Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
File:                     D5XJyafxmprXF-TapTDIXPmauXU.mft (raw, json)
Hash identifier:          XE68SMmiFN6O/pwB92G6DQLWeAJJRtcHjwydtr36jeE=
Subject key identifier:   4B:CE:47:F6:C9:15:C0:3B:06:02:D3:7F:E3:9B:46:67:6F:06:47:72
Authority key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Certificate issuer:       /CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Certificate serial:       01A0005CD162478F2BDB3442FD8F31906803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
Manifest number:          0A30
Signing time:             Fri 14 Aug 2026 13:01:17 +0000
Manifest this update:     Fri 14 Aug 2026 13:01:17 +0000
Manifest next update:     Sat 15 Aug 2026 13:01:17 +0000
Files and hashes:         1: D5XJyafxmprXF-TapTDIXPmauXU.crl (hash: ED3j59H/Ch4efAeslKelqmu+55drFGLKzmGzsCPVtDA=)
                          2: IDbRzIjz9FoGej8HJqlL664b-8I.roa (hash: VRTrlkouQDtL6ZUrJRyEpfphRS5vZrTw/RpqnAvn+iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:d1:62:47:8f:2b:db:34:42:fd:8f:31:90:68:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
        Validity
            Not Before: Aug 14 13:01:17 2026 GMT
            Not After : Aug 15 13:01:17 2026 GMT
        Subject: CN=4bce47f6c915c03b0602d37fe39b46676f064772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f7:78:cf:b3:09:d9:10:cd:49:58:70:c0:0a:
                    92:eb:54:95:f6:a9:19:81:25:13:a0:0f:b3:34:61:
                    9e:2d:02:ee:2d:a6:96:ba:04:e3:43:47:ab:96:77:
                    b1:e3:d3:70:2c:05:72:05:13:20:b7:16:1d:fb:44:
                    64:cd:bc:28:63:fc:8b:10:75:2f:b9:47:29:66:cf:
                    be:7f:96:32:c3:1d:7f:c9:c0:fd:dd:c5:54:81:74:
                    05:76:45:ec:f5:bf:85:77:8a:b3:7a:80:d0:b0:7d:
                    68:a6:b9:fe:c8:0f:33:c4:44:64:9c:e6:dc:25:9d:
                    4c:7e:4b:8a:ba:63:1b:20:a0:e6:67:ef:32:af:98:
                    2d:cf:8e:0c:4e:d5:05:0c:4a:b1:e7:bc:10:cc:30:
                    db:97:e5:67:8a:76:7a:c1:36:2c:c5:83:7f:e4:e0:
                    07:d2:b4:86:7a:d2:94:de:72:7c:43:15:ce:e5:a7:
                    c6:28:04:cb:9b:bd:11:9a:5c:ad:6d:17:3e:ae:cd:
                    32:0c:48:eb:fc:e3:fb:4a:b1:76:ef:fe:1e:2a:6c:
                    67:e9:67:1a:14:28:4b:bb:2d:b8:14:ef:0f:48:4e:
                    3e:d0:b3:41:10:90:24:9f:58:9d:26:f2:a9:11:37:
                    8b:69:51:74:13:9b:c0:d3:aa:a6:dc:a5:d0:a7:57:
                    73:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:CE:47:F6:C9:15:C0:3B:06:02:D3:7F:E3:9B:46:67:6F:06:47:72
            X509v3 Authority Key Identifier:
                keyid:0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:e0:e2:5d:64:a8:9f:ca:4e:ab:b2:0a:df:3d:ef:77:bc:
         eb:77:ca:b7:8f:cf:8b:20:10:25:ed:7c:ca:b2:1e:7b:96:3c:
         6a:a7:f0:53:ca:ba:f2:60:9d:67:a4:2c:0c:79:f1:ff:31:9e:
         ee:c9:77:78:ea:40:6a:76:6a:d0:c7:43:88:74:6b:38:65:c7:
         e4:9a:d4:58:23:92:66:5f:2b:f3:46:f2:ca:95:e5:35:3d:a8:
         a9:cc:05:0f:15:c8:57:6f:e0:41:52:fa:8b:ac:a9:c5:94:a9:
         7e:c8:73:d8:08:ef:b4:24:13:05:9c:78:9c:35:aa:5a:62:74:
         45:33:a9:77:b0:96:cd:33:1b:19:21:38:fb:da:02:23:79:ba:
         f1:0e:1a:68:b4:f4:f3:cd:01:33:49:7b:d4:9a:16:ac:f6:4f:
         d4:0b:83:5c:5e:69:a9:00:fa:b8:fb:71:f0:7b:82:77:aa:07:
         8a:83:96:93:4b:4f:6b:36:50:a2:fd:ab:25:88:9a:01:72:fb:
         1e:78:fb:e4:98:b9:0e:5b:1e:a3:2f:c7:20:21:20:fc:ff:10:
         1c:b6:3f:bd:b4:be:f3:82:5f:0e:a1:48:be:26:25:15:d4:dc:
         40:36:f4:eb:fc:1c:f6:2a:4c:89:f9:48:d4:68:a8:23:56:52:
         f8:f2:49:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:44 2026 by rpki-client