Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
File:                     dvcgGLQorSicn4WX43vKYUqhCaA.mft (raw, json)
Hash identifier:          RcEEbAFtkCnovH5ogX/EHh9nH0b0oNLnj8zeVx88xbY=
Subject key identifier:   37:29:9B:B1:6C:AE:37:0C:76:0D:A1:92:0C:E7:A3:54:A6:B6:27:92
Authority key identifier: 76:F7:20:18:B4:28:AD:28:9C:9F:85:97:E3:7B:CA:61:4A:A1:09:A0
Certificate issuer:       /CN=76f72018b428ad289c9f8597e37bca614aa109a0
Certificate serial:       01A0016F5017FC3B5C6D69D3BD946F706596
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
Manifest number:          7A
Signing time:             Fri 14 Aug 2026 18:01:07 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:07 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:07 +0000
Files and hashes:         1: dvcgGLQorSicn4WX43vKYUqhCaA.crl (hash: aN7uRy6rP7CrjD5TQH5JqIOiyq6ZUjolDUCrlLfBE2s=)
                          2: xs3iSBh200_EoCetOIrLYygCcuQ.roa (hash: NQKjQyiCL3pt+LnR0jXNZKqsq984PZkORPtaWm+NSuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:50:17:fc:3b:5c:6d:69:d3:bd:94:6f:70:65:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f72018b428ad289c9f8597e37bca614aa109a0
        Validity
            Not Before: Aug 14 18:01:07 2026 GMT
            Not After : Aug 15 18:01:07 2026 GMT
        Subject: CN=37299bb16cae370c760da1920ce7a354a6b62792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:22:39:51:35:6b:d4:d7:37:4d:2e:a1:bf:
                    8a:3b:7d:a6:39:6e:d9:60:13:06:f3:cc:64:1d:39:
                    d2:f4:15:d7:56:9d:ae:27:1f:cd:62:e9:cf:6f:79:
                    11:e9:ba:86:24:66:a2:b8:04:32:9d:5b:87:2a:42:
                    cf:92:cd:05:58:eb:94:e8:a0:bc:07:d9:72:b2:ad:
                    e3:cc:c3:63:80:9e:bf:bb:85:52:a6:66:1b:6d:9e:
                    38:b8:11:bf:cc:54:d8:bb:d8:96:dc:cd:18:d6:f1:
                    95:c8:bb:4a:21:cc:db:5f:91:78:4e:fd:a4:c8:5c:
                    99:62:18:5c:35:34:bf:10:a6:25:12:85:2a:bc:14:
                    32:9c:54:57:41:a8:b1:e3:b1:33:6d:2a:a8:a8:ad:
                    11:19:c3:3a:14:57:6e:57:19:44:89:fa:b4:c7:6d:
                    f3:5a:16:72:6c:c7:25:9c:b3:9b:af:f1:dd:55:83:
                    e8:16:ba:22:fd:64:29:d3:c5:77:4b:eb:de:7f:4e:
                    0a:d5:6f:2e:e8:cb:2b:c8:6d:1a:75:39:9a:4f:78:
                    2f:c5:bc:ea:b7:52:3c:04:2b:80:55:b1:8c:27:46:
                    fb:25:76:bb:ba:89:4b:c4:34:01:57:b4:20:ab:35:
                    f1:84:ec:5e:96:7b:ae:7c:20:12:cd:d7:77:be:e2:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:29:9B:B1:6C:AE:37:0C:76:0D:A1:92:0C:E7:A3:54:A6:B6:27:92
            X509v3 Authority Key Identifier:
                keyid:76:F7:20:18:B4:28:AD:28:9C:9F:85:97:E3:7B:CA:61:4A:A1:09:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:56:c1:86:68:d6:7f:a0:94:0f:5a:52:42:40:5d:66:9e:a0:
         f4:08:24:c1:a4:82:24:d1:b1:16:4b:2d:2f:23:0e:fc:26:a4:
         5f:b7:cf:f0:22:1f:52:85:49:7e:f4:7c:f6:34:74:a3:18:de:
         48:a2:1c:b6:5f:f2:af:e5:91:f9:d5:f1:95:60:36:b0:53:08:
         96:c3:f7:cd:7b:c2:97:00:0b:bb:4f:d6:94:32:2a:23:3d:8f:
         4b:7a:f9:ed:93:3c:9a:7c:2e:5f:bf:ab:96:0f:85:62:84:98:
         59:ac:bd:68:40:70:99:d0:d1:de:3d:ca:2a:7e:f6:7b:58:d2:
         f6:27:9b:33:0c:57:30:10:b3:17:3c:d7:f7:74:22:e0:07:0f:
         f7:09:2a:76:dd:a8:6e:b0:f6:65:e3:35:af:e3:cf:6c:c0:b9:
         37:b6:1b:3e:67:0b:fb:9d:d5:5a:0f:e7:49:e8:b0:d4:e7:73:
         b3:b0:3f:30:e7:78:01:07:c1:e3:49:94:ad:57:bf:93:64:be:
         97:aa:70:e4:0e:93:be:9d:64:c5:8e:d9:35:3a:12:18:28:00:
         63:c2:fd:72:d4:ac:ef:93:cc:79:37:5a:2f:00:7d:50:de:51:
         b6:63:83:3b:56:a2:25:a5:62:a0:d0:86:6c:2e:8f:04:1c:90:
         9e:f3:8a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:11:30 2026 by rpki-client