Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
File:                     DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft (raw, json)
Hash identifier:          UZ8ATDOj0LsZr6iY+eIvPxqthPR8cB4p5QlOhxvNtWg=
Subject key identifier:   4D:E2:C5:83:4C:E9:9A:60:D4:65:A9:DB:6A:3E:76:DC:F1:FD:70:D0
Authority key identifier: 0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A
Certificate issuer:       /CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
Certificate serial:       01A06CF044B05131D6DD16DA5F34B0B0EB45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
Manifest number:          05F4
Signing time:             Fri 04 Sep 2026 15:01:20 +0000
Manifest this update:     Fri 04 Sep 2026 15:01:20 +0000
Manifest next update:     Sat 05 Sep 2026 15:01:20 +0000
Files and hashes:         1: 45DCEj3I-Z92QzZKt8etJDqECTc.roa (hash: eEsIQ1IZO5RQ9cptv5VlPge3OnsurwYtE7pMea1jxAg=)
                          2: DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl (hash: 7RXKJtICmHIHcNwrpflla2NpHBd9UA/1XhahqIoSLxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6c:f0:44:b0:51:31:d6:dd:16:da:5f:34:b0:b0:eb:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c3cb61ab4f43f07e3783307dd3384f9dcc1c31a
        Validity
            Not Before: Sep  4 15:01:20 2026 GMT
            Not After : Sep  5 15:01:20 2026 GMT
        Subject: CN=4de2c5834ce99a60d465a9db6a3e76dcf1fd70d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:d3:d2:06:f2:6c:89:c8:f5:e2:9b:76:d1:
                    0f:5f:13:46:3f:97:60:96:0a:9f:40:69:5c:77:3e:
                    66:88:91:d9:87:11:cd:61:12:14:11:93:a9:13:2b:
                    92:43:31:1a:62:72:2c:3c:38:29:c8:f8:08:9b:ce:
                    bc:2a:1f:36:bc:26:72:a4:3d:84:58:90:96:c8:ba:
                    25:ce:67:e9:90:ac:11:48:1c:ff:2a:d9:08:18:4d:
                    24:c9:96:3f:ce:5c:b8:24:ca:40:b9:ef:60:d4:34:
                    11:bc:b1:93:e2:01:87:1e:0c:45:13:f1:c8:23:5e:
                    08:73:30:72:2b:60:1c:de:71:9d:1e:c1:21:d4:4a:
                    cb:89:7f:83:4b:6d:d3:6f:8c:da:5b:5e:40:e4:8c:
                    16:bb:af:21:13:1f:38:ad:a6:bf:60:29:49:34:d1:
                    e8:55:5a:cd:bd:72:4c:29:bb:84:cf:11:73:9a:77:
                    fc:9f:f7:f9:9c:08:59:77:29:4c:c9:86:02:50:0f:
                    28:68:15:6a:ee:55:58:84:ea:72:30:4e:6c:3e:4c:
                    24:3b:55:b1:17:09:1c:3c:dc:42:48:26:6c:35:9d:
                    36:a3:51:c4:d8:1a:bd:32:74:4f:d5:61:f7:20:5c:
                    c5:f4:ae:92:da:eb:14:21:45:9d:5a:7a:5a:63:f6:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E2:C5:83:4C:E9:9A:60:D4:65:A9:DB:6A:3E:76:DC:F1:FD:70:D0
            X509v3 Authority Key Identifier:
