Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
File:                     DpgibNz3QdzIpCplmos94hmBiPk.mft (raw, json)
Hash identifier:          I2057vrLrZBsMyyA+pRli7v0hGWaU+teEa5AdgIMF8c=
Subject key identifier:   11:2D:52:BB:A3:FF:96:33:93:69:C4:05:93:82:FB:04:D7:0B:17:D4
Authority key identifier: 0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9
Certificate issuer:       /CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
Certificate serial:       019E311791AACE2AD1ABF5EEAE0E394C5663
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
Manifest number:          1614
Signing time:             Sat 16 May 2026 14:01:28 +0000
Manifest this update:     Sat 16 May 2026 14:01:28 +0000
Manifest next update:     Sun 17 May 2026 14:01:28 +0000
Files and hashes:         1: C-78xmWgZqJn-98KCnx2cK8W2iw.roa (hash: kvyCi4+DSBTeslNasxxFTjOtFWjXLr4uWpv3Fg7ByZw=)
                          2: DpgibNz3QdzIpCplmos94hmBiPk.crl (hash: lpHaN2pxYVUUssK/hCDMVMgTuo7mCFSWglGvFfUNOPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:91:aa:ce:2a:d1:ab:f5:ee:ae:0e:39:4c:56:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e98226cdcf741dcc8a42a659a8b3de2198188f9
        Validity
            Not Before: May 16 14:01:28 2026 GMT
            Not After : May 17 14:01:28 2026 GMT
        Subject: CN=112d52bba3ff96339369c4059382fb04d70b17d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:33:60:c2:55:71:6e:c9:72:ca:ad:e5:ae:7c:
                    9a:e7:2a:30:db:dc:93:e0:7e:04:c6:27:60:7c:12:
                    35:35:31:41:fe:11:85:fd:fd:57:62:46:3e:8e:ee:
                    bc:aa:08:c4:5a:ed:e9:92:b4:e0:f2:45:fb:48:ee:
                    c1:26:88:95:da:cf:23:a7:86:3f:48:aa:fa:0b:8b:
                    f6:59:6f:d1:53:46:43:94:fb:6b:a0:98:eb:66:b9:
                    0a:e2:f3:f6:b7:60:f4:95:ab:da:8e:e0:e8:69:ed:
                    3c:41:c4:dd:55:dc:8d:68:10:2d:8d:1e:0a:26:bf:
                    f0:08:5e:2c:bd:30:ce:83:0a:54:bd:3f:7b:ea:de:
                    25:c6:59:ed:24:60:82:00:82:8f:8d:8e:20:96:58:
                    b0:a4:a1:34:62:4b:d5:32:4e:b5:0c:ec:09:fe:90:
                    1a:16:b9:c5:ad:0c:9b:ed:67:75:d4:55:f1:26:c3:
                    14:b8:ec:ee:f3:b0:4e:36:b1:36:6d:8b:56:ee:f2:
                    ff:21:86:46:ce:3c:bd:cc:33:06:29:24:43:5b:f6:
                    b0:3b:d0:32:08:ca:9d:7e:2d:1a:e1:e1:ab:e0:95:
                    2f:18:26:6c:94:82:62:26:7e:2c:92:a9:43:6c:d1:
                    d7:00:b7:b0:c9:6f:60:a4:0d:42:de:6c:b7:89:ca:
                    31:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2D:52:BB:A3:FF:96:33:93:69:C4:05:93:82:FB:04:D7:0B:17:D4
            X509v3 Authority Key Identifier:
                keyid:0E:98:22:6C:DC:F7:41:DC:C8:A4:2A:65:9A:8B:3D:E2:19:81:88:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpgibNz3QdzIpCplmos94hmBiPk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/79024d-5b45-4ef4-b528-e9c7b5506e55/1/DpgibNz3QdzIpCplmos94hmBiPk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:f6:a4:a5:22:be:0b:02:d0:41:d7:a1:5c:5a:01:f1:96:
         63:71:84:3f:ec:e4:ad:08:54:ec:71:fb:b6:d4:03:0f:48:e6:
         63:7f:82:2b:54:49:9c:ab:fd:8a:10:18:97:3f:49:df:a3:a8:
         cb:96:96:4a:26:72:58:07:59:76:2b:3e:cc:90:e9:db:8c:5b:
         81:7d:11:af:6d:1f:05:89:33:35:4d:89:f1:16:f1:32:79:fd:
         6c:8f:f4:c2:78:a1:76:1f:d1:61:fc:59:2e:0f:df:16:fa:f4:
         37:ec:66:b3:21:cd:c0:9e:9c:cc:46:a8:b9:1d:75:27:4a:f6:
         a3:f8:35:c5:1b:82:8d:b5:8c:c6:29:cf:61:03:24:64:a5:08:
         24:6a:a9:ef:e6:e7:df:6b:b5:c9:38:42:f2:f2:74:f3:4c:fa:
         1c:62:cf:8b:43:9e:98:c6:2f:5c:8b:68:10:fd:32:9d:a9:ff:
         db:3d:70:ca:f2:b9:a2:ad:7f:ae:14:d6:79:c9:d0:6d:d5:e5:
         fe:b4:5d:7f:a3:c3:93:04:62:1d:11:ce:fd:8d:a3:7f:71:11:
         ca:70:eb:cd:af:8c:24:a3:cf:ef:86:9f:f1:3a:4d:9f:f9:8b:
         60:9a:b8:c3:ee:49:1c:af:07:59:11:fa:55:26:4e:80:5a:6e:
         97:13:82:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:58 2026 by rpki-client