Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
File:                     DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json)
Hash identifier:          T1HtK2e427WoM5PtA37v5R2sBI1ArU94bMacx++nVEE=
Subject key identifier:   90:D8:93:A4:38:A4:6F:B1:71:05:6D:7E:9C:61:49:4E:79:CC:19:80
Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16
Certificate issuer:       /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
Certificate serial:       019F111BD97781AC97C04E3EFF705428700B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
Manifest number:          01D6
Signing time:             Mon 29 Jun 2026 02:01:05 +0000
Manifest this update:     Mon 29 Jun 2026 02:01:05 +0000
Manifest next update:     Tue 30 Jun 2026 02:01:05 +0000
Files and hashes:         1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: DBAq6Bd5TQdzn1bOwIr/nRdT4a+TXSghJAW3MDdjb1s=)
                          2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:11:1b:d9:77:81:ac:97:c0:4e:3e:ff:70:54:28:70:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16
        Validity
            Not Before: Jun 29 02:01:05 2026 GMT
            Not After : Jun 30 02:01:05 2026 GMT
        Subject: CN=90d893a438a46fb171056d7e9c61494e79cc1980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3d:e5:3e:73:0a:80:0b:71:23:b1:af:8d:4a:
                    03:38:55:3e:c6:ca:8e:8a:45:c5:84:27:99:05:e0:
                    93:ea:d6:a8:3d:d6:4e:af:6f:7f:7e:f6:ab:7e:2b:
                    3a:19:e2:10:c9:d7:5b:c8:9b:dd:d7:8f:56:6d:9f:
                    cd:92:0f:9f:b7:df:bc:c5:64:dd:39:fa:f8:13:4a:
                    e1:e6:88:75:77:5f:ca:89:33:9e:2e:36:fb:63:4c:
                    b1:f5:f0:5c:1a:f8:56:b4:b8:ea:34:77:50:6a:0f:
                    55:bf:ec:0e:4d:fc:0a:47:30:a4:58:86:5a:40:5d:
                    0c:34:df:0f:ee:60:fa:de:7b:e9:c8:e1:a4:7b:42:
                    74:c4:43:eb:0a:16:20:34:90:4b:02:33:d7:b0:f9:
                    46:26:65:ef:9b:00:c7:b7:49:bf:14:cd:ad:97:66:
                    5a:b4:0f:12:c5:06:bc:ea:f4:7a:b2:9b:6b:6f:69:
                    05:dc:7c:d4:5b:be:14:6f:64:29:b1:d4:6c:17:24:
                    1d:9e:eb:d8:3c:82:cd:13:7d:7e:44:7d:f8:22:7f:
                    29:2c:19:ec:bb:f8:a4:d9:c1:01:ae:81:25:8a:10:
                    fb:2f:60:72:bd:46:7b:17:f2:e6:a9:13:d3:e5:00:
                    99:cf:d9:c8:1d:46:f7:c3:87:b0:44:9a:c5:b5:e9:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D8:93:A4:38:A4:6F:B1:71:05:6D:7E:9C:61:49:4E:79:CC:19:80
            X509v3 Authority Key Identifier:
                keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:74:3e:68:cb:c4:9c:7b:93:2a:9b:47:3f:71:9e:4c:fb:56:
         83:93:ba:02:5d:dc:3c:f6:cf:4e:7d:e8:1a:e0:76:49:88:1b:
         99:09:f5:8a:22:38:4a:d5:7f:36:9e:2a:a4:e8:2d:ea:3a:91:
         75:8a:da:a8:72:c7:13:28:1f:ca:aa:54:4c:b6:d0:d5:08:3a:
         c5:cb:4c:c5:5b:15:51:26:53:ed:9b:85:53:a8:a0:33:93:95:
         f7:40:18:b2:39:a7:7b:0a:04:38:66:87:c5:a5:51:2b:9b:2b:
         a3:fc:25:ce:87:1b:9a:35:ad:95:22:de:14:46:de:40:6d:5d:
         cf:19:10:a2:1c:72:7d:a2:0d:b8:75:a0:3c:aa:e1:e3:b1:ff:
         4a:15:b5:4d:15:82:7b:99:16:ca:62:b6:43:5b:2c:d1:a4:73:
         a8:d6:18:db:2a:8e:43:90:6d:44:d0:34:59:54:7a:79:68:8d:
         62:e9:cf:a6:46:fb:45:30:52:d7:c2:64:98:06:66:bc:4a:bc:
         20:7c:79:43:5e:6e:53:bb:a6:8a:2d:a4:18:2a:e4:d9:14:ef:
         66:53:d3:ba:d7:f2:18:5d:64:87:7f:15:73:1a:53:1d:1c:06:
         65:d3:77:fe:fd:6f:b8:bc:5e:e8:f5:90:00:69:60:83:c4:09:
         51:de:f1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:46 2026 by rpki-client