Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
File:                     DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json)
Hash identifier:          J4nuMjfZapo2mod7LkBdULzbXJKKygsK0qnNXrLCueY=
Subject key identifier:   59:54:4C:2F:9A:61:6F:9D:05:AD:2B:99:E1:09:11:A4:A6:A1:E9:79
Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14
Certificate issuer:       /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
Certificate serial:       019F10AE4C3DB802752179A5639DAB52C787
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
Manifest number:          018F
Signing time:             Mon 29 Jun 2026 00:01:25 +0000
Manifest this update:     Mon 29 Jun 2026 00:01:25 +0000
Manifest next update:     Tue 30 Jun 2026 00:01:25 +0000
Files and hashes:         1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: F/xm5h9qpQjBzm1F9c8h9lL/469yyOjPg1rDDavsPXI=)
                          2: G9qGP36oJL7nzstx5pUN2QUXe2Y.asa (hash: OGl/tgYi5QcUB5NdTXjApN3cJOZKiO0NBdSGKteHoOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 00:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:10:ae:4c:3d:b8:02:75:21:79:a5:63:9d:ab:52:c7:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414
        Validity
            Not Before: Jun 29 00:01:25 2026 GMT
            Not After : Jun 30 00:01:25 2026 GMT
        Subject: CN=59544c2f9a616f9d05ad2b99e10911a4a6a1e979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c8:89:71:31:1c:4d:b2:bc:18:83:4f:c1:c2:
                    b7:0a:6a:23:d0:68:9a:d0:52:99:52:41:df:fb:c0:
                    e8:00:d1:99:dc:b6:73:0b:b4:17:65:40:f5:b8:86:
                    8a:7e:b8:36:ba:5a:1d:15:4a:53:09:5d:60:19:4e:
                    9d:cc:32:9a:3b:ab:c0:37:d1:63:a1:91:e0:d0:d9:
                    51:a5:1e:fe:bc:83:70:42:de:78:cd:6e:34:75:de:
                    30:6c:89:a6:fa:f5:12:9f:32:70:d5:a1:f3:91:ff:
                    22:27:cc:64:45:d7:eb:b4:fc:80:e5:2a:27:16:ec:
                    15:b5:15:8a:c7:6b:6c:af:1e:1a:ce:25:57:ce:fd:
                    bd:34:82:29:57:fb:61:e5:3f:e0:7b:0c:af:cc:44:
                    15:cd:eb:f0:4b:c9:50:da:82:7f:8d:fe:c5:e3:1f:
                    15:1c:31:af:86:f5:98:73:0d:63:f5:b6:9f:5d:90:
                    54:32:63:29:14:8e:82:9d:e8:61:c2:1b:5e:56:ee:
                    46:2a:93:fb:44:eb:6e:81:8f:09:0a:e9:84:54:78:
                    c8:37:50:5e:35:34:2f:35:f9:12:14:3c:14:4e:b2:
                    7b:22:18:d9:f1:81:7a:d5:ec:95:ef:b1:bc:49:85:
                    62:e8:de:59:83:14:2d:8f:80:29:a6:2c:b7:be:ee:
                    bb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:54:4C:2F:9A:61:6F:9D:05:AD:2B:99:E1:09:11:A4:A6:A1:E9:79
            X509v3 Authority Key Identifier:
                keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:2d:36:5a:52:11:a8:99:bd:78:1d:b2:74:26:33:46:a6:93:
         c6:18:97:a9:73:78:e2:6a:f1:75:4f:d9:3f:7d:f9:fa:da:0e:
         45:35:eb:ed:bd:d4:49:0c:61:7c:4d:dc:c3:96:3e:3f:cd:de:
         72:04:cd:40:e4:cf:4e:2b:03:d0:0b:13:7a:eb:36:7b:a4:e0:
         3b:2d:f9:11:bc:f3:74:c4:d3:62:f7:4e:66:a7:42:d3:4d:6d:
         6a:46:10:e8:65:2d:ab:45:53:50:f4:ec:8d:67:60:e5:01:c1:
         f1:1d:8f:bc:05:28:f5:d0:2d:97:c6:2a:0f:28:26:06:b6:38:
         08:f7:53:20:af:5d:0e:da:63:c8:63:e4:55:d2:39:65:dd:9c:
         1e:a5:76:c6:ec:c6:72:00:28:05:e4:90:93:2a:16:56:02:4d:
         e3:30:83:7a:9c:50:be:16:25:fb:a3:1b:e3:d0:b0:e2:47:44:
         f9:91:31:63:5e:1f:98:8e:6c:f6:c5:8b:5a:4d:fb:b4:d3:33:
         cd:24:b7:5a:14:6a:0e:ed:af:29:1a:7e:db:b4:fc:a7:c6:55:
         3e:37:d3:3b:63:5d:fd:33:97:ac:82:9c:aa:30:de:54:b3:c8:
         16:47:95:a8:d9:a0:2c:c4:8d:33:e6:d3:ad:af:66:54:da:a9:
         63:41:9e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Qrkw9uAJ1IXmlY52rUseHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZTBjMGQ3MzA4MWQ3NTI5MTZiZTNiNmU2YzBhODdjMzBm
N2U0MTQwHhcNMjYwNjI5MDAwMTI1WhcNMjYwNjMwMDAwMTI1WjAzMTEwLwYDVQQD
Eyg1OTU0NGMyZjlhNjE2ZjlkMDVhZDJiOTllMTA5MTFhNGE2YTFlOTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8iJcTEcTbK8GINPwcK3Cmoj0Gia
0FKZUkHf+8DoANGZ3LZzC7QXZUD1uIaKfrg2ulodFUpTCV1gGU6dzDKaO6vAN9Fj
oZHg0NlRpR7+vINwQt54zW40dd4wbImm+vUSnzJw1aHzkf8iJ8xkRdfrtPyA5Son
FuwVtRWKx2tsrx4aziVXzv29NIIpV/th5T/gewyvzEQVzevwS8lQ2oJ/jf7F4x8V
HDGvhvWYcw1j9bafXZBUMmMpFI6CnehhwhteVu5GKpP7ROtugY8JCumEVHjIN1Be
NTQvNfkSFDwUTrJ7IhjZ8YF61eyV77G8SYVi6N5ZgxQtj4Appiy3vu676QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlUTC+aYW+dBa0rmeEJEaSmoel5MB8GA1UdIwQY
MBaAFAzgwNcwgddSkWvjtubAqHww9+QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTkt
ZmViODQyN2NmZTIxLzEvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTktZmViODQyN2NmZTIx
LzEvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgi02WlIR
qJm9eB2ydCYzRqaTxhiXqXN44mrxdU/ZP335+toORTXr7b3USQxhfE3cw5Y+P83e
cgTNQOTPTisD0AsTeus2e6TgOy35EbzzdMTTYvdOZqdC001takYQ6GUtq0VTUPTs
jWdg5QHB8R2PvAUo9dAtl8YqDygmBrY4CPdTIK9dDtpjyGPkVdI5Zd2cHqV2xuzG
cgAoBeSQkyoWVgJN4zCDepxQvhYl+6Mb49Cw4kdE+ZExY14fmI5s9sWLWk37tNMz
zSS3WhRqDu2vKRp+27T8p8ZVPjfTO2Nd/TOXrIKcqjDeVLPIFkeVqNmgLMSNM+bT
ra9mVNqpY0Ge1g==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:47 2026 by rpki-client