                keyid:0C:3C:B6:1A:B4:F4:3F:07:E3:78:33:07:DD:33:84:F9:DC:C1:C3:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDy2GrT0PwfjeDMH3TOE-dzBwxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/7e7842-cd4c-47fa-851a-2c664ce08077/1/DDy2GrT0PwfjeDMH3TOE-dzBwxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:1d:f3:36:d4:a5:30:65:3d:00:8d:63:fe:b7:c7:db:ef:5e:
         36:4c:1f:0e:db:f9:a8:1c:56:db:ad:76:5f:13:c1:e2:fb:80:
         f2:5b:b1:7c:a2:9b:93:01:10:72:a2:75:a7:4a:bf:c9:b2:18:
         50:80:7e:da:a8:f1:1f:9d:ec:82:53:02:f0:26:68:53:92:ff:
         81:f3:c8:55:4d:6e:6a:fb:b3:bf:7c:1e:77:d0:f3:60:f5:80:
         0a:66:3b:00:64:55:45:f5:2f:22:b1:19:ee:9b:d4:ac:6f:cc:
         53:4c:7d:19:4e:2d:43:7f:66:8c:46:db:9e:eb:27:82:71:5f:
         d7:14:a0:03:42:84:f4:78:67:27:f0:82:e9:89:7b:1f:6b:0f:
         66:1d:a5:0d:c6:dd:f5:5d:b9:d7:6c:dd:3d:97:ab:72:83:3f:
         43:28:08:0e:10:52:3e:41:4e:f6:f6:62:e1:c5:fd:b0:aa:4c:
         ab:d7:a8:ac:a0:38:10:33:32:b9:0f:42:5b:4e:59:f6:3f:df:
         0a:f0:3f:49:71:01:de:17:ad:66:52:a7:ad:91:71:86:31:0e:
         7f:90:a6:7c:66:85:69:d9:94:6f:e6:73:77:ce:35:86:dd:ff:
         97:f8:0f:f2:1c:7d:45:2f:3c:81:32:fa:cd:9c:95:8e:c3:3f:
         fd:0d:d8:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBs8ESwUTHW3RbaXzSwsOtFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjM2NiNjFhYjRmNDNmMDdlMzc4MzMwN2RkMzM4NGY5ZGNj
MWMzMWEwHhcNMjYwOTA0MTUwMTIwWhcNMjYwOTA1MTUwMTIwWjAzMTEwLwYDVQQD
Eyg0ZGUyYzU4MzRjZTk5YTYwZDQ2NWE5ZGI2YTNlNzZkY2YxZmQ3MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdTT0gbybInI9eKbdtEPXxNGP5dg
lgqfQGlcdz5miJHZhxHNYRIUEZOpEyuSQzEaYnIsPDgpyPgIm868Kh82vCZypD2E
WJCWyLolzmfpkKwRSBz/KtkIGE0kyZY/zly4JMpAue9g1DQRvLGT4gGHHgxFE/HI
I14IczByK2Ac3nGdHsEh1ErLiX+DS23Tb4zaW15A5IwWu68hEx84raa/YClJNNHo
VVrNvXJMKbuEzxFzmnf8n/f5nAhZdylMyYYCUA8oaBVq7lVYhOpyME5sPkwkO1Wx
FwkcPNxCSCZsNZ02o1HE2Bq9MnRP1WH3IFzF9K6S2usUIUWdWnpaY/YTeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE3ixYNM6Zpg1GWp22o+dtzx/XDQMB8GA1UdIwQY
MBaAFAw8thq09D8H43gzB90zhPncwcMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEt
MmM2NjRjZTA4MDc3LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My83ZTc4NDItY2Q0Yy00N2ZhLTg1MWEtMmM2NjRjZTA4MDc3
LzEvRER5MkdyVDBQd2ZqZURNSDNUT0UtZHpCd3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvR3zNtSl
MGU9AI1j/rfH2+9eNkwfDtv5qBxW2612XxPB4vuA8luxfKKbkwEQcqJ1p0q/ybIY
UIB+2qjxH53sglMC8CZoU5L/gfPIVU1uavuzv3wed9DzYPWACmY7AGRVRfUvIrEZ
7pvUrG/MU0x9GU4tQ39mjEbbnusngnFf1xSgA0KE9HhnJ/CC6Yl7H2sPZh2lDcbd
9V2512zdPZercoM/QygIDhBSPkFO9vZi4cX9sKpMq9eorKA4EDMyuQ9CW05Z9j/f
CvA/SXEB3hetZlKnrZFxhjEOf5CmfGaFadmUb+Zzd841ht3/l/gP8hx9RS88gTL6
zZyVjsM//Q3Yyw==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:29:54 2026 by rpki-client