f:
                    16:7b:7a:54:21:29:fc:8c:56:66:01:fa:9b:b8:27:
                    1e:8d:c8:9a:ce:7e:02:f8:45:68:49:f4:7c:33:d6:
                    64:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FD:1E:C2:ED:76:72:52:5D:A6:93:E2:26:87:13:E5:7B:05:50:EE
            X509v3 Authority Key Identifier:
                keyid:0D:B0:F9:F7:55:B0:E3:03:CC:16:D1:A6:33:F9:58:C0:36:03:49:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbD591Ww4wPMFtGmM_lYwDYDSUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/03afc6-88f5-4660-8015-64c9c2cc9609/1/DbD591Ww4wPMFtGmM_lYwDYDSUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:b0:5c:84:be:a3:37:07:19:62:5a:0d:33:58:65:b6:7b:ca:
         36:46:a9:15:8b:73:53:f0:9b:1a:b8:be:36:2f:19:cd:35:2a:
         df:1e:b0:c1:03:60:a2:ec:35:b4:d0:35:19:ea:ce:5e:b8:0c:
         38:53:75:37:28:0b:61:a3:43:f0:e0:97:6d:b5:89:fa:69:ed:
         2a:78:c6:ef:2b:3c:13:6a:bd:a8:1d:f8:b0:e2:a4:e0:77:37:
         b1:6c:15:e4:df:83:12:72:fe:c7:c8:0e:23:58:b3:7d:38:0a:
         14:00:8a:c0:96:ed:e9:d9:84:c1:8d:d6:96:03:12:92:66:59:
         5c:ef:72:32:40:25:82:d1:a0:f5:b4:df:b8:93:c8:b0:e4:b0:
         51:0b:e3:23:1e:7c:c1:54:94:16:cf:10:9a:c5:ad:64:3c:69:
         2e:4a:85:2e:56:03:ee:61:89:97:1e:61:0b:56:02:5b:33:f0:
         ba:c9:84:9e:66:c7:8b:0f:ac:39:37:1c:11:26:53:7c:95:6e:
         67:16:3c:2e:da:de:5a:e7:50:6d:d2:50:94:27:89:86:5f:2a:
         da:d4:fc:b0:d5:cc:12:94:09:f6:b1:65:91:8b:1d:c9:6b:35:
         ec:25:f9:98:80:c2:a7:78:11:0b:6e:f9:fe:0d:18:1a:b1:6f:
         97:0a:a2:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcpvHsNLocCR8aqIvdXOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjBmOWY3NTViMGUzMDNjYzE2ZDFhNjMzZjk1OGMwMzYw
MzQ5NDUwHhcNMjYwNTE2MTEwMTE3WhcNMjYwNTE3MTEwMTE3WjAzMTEwLwYDVQQD
Eyg1ZWZkMWVjMmVkNzY3MjUyNWRhNjkzZTIyNjg3MTNlNTdiMDU1MGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xrTYjsrA28096Ev1O6ZJwQhk8H6
m444ynbGXBlS3RyHJF207uAt7VEZZh4lqLeuBrze9BryLHHXmy7FHO2kPpfkoBUC
MsUAmHW+5RGJ+JGrd9SzYKssRewHbonzxiTYnBFERbF4MYuQWsgO7t07mKNxn3Jb
MUK3plXKQH605FFC2WSFVwp6z3fawTsfzIePxvpFNFdP5yGM5RVm2TVIs43QT6m/
l6Qh6/UWBD74Kab4Eirtv3ifqb+1j1zYVg7OuQ+U+Z3Ei+IqwYGb/d/BP8dT5K3n
r2OpmHV/RIq/dl8We3pUISn8jFZmAfqbuCcejciazn4C+EVoSfR8M9ZkiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF79HsLtdnJSXaaT4iaHE+V7BVDuMB8GA1UdIwQY
MBaAFA2w+fdVsOMDzBbRpjP5WMA2A0lFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUt
NjRjOWMyY2M5NjA5LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wM2FmYzYtODhmNS00NjYwLTgwMTUtNjRjOWMyY2M5NjA5
LzEvRGJENTkxV3c0d1BNRnRHbU1fbFl3RFlEU1VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7BchL6j
NwcZYloNM1hltnvKNkapFYtzU/CbGri+Ni8ZzTUq3x6wwQNgouw1tNA1GerOXrgM
OFN1NygLYaND8OCXbbWJ+mntKnjG7ys8E2q9qB34sOKk4Hc3sWwV5N+DEnL+x8gO
I1izfTgKFACKwJbt6dmEwY3WlgMSkmZZXO9yMkAlgtGg9bTfuJPIsOSwUQvjIx58
wVSUFs8QmsWtZDxpLkqFLlYD7mGJlx5hC1YCWzPwusmEnmbHiw+sOTccESZTfJVu
ZxY8LtreWudQbdJQlCeJhl8q2tT8sNXMEpQJ9rFlkYsdyWs17CX5mIDCp3gRC275
/g0YGrFvlwqiPA==
-----END CERTIFICATE-----
Generated at Sat May 16 15:39:22 2026 by rpki-client