Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File:                     DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier:          bYT6S3wusE+YaFvHsq1G8YaqD2YYUYPdMD0bcD8NX1M=
Subject key identifier:   E4:71:7C:FF:2E:7A:64:01:F1:F6:BA:E5:2C:72:A3:0A:29:F6:AC:C7
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer:       /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial:       019F129C9100F22649D8948A8607479F0958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number:          0190
Signing time:             Mon 29 Jun 2026 09:01:18 +0000
Manifest this update:     Mon 29 Jun 2026 09:01:18 +0000
Manifest next update:     Tue 30 Jun 2026 09:01:18 +0000
Files and hashes:         1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: Otj7VCiPr3OhcJI5ED5IF2AMIFni4yPeefIFLKclFJ4=)
                          2: G9qGP36oJL7nzstx5pUN2QUXe2Y.asa (hash: OGl/tgYi5QcUB5NdTXjApN3cJOZKiO0NBdSGKteHoOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:9c:91:00:f2:26:49:d8:94:8a:86:07:47:9f:09:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
        Validity
            Not Before: Jun 29 09:01:18 2026 GMT
            Not After : Jun 30 09:01:18 2026 GMT
        Subject: CN=e4717cff2e7a6401f1f6bae52c72a30a29f6acc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:6b:75:95:6e:2d:23:fc:e9:19:2d:91:f6:
                    c4:74:d3:f6:a3:eb:aa:51:1e:61:10:30:20:0b:e9:
                    41:7b:7f:4b:f1:3c:69:0c:76:9d:4a:e5:47:9d:4c:
                    b6:d7:a4:e0:58:af:d5:fb:8e:7c:22:c7:88:e5:11:
                    3a:c9:5d:04:d3:87:cb:b3:f5:1f:28:89:35:64:aa:
                    79:02:fa:44:cd:28:e2:b6:38:06:59:ff:95:2d:d6:
                    bc:6c:e9:03:e7:fa:07:01:dd:74:d8:f7:bb:6a:d0:
                    ec:a0:0a:ed:76:ed:a6:00:f2:8e:c9:92:50:f7:b6:
                    b2:d9:5b:ef:54:72:1a:a3:8d:f4:54:b0:b9:52:bf:
                    1f:ee:d3:7b:73:61:82:c3:fb:88:f0:f4:4d:06:61:
                    c0:71:36:0c:f3:df:a6:fe:b0:3e:50:cd:76:20:e8:
                    29:44:00:b0:e3:ea:96:d9:de:e4:c7:a3:11:42:55:
                    d9:aa:87:79:1d:10:b2:93:79:da:6d:c7:f7:4b:bd:
                    03:dd:13:b2:38:d1:65:30:c7:dc:b7:b8:d5:ea:03:
                    db:b7:dd:69:90:4f:96:ff:de:c6:7b:f7:29:f0:f4:
                    3e:66:b9:4f:17:43:d9:5d:d1:3c:42:f9:ae:cb:e9:
                    41:49:66:b3:87:64:59:20:2b:ae:8e:8e:f6:09:40:
                    b2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:71:7C:FF:2E:7A:64:01:F1:F6:BA:E5:2C:72:A3:0A:29:F6:AC:C7
            X509v3 Authority Key Identifier:
                keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:20:59:0b:e8:74:a8:23:0d:4d:4f:c6:33:41:36:15:1c:7c:
         0c:6d:f1:58:86:67:31:6c:38:9b:70:83:c4:b3:b8:e7:34:99:
         de:23:ad:6f:77:f4:ba:cd:dc:0d:21:c8:a0:f8:5d:30:8e:41:
         0f:8f:e8:61:d5:a6:02:f0:94:ec:11:75:d0:03:b9:7f:cc:70:
         60:b4:91:79:4e:52:a5:15:22:bf:24:1d:83:7b:59:f5:9a:ac:
         90:d2:2f:db:2a:84:01:37:c7:29:7b:87:9d:8d:cb:77:f9:62:
         7c:a2:01:91:0f:58:74:51:a7:5c:45:93:90:ef:42:f9:dd:8c:
         e8:d1:22:71:51:53:54:6e:c5:78:3f:00:c8:f9:48:17:5f:61:
         6c:67:b0:58:47:0c:22:8d:2c:27:f0:05:63:8c:19:33:dd:0f:
         6d:07:09:67:99:1a:83:bb:9d:56:c3:f8:49:35:7a:39:31:ea:
         11:4f:d0:4d:7b:92:8d:86:12:6e:47:64:f3:e8:34:c7:ae:29:
         84:f4:aa:bb:24:bc:f0:66:9d:91:1b:ee:96:6f:e3:d7:df:83:
         2e:8e:30:74:8a:6d:60:63:9d:9d:18:89:fb:82:bf:97:d7:54:
         9b:c0:85:6d:02:5f:02:d9:44:62:58:dd:7b:0f:d9:6f:e7:bc:
         2f:80:66:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:25 2026 by rpki-client