Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
File:                     DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft (raw, json)
Hash identifier:          rhUUGl8XTzovyc7DgOk1t2+7J/+Zbcn/mNWdah2cC9Y=
Subject key identifier:   C8:0D:D8:EF:CB:95:E4:2A:8A:7F:1F:3C:95:C0:71:7D:C9:2F:A4:D8
Authority key identifier: 0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9
Certificate issuer:       /CN=0ef47d753d25289fd98794974aa0536010567bd9
Certificate serial:       01A00213903E00EB0B8C98D8883008AAFD16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
Manifest number:          19AF
Signing time:             Fri 14 Aug 2026 21:00:31 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:31 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:31 +0000
Files and hashes:         1: DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl (hash: Hf/qpnQWWXFAEnD9nh8TVNukGh2IGK5oxteOXr5OTMI=)
                          2: EsBecN6jyUPom0lR7fBtvD4EJAA.roa (hash: Pc0Q6aLby7aPGyIvtbMD/7dqAXIuzl/Uhstg+PAdUTY=)
                          3: j6rhc4S_F8h7VB3Awvt7ekIbcvU.roa (hash: IIIPT68Ml/iwXcRui+0OH6ULMVRAHZ1sDhy6Qzl+HUs=)
                          4: zVGqBsJcMqzZG82yUvWny_0AJM4.roa (hash: GXc9htJWfrH+QcttVkUrnH3WgYi63Hk8IALD1e7NyIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:90:3e:00:eb:0b:8c:98:d8:88:30:08:aa:fd:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef47d753d25289fd98794974aa0536010567bd9
        Validity
            Not Before: Aug 14 21:00:31 2026 GMT
            Not After : Aug 15 21:00:31 2026 GMT
        Subject: CN=c80dd8efcb95e42a8a7f1f3c95c0717dc92fa4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:ce:85:08:2e:40:49:9c:51:1d:f7:64:5e:
                    e6:75:56:17:c9:dd:9c:58:a6:a3:f0:9b:3e:43:76:
                    a6:32:b9:de:33:51:95:cb:42:2a:e3:9c:e6:1d:7a:
                    d0:22:34:5a:f9:70:9e:45:af:5f:35:44:e4:17:62:
                    e7:fb:86:fd:97:94:b9:cb:77:db:47:8e:54:d9:83:
                    65:73:8a:0c:03:6a:78:d4:76:1d:ca:2e:53:e8:39:
                    d5:7e:75:95:3b:7d:98:b1:d0:5a:fa:1b:4a:cc:32:
                    6b:1a:a1:77:1d:be:86:29:bd:56:aa:da:33:06:4b:
                    53:9f:51:e8:8e:8a:cf:32:dc:de:0a:05:ea:c9:44:
                    4b:7e:b1:77:08:d0:14:79:8e:d9:ea:39:ef:a2:1c:
                    d1:42:f8:44:42:00:c5:54:2b:b3:c0:bb:88:3b:f0:
                    ac:23:33:6f:c9:a0:cb:c7:09:ab:12:33:90:bf:e7:
                    ad:a4:1b:d2:83:38:10:70:34:4c:47:51:23:ab:2a:
                    15:f3:fc:8f:2a:93:8e:e9:cd:ff:b9:24:0c:b7:93:
                    c1:56:71:5c:87:7b:82:fb:b7:c9:21:9a:05:5b:f5:
                    f0:47:fd:ca:9a:07:51:4b:1d:84:60:9a:34:3f:9e:
                    38:bd:01:ed:5e:95:ed:34:8b:8d:9b:a2:93:6b:85:
                    41:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0D:D8:EF:CB:95:E4:2A:8A:7F:1F:3C:95:C0:71:7D:C9:2F:A4:D8
            X509v3 Authority Key Identifier:
                keyid:0E:F4:7D:75:3D:25:28:9F:D9:87:94:97:4A:A0:53:60:10:56:7B:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/dd8bc5-86ef-4135-bf1f-a4c8d9895a43/1/DvR9dT0lKJ_Zh5SXSqBTYBBWe9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4b:56:23:e7:aa:ac:86:8c:34:1a:b3:f5:b0:bb:79:9d:81:
         35:9b:37:41:0c:15:92:e8:61:99:32:20:c5:19:67:b1:53:4b:
         c4:24:60:ed:5d:d2:ed:b6:7d:84:72:01:5f:3d:46:f1:55:da:
         79:52:62:f6:fe:d4:46:63:5e:bb:4a:db:0c:35:38:3c:98:e2:
         ab:bb:35:22:6f:75:04:d3:68:89:dd:c5:dc:40:64:d9:74:9a:
         9a:85:4b:0d:ef:5b:cc:71:05:d7:9f:90:2f:5a:90:55:79:6b:
         a2:81:a4:48:13:c0:14:ff:af:89:74:a2:58:a9:19:e4:c2:b8:
         06:bb:a8:a3:35:aa:55:f8:52:d0:4d:0a:a6:bf:65:4b:15:06:
         9a:07:2e:8c:5a:c2:09:6d:c5:b8:dc:49:51:aa:02:82:b3:a4:
         08:01:76:8d:b7:69:08:41:9d:a7:a3:de:aa:f0:3d:87:42:11:
         17:47:3b:70:b4:26:f5:37:55:0b:44:65:9a:60:a9:15:a0:3f:
         b7:d9:c5:75:ad:23:bd:9f:26:52:70:48:f3:92:a7:56:55:6a:
         01:75:13:28:d9:70:81:6d:8f:7f:a2:1c:10:a0:77:60:76:4c:
         0e:7e:6c:d1:58:30:7a:a0:52:6f:db:e5:29:51:eb:1e:95:81:
         eb:f3:5f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:31:48 2026 by rpki-client