Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File:                     DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier:          yYF8Rw/BAfHxPjn/qDLIEhy9qicwXFRxiIdm7dgem/4=
Subject key identifier:   73:40:71:24:02:58:24:92:15:32:1A:E9:39:0A:8A:FE:B6:21:3F:79
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer:       /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial:       019DEE24D292BF5884B4A904660117CCF0AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number:          0EC2
Signing time:             Sun 03 May 2026 14:01:23 +0000
Manifest this update:     Sun 03 May 2026 14:01:23 +0000
Manifest next update:     Mon 04 May 2026 14:01:23 +0000
Files and hashes:         1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: jd8czgKrYsAi6O1m4SJXcARWvuM/Z4EOyjPhaY3c/zg=)
                          2: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (hash: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M=)
                          3: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (hash: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ee:24:d2:92:bf:58:84:b4:a9:04:66:01:17:cc:f0:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
        Validity
            Not Before: May  3 14:01:23 2026 GMT
            Not After : May  4 14:01:23 2026 GMT
        Subject: CN=734071240258249215321ae9390a8afeb6213f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ce:0e:f1:ff:03:af:c7:54:3f:f0:b8:d1:01:
                    2a:b9:8a:d2:a1:35:8a:5b:91:f4:7b:8f:aa:61:fc:
                    c6:70:d0:85:ff:f3:39:0f:1e:41:5e:db:e6:ec:07:
                    b7:04:3e:f6:7a:59:2b:21:13:0b:2e:bc:d2:0f:2e:
                    ee:55:b6:a6:cc:ac:cd:b2:25:da:c4:62:32:72:65:
                    5b:11:ff:21:bb:92:30:74:b9:34:36:29:10:ba:0d:
                    4f:a2:5c:5a:05:d0:32:aa:10:d4:ee:40:40:79:d6:
                    e2:e6:2c:d4:83:f7:23:de:41:be:6a:89:e1:49:8e:
                    17:ac:f1:f5:e2:4f:46:87:0f:44:09:9e:91:54:1f:
                    66:15:83:57:c9:de:e8:e6:39:9c:01:2d:6b:1e:ee:
                    d1:d3:a9:a6:09:ab:c1:2b:54:8e:a3:90:df:c4:ec:
                    c4:b7:d4:7f:5e:72:04:8a:23:5d:20:7e:bb:51:c3:
                    93:d1:c5:2b:30:a6:0e:48:2c:d7:dd:1a:f8:6b:21:
                    38:5e:6d:b5:c3:f8:e8:4b:7f:5b:1c:06:70:ec:70:
                    25:68:9b:83:00:63:4b:87:bd:05:82:08:a2:0f:7c:
                    37:10:a2:0d:0e:de:14:55:12:42:86:14:42:26:36:
                    d2:7c:db:00:8d:8f:e6:e6:a0:0b:54:f5:fa:c2:e3:
                    5a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:40:71:24:02:58:24:92:15:32:1A:E9:39:0A:8A:FE:B6:21:3F:79
            X509v3 Authority Key Identifier:
                keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:df:06:d7:d7:de:46:9b:61:aa:fa:b2:66:f9:e4:54:90:36:
         08:47:46:51:7a:bd:96:8a:ca:22:e3:6e:17:6e:fb:3a:a4:b6:
         e8:fa:8f:f1:45:79:ac:19:48:ec:ee:bc:9c:4c:ab:d1:98:59:
         4e:7a:93:76:ca:69:a0:9c:c6:d8:60:d3:1d:21:5c:da:25:51:
         a4:77:86:38:33:9d:62:72:48:e1:a2:16:35:ea:5b:bf:e4:8d:
         e4:5e:05:ff:7a:27:cf:30:e7:62:48:f1:c1:9a:da:ed:fa:7a:
         67:93:0d:f7:fe:cf:dd:0e:ff:73:7e:a7:d3:ec:2a:89:fd:ec:
         92:5c:23:d4:56:98:d8:23:27:24:2c:4e:ce:fe:ee:2f:ed:27:
         57:e1:7b:96:a5:e0:65:59:4b:9b:bd:fc:49:58:f6:d1:a0:a6:
         70:2a:63:d8:58:87:48:51:5f:96:d7:bc:02:1d:ac:b4:ba:52:
         eb:a0:2d:cf:34:ff:ca:09:44:17:da:9f:95:6f:b9:b8:f7:f0:
         ad:91:73:7b:19:63:fa:23:8d:0b:88:68:e7:85:b5:99:f1:a7:
         6f:2f:4d:7c:05:9d:2b:aa:4c:f7:04:bc:ae:77:30:52:e4:00:
         83:9a:db:9c:5c:e2:53:f6:c3:37:84:63:57:54:bc:ba:a8:41:
         51:09:55:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3uJNKSv1iEtKkEZgEXzPCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh
MDY1MmMwHhcNMjYwNTAzMTQwMTIzWhcNMjYwNTA0MTQwMTIzWjAzMTEwLwYDVQQD
Eyg3MzQwNzEyNDAyNTgyNDkyMTUzMjFhZTkzOTBhOGFmZWI2MjEzZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5M4O8f8Dr8dUP/C40QEquYrSoTWK
W5H0e4+qYfzGcNCF//M5Dx5BXtvm7Ae3BD72elkrIRMLLrzSDy7uVbamzKzNsiXa
xGIycmVbEf8hu5IwdLk0NikQug1PolxaBdAyqhDU7kBAedbi5izUg/cj3kG+aonh
SY4XrPH14k9Ghw9ECZ6RVB9mFYNXyd7o5jmcAS1rHu7R06mmCavBK1SOo5DfxOzE
t9R/XnIEiiNdIH67UcOT0cUrMKYOSCzX3Rr4ayE4Xm21w/joS39bHAZw7HAlaJuD
AGNLh70FggiiD3w3EKINDt4UVRJChhRCJjbSfNsAjY/m5qALVPX6wuNaKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNAcSQCWCSSFTIa6TkKiv62IT95MB8GA1UdIwQY
MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt
YzQ0ZGRmZmE2OWFiLzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi
LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtd8G19fe
RpthqvqyZvnkVJA2CEdGUXq9lorKIuNuF277OqS26PqP8UV5rBlI7O68nEyr0ZhZ
TnqTdsppoJzG2GDTHSFc2iVRpHeGODOdYnJI4aIWNepbv+SN5F4F/3onzzDnYkjx
wZra7fp6Z5MN9/7P3Q7/c36n0+wqif3sklwj1FaY2CMnJCxOzv7uL+0nV+F7lqXg
ZVlLm738SVj20aCmcCpj2FiHSFFflte8Ah2stLpS66AtzzT/yglEF9qflW+5uPfw
rZFzexlj+iONC4ho54W1mfGnby9NfAWdK6pM9wS8rncwUuQAg5rbnFziU/bDN4Rj
V1S8uqhBUQlVqw==
-----END CERTIFICATE-----
Generated at Sun May 3 17:07:00 2026 by rpki-client