Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File:                     DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier:          TgZ6C9W3nO1pdMrILk3TG91kLZFIGlJxbzM2dx3rkMw=
Subject key identifier:   8E:73:53:01:7E:EC:86:06:35:A5:BB:C5:F5:0B:B1:24:89:D0:64:8E
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer:       /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial:       01A000CA9F66A60143F59B708E125DBD5747
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number:          0DBF
Signing time:             Fri 14 Aug 2026 15:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:13 +0000
Files and hashes:         1: 8kLexoC86Do5vfxQjSviKxTow3s.roa (hash: R+3NYgMoxiJU1fSK7xfN36pT86q7Kv/cYyTRhCNtf3g=)
                          2: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: 9pjuEZ4iuw4Wb6D7pqoWMLppe481MCO2J3WtMw+pha4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:9f:66:a6:01:43:f5:9b:70:8e:12:5d:bd:57:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
        Validity
            Not Before: Aug 14 15:01:13 2026 GMT
            Not After : Aug 15 15:01:13 2026 GMT
        Subject: CN=8e7353017eec860635a5bbc5f50bb12489d0648e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8c:7f:e9:f9:ab:20:5e:40:ba:93:50:6a:8c:
                    88:f6:13:b6:65:d9:57:a9:dc:f4:de:e5:cf:53:47:
                    ff:32:c9:6e:e4:30:e2:49:78:15:b0:15:4c:fc:e8:
                    0f:f8:f1:a8:73:b6:e8:ea:12:11:f9:93:7c:ba:57:
                    ce:ad:67:b1:07:0b:a8:ad:8c:bd:bf:66:5e:1d:cd:
                    6b:93:d5:77:80:47:d2:dd:36:80:55:9c:6f:66:80:
                    82:2e:f8:19:90:d3:8c:38:8b:16:e7:11:a2:3a:d0:
                    e0:e4:34:8d:a9:d7:0d:ff:83:78:c5:7f:00:92:d2:
                    91:95:b7:82:50:59:f7:f7:00:20:8d:23:ca:cd:f9:
                    be:e3:90:6b:2f:42:2d:c6:b2:36:20:a6:09:26:2b:
                    8e:b9:2c:0e:d7:38:60:02:e9:74:72:f4:62:2d:ee:
                    75:7b:1c:82:1a:17:48:c8:a6:2d:47:a3:9a:53:87:
                    44:b1:50:c6:7a:a7:f4:7c:01:ed:61:3d:0d:4c:a9:
                    fa:22:ed:c1:78:3a:58:c6:19:da:18:65:67:a7:ae:
                    35:eb:ad:8c:2b:30:ee:8e:2e:cd:ca:37:8e:e9:eb:
                    02:36:15:de:18:2b:e1:4c:f7:79:ad:31:7e:6b:7e:
                    25:ad:b3:54:9f:a5:7a:46:8b:45:9c:97:e2:2d:ba:
                    75:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:73:53:01:7E:EC:86:06:35:A5:BB:C5:F5:0B:B1:24:89:D0:64:8E
            X509v3 Authority Key Identifier:
                keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f9:82:a2:22:d1:3d:6e:4e:ef:9b:9c:46:d8:da:53:5b:02:
         12:45:08:ef:da:36:56:ea:42:da:f7:17:73:ee:3e:83:58:11:
         bd:d1:79:52:f7:a5:2b:4d:29:2b:1f:ca:c2:19:b6:de:90:ee:
         e0:34:19:a3:14:68:58:af:54:1c:d2:c9:9d:dd:e9:31:ae:af:
         00:31:07:93:c4:42:e4:a2:e9:66:d4:1f:e3:e2:8b:7b:19:45:
         24:fd:40:97:ac:e2:14:66:24:a5:24:d4:58:42:af:7b:b2:c7:
         59:2c:87:02:41:24:3a:c7:7b:e0:d3:79:f6:be:fb:4e:58:36:
         62:01:1d:0b:df:0f:da:2b:99:91:1a:7b:f7:c3:2d:48:cb:03:
         8f:d8:16:1c:32:38:8a:d2:e3:28:a1:98:71:19:6b:22:0a:57:
         e7:e5:5a:cf:ac:c2:de:07:18:03:bb:83:a0:33:f2:0c:aa:0f:
         d5:bd:26:3c:b8:62:00:f2:9c:a0:dd:2b:52:12:10:cb:0d:d6:
         44:b1:0e:e7:50:1e:40:ed:25:0c:cf:a4:2a:95:b6:8f:d4:a9:
         e6:f9:c9:6a:6d:32:83:53:ec:22:19:e2:fc:dd:12:a5:31:c8:
         e9:84:2a:d5:ef:67:f7:5c:28:81:7b:55:8c:fa:52:b4:af:a1:
         b1:35:a3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:10 2026 by rpki-client