Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
File:                     dnwXZvu9z_aLvDSjxr5poMigOrk.mft (raw, json)
Hash identifier:          1bwrRFpcBwXeeWhmNuBS8PwT7gO8gdeS2anNxwU1cME=
Subject key identifier:   85:88:FA:D6:DD:61:14:10:60:CA:73:73:4A:42:6E:BC:72:E8:2D:6F
Authority key identifier: 76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9
Certificate issuer:       /CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
Certificate serial:       019E921468605D82686943B374D1CD8B4D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
Manifest number:          113D
Signing time:             Thu 04 Jun 2026 10:01:11 +0000
Manifest this update:     Thu 04 Jun 2026 10:01:11 +0000
Manifest next update:     Fri 05 Jun 2026 10:01:11 +0000
Files and hashes:         1: dnwXZvu9z_aLvDSjxr5poMigOrk.crl (hash: 7fohBrSLZlizt+ebK8vRPzUhqwKmNdsJOMPEh8RXfgg=)
                          2: uO0hPRixKdpQ7dRmQ2or2PuLKb0.roa (hash: oMcY71q6qwU4awB+i8utxGyZwUW4XEtlGqfFSQ3WTP4=)
                          3: x3r5MAGnwo9sJOqgqq7L5j88SZc.roa (hash: PdGQVPWLQTL/E0T0LOBkbwg2HWh9KKOf2sd5PHKTZpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:92:14:68:60:5d:82:68:69:43:b3:74:d1:cd:8b:4d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767c1766fbbdcff68bbc34a3c6be69a0c8a03ab9
        Validity
            Not Before: Jun  4 10:01:11 2026 GMT
            Not After : Jun  5 10:01:11 2026 GMT
        Subject: CN=8588fad6dd61141060ca73734a426ebc72e82d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:03:2f:49:d3:66:05:7f:c8:fb:7c:c6:50:
                    d6:1f:24:cf:83:9f:e8:ae:e6:06:4a:a6:0f:77:fb:
                    38:33:1a:32:96:ef:0b:b6:ac:00:d7:06:5f:0e:dd:
                    c0:0d:70:5d:d2:03:58:7a:48:b8:21:82:c1:0e:e2:
                    fc:66:c5:21:58:4d:bf:8c:ae:9d:3c:82:ad:38:be:
                    fb:dd:a6:12:7b:07:12:63:44:97:55:e3:99:ed:31:
                    e8:f7:1b:2a:de:21:f7:ec:21:e2:7c:e5:67:62:4b:
                    27:86:66:ba:f6:15:cd:98:29:ca:a1:72:7a:70:95:
                    50:6c:88:92:af:7e:68:b6:df:3c:48:a6:4a:bc:dc:
                    af:26:86:b2:58:eb:db:99:29:27:81:11:7a:f8:33:
                    74:48:bf:5a:ea:e0:85:38:a5:0d:00:44:26:7d:e8:
                    f2:97:fe:ec:64:14:5f:35:af:90:d5:e5:8c:18:4d:
                    c9:79:5a:66:c0:4a:4b:6d:0d:b4:76:87:a8:0d:2a:
                    4a:34:5b:a5:d4:57:2f:80:d5:2b:2a:a6:78:b1:4b:
                    25:b0:3a:7a:b2:47:a5:ab:df:a6:45:de:53:0f:7a:
                    8f:be:45:e1:3f:21:46:0e:1e:90:99:c5:de:2c:4c:
                    df:a2:01:20:fb:31:0e:b8:54:53:6e:37:ba:40:c0:
                    ab:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:88:FA:D6:DD:61:14:10:60:CA:73:73:4A:42:6E:BC:72:E8:2D:6F
            X509v3 Authority Key Identifier:
                keyid:76:7C:17:66:FB:BD:CF:F6:8B:BC:34:A3:C6:BE:69:A0:C8:A0:3A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dnwXZvu9z_aLvDSjxr5poMigOrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/884356-7e2a-4c2a-8ff4-3568e1d29d4a/1/dnwXZvu9z_aLvDSjxr5poMigOrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7d:8a:18:ce:7c:27:84:4c:72:cf:39:5a:cb:5f:6d:93:2c:
         9f:17:b4:d2:35:7f:37:b6:78:83:2d:e6:bb:4e:40:a3:44:79:
         b8:83:16:09:44:32:a5:a6:90:20:b3:cd:3e:41:e0:80:6e:ef:
         b9:05:4e:39:a0:11:87:03:c5:3d:1c:88:31:ef:b0:8d:25:e8:
         a1:32:4d:0d:65:a1:71:14:73:e9:89:52:08:43:56:24:5e:90:
         c0:1b:9a:9c:df:6e:5f:1d:8a:25:32:1f:6a:6e:2b:a5:46:9b:
         64:8d:39:6d:a3:3a:08:b1:98:9d:87:f9:36:ea:5f:06:d1:2e:
         58:80:48:3a:79:bd:2c:b5:4b:ba:b1:60:a4:78:d8:12:fc:f4:
         69:07:c9:f2:c0:3c:79:f1:3c:db:22:1c:e5:f3:4c:2b:10:f2:
         b0:f6:50:a3:8f:26:6f:43:63:fb:c0:e1:3c:8d:eb:8d:87:ca:
         7c:ad:47:8f:b2:e1:b0:3e:83:0e:aa:74:bf:93:5f:c5:1d:0f:
         1a:cb:db:e2:8e:c9:29:e2:9e:ed:09:9e:19:ef:86:81:18:29:
         a8:39:23:2c:24:eb:c4:b9:bb:b9:cb:8f:f2:b6:70:9f:3e:53:
         63:c6:e3:2c:74:72:46:7f:70:53:a4:7a:19:89:5b:b4:ea:dd:
         0d:db:58:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:21:47 2026 by rpki-client