Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
File:                     DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft (raw, json)
Hash identifier:          3FtM32CGocXDUEq58CXslb2mVR1fliz60IrdpX1b28o=
Subject key identifier:   31:09:75:1E:C0:4A:42:7A:8E:52:9F:B5:8C:57:81:E4:09:25:A8:D2
Authority key identifier: 0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5
Certificate issuer:       /CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
Certificate serial:       01A001DD3F6A4E2C5232CD623456FAFECFF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
Manifest number:          1A02
Signing time:             Fri 14 Aug 2026 20:01:11 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:11 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:11 +0000
Files and hashes:         1: DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl (hash: Rmnae4mgWuGM5yFLdVxUt20j/xSxh7CMLuA2+YQAFTA=)
                          2: Ty_PZDqaOmeFjLIdr3QFueerKIM.roa (hash: mfeK6p+b2jXbJTu7RkO60pgbrZY/WThNdE0YkaHIazA=)
                          3: ZK_lplNOHoj8XGWdtaGMmSrc3x0.roa (hash: /qdKs+yTlrC/OXEPfuDp9SEn7i6+ObqNyY75S5FZQO8=)
                          4: _7jylL9q9B68bc5gOBCT4NAKAwE.roa (hash: udwwApN1RRRAB/0kSZzWjgDibuhxWbwtgPuXqFkvmuE=)
                          5: cpElJSiXGO7jJAVo9S1jen5uhjQ.roa (hash: jXHD1yWMKx7op/sh3fiD9gaMHojOuxsjiA1ioAXvW84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:3f:6a:4e:2c:52:32:cd:62:34:56:fa:fe:cf:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d9302d546e068c2fd7677d9d5200add36c8bcd5
        Validity
            Not Before: Aug 14 20:01:11 2026 GMT
            Not After : Aug 15 20:01:11 2026 GMT
        Subject: CN=3109751ec04a427a8e529fb58c5781e40925a8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ea:8f:05:0d:69:00:bf:83:fe:70:05:e1:28:
                    59:96:26:05:4a:5e:c5:b5:bf:39:37:49:a6:fa:73:
                    a4:39:59:06:be:e8:c6:d7:e6:df:54:1f:4a:4e:ec:
                    1e:47:06:75:05:dc:2d:1c:15:30:68:59:b0:56:3e:
                    19:32:b4:66:b3:b1:30:7f:9b:ad:21:8e:83:a4:ef:
                    e6:ef:c1:14:93:2a:69:6b:1a:1b:6e:48:64:9b:67:
                    6f:84:4d:9b:2a:c5:2d:31:98:6a:94:99:1f:94:84:
                    6d:a1:ed:20:32:b4:bd:c9:1f:73:2e:9f:0c:6f:12:
                    5c:a5:ed:05:9d:52:0e:4f:72:1a:36:76:80:5e:18:
                    f2:83:f1:e6:4c:e7:fc:58:70:ea:0e:9f:b7:c3:be:
                    c2:e4:0b:71:fc:9d:5f:2f:56:84:1a:55:f6:a4:50:
                    32:86:5f:26:d2:4a:a7:a8:3d:19:60:12:40:fc:a6:
                    9e:eb:5e:1e:f6:ae:d0:85:ac:dd:8a:0d:cd:5f:4a:
                    2d:44:57:1a:a3:0b:34:b3:75:ef:08:93:9f:9a:04:
                    2e:92:ec:f6:b0:7b:2d:5d:cc:ae:3c:90:0b:5b:27:
                    d0:13:db:2b:95:be:3f:c2:3d:75:00:48:1c:ba:d7:
                    73:2b:7b:95:56:65:e2:21:bd:8a:4d:4a:d2:3d:a3:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:75:1E:C0:4A:42:7A:8E:52:9F:B5:8C:57:81:E4:09:25:A8:D2
            X509v3 Authority Key Identifier:
                keyid:0D:93:02:D5:46:E0:68:C2:FD:76:77:D9:D5:20:0A:DD:36:C8:BC:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZMC1UbgaML9dnfZ1SAK3TbIvNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/010161-b840-4497-afbe-4bef43d3fb17/1/DZMC1UbgaML9dnfZ1SAK3TbIvNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:fd:21:45:aa:4d:b3:1a:a4:22:fd:60:48:dc:16:e2:f1:fa:
         75:58:4b:48:57:b0:79:97:aa:d5:2f:54:b2:5e:24:ed:db:d5:
         58:50:56:25:9c:db:05:7d:f6:6a:57:e3:fb:7f:98:12:94:9b:
         d4:4a:47:45:30:27:87:2d:04:b6:60:2d:af:26:6c:fb:cf:b9:
         b0:cf:42:e3:5b:be:a7:a9:6c:bf:cf:3e:55:87:98:e5:32:e7:
         37:61:de:2d:c9:e5:23:90:1a:a7:99:4a:df:14:cd:b1:58:93:
         62:4d:69:04:61:59:73:5a:2e:ad:37:32:07:1d:d1:46:4b:10:
         3a:ef:41:35:cb:53:34:7d:4f:a9:2d:7a:56:f8:11:58:60:ca:
         cb:32:db:2d:9c:cf:84:5a:c2:28:8a:dd:4a:f3:eb:e4:d0:57:
         cd:41:0e:17:27:65:03:43:3f:bf:a7:56:a5:e4:5a:5e:88:a4:
         c1:d7:b0:db:f4:3f:e8:01:cd:59:d2:45:d5:ac:bf:7d:d4:7a:
         81:f5:86:a7:64:88:91:e7:fd:31:83:39:34:82:f5:93:21:d9:
         8d:61:3d:ee:97:9f:a9:d5:9d:1c:55:0a:4f:da:e5:ce:b4:67:
         83:77:6d:c1:44:7a:5b:f8:04:d8:d5:f8:35:13:b7:fa:78:bb:
         26:fc:d0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:11:23 2026 by rpki-client