Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
File:                     DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json)
Hash identifier:          Zfd/prxeA0c8AUBa3jj72TrwbV6HVRUmfKNIbkJ41gA=
Subject key identifier:   26:61:2B:CE:8B:59:40:AF:F8:E1:DC:6A:5D:BB:44:49:6E:7B:06:3A
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Certificate issuer:       /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial:       01A0009346219E999A9FA529BD2FE8E3359B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
Manifest number:          17C6
Signing time:             Fri 14 Aug 2026 14:00:46 +0000
Manifest this update:     Fri 14 Aug 2026 14:00:46 +0000
Manifest next update:     Sat 15 Aug 2026 14:00:46 +0000
Files and hashes:         1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: YVpmw0kq4THN43VKts2hAD8AGqhUBjGT4JKt9wPgGDQ=)
                          2: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (hash: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:46:21:9e:99:9a:9f:a5:29:bd:2f:e8:e3:35:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
        Validity
            Not Before: Aug 14 14:00:46 2026 GMT
            Not After : Aug 15 14:00:46 2026 GMT
        Subject: CN=26612bce8b5940aff8e1dc6a5dbb44496e7b063a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:ec:c4:2c:15:81:0c:c2:6e:59:e7:f0:a1:
                    79:52:40:4b:d9:87:4c:42:f4:59:b4:cc:07:ae:8b:
                    57:b5:83:4e:33:7b:79:8f:85:23:dd:52:4f:df:ce:
                    7f:a8:d7:c0:a2:e3:4f:58:21:d4:b3:99:b6:c4:74:
                    5b:27:05:5a:30:54:af:ae:98:3f:b0:61:0b:b3:c6:
                    87:c9:ba:15:13:90:3a:00:69:36:18:60:42:55:d3:
                    35:e1:1f:9c:c3:43:b3:23:94:4e:84:1f:e0:0f:9a:
                    5a:3e:ee:4d:ce:80:7b:f1:9d:c6:e7:2f:06:a8:92:
                    5b:39:07:cd:c8:37:d6:b2:dd:17:40:ee:a1:fd:a4:
                    4d:89:b2:a1:f6:3e:f1:ef:06:57:42:75:3b:3b:73:
                    84:95:6b:5b:cb:ef:9e:ea:19:e3:a0:1b:34:47:6b:
                    46:2f:92:23:0f:4f:89:71:bb:58:7d:ae:60:8e:9e:
                    2f:91:b7:ff:cb:ce:a9:c4:e5:9c:e1:28:f5:2b:eb:
                    f6:79:64:ae:55:ac:1e:bd:d9:71:ba:f0:7c:2a:f3:
                    78:bf:b1:b7:a0:04:cd:21:d0:8a:ae:78:2e:c0:34:
                    10:98:7f:7b:d0:15:9f:85:69:74:7f:c0:b1:00:3a:
                    a9:82:cb:80:06:58:2b:28:c4:a0:13:94:90:73:fe:
                    3f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:61:2B:CE:8B:59:40:AF:F8:E1:DC:6A:5D:BB:44:49:6E:7B:06:3A
            X509v3 Authority Key Identifier:
                keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:dc:ac:aa:81:4c:9b:be:d9:c6:40:c8:7e:06:07:38:15:d8:
         e9:d7:6b:4d:c9:58:08:9c:6e:70:10:32:a7:0b:ff:5a:fd:c2:
         02:f5:29:a0:39:20:b8:ba:ea:20:1a:9e:71:0d:f1:98:bc:50:
         c2:81:f6:c4:cd:98:3d:16:38:ea:5e:fc:e5:65:24:fc:c7:09:
         c3:91:ce:83:d6:0c:d5:e8:9c:99:a5:9f:60:b9:0d:69:11:86:
         64:04:19:b0:14:e2:2c:5f:3e:4b:cc:c2:be:e2:93:e5:89:6e:
         7c:2d:47:d0:27:34:31:58:9a:a7:fa:e7:08:6b:42:de:49:97:
         bb:65:12:e7:bb:40:65:e9:ef:87:66:07:39:35:c0:d1:0c:e8:
         2f:dd:4a:8e:a9:0d:cf:a7:17:db:76:47:ee:15:5e:79:74:b7:
         03:19:f0:54:d0:90:17:c7:c6:0f:ed:fa:d8:bd:74:3b:35:c9:
         ed:87:36:d9:e6:87:f5:df:3e:e1:56:dc:7e:f0:0c:95:ff:23:
         70:ad:15:33:34:55:1a:b5:89:5e:aa:29:8d:cf:4f:3a:27:37:
         34:1e:95:4a:0f:f9:da:3d:58:39:6c:d3:87:4e:29:05:b3:73:
         4d:1e:e4:ae:1b:07:97:f0:0e:45:48:40:be:9e:17:39:24:b6:
         c2:b1:95:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAk0Yhnpman6UpvS/o4zWbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzQxM2RjZjUzNzM3NGE3MGRhYTMxZmQ5YTk5ZmQyOWIw
MzMyMzkwHhcNMjYwODE0MTQwMDQ2WhcNMjYwODE1MTQwMDQ2WjAzMTEwLwYDVQQD
EygyNjYxMmJjZThiNTk0MGFmZjhlMWRjNmE1ZGJiNDQ0OTZlN2IwNjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DvsxCwVgQzCblnn8KF5UkBL2YdM
QvRZtMwHrotXtYNOM3t5j4Uj3VJP385/qNfAouNPWCHUs5m2xHRbJwVaMFSvrpg/
sGELs8aHyboVE5A6AGk2GGBCVdM14R+cw0OzI5ROhB/gD5paPu5NzoB78Z3G5y8G
qJJbOQfNyDfWst0XQO6h/aRNibKh9j7x7wZXQnU7O3OElWtby++e6hnjoBs0R2tG
L5IjD0+JcbtYfa5gjp4vkbf/y86pxOWc4Sj1K+v2eWSuVawevdlxuvB8KvN4v7G3
oATNIdCKrnguwDQQmH970BWfhWl0f8CxADqpgsuABlgrKMSgE5SQc/4/6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZhK86LWUCv+OHcal27REluewY6MB8GA1UdIwQY
MBaAFA10E9z1NzdKcNqjH9mpn9KbAzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQt
ZTY5YmUzOTViMGY3LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQtZTY5YmUzOTViMGY3
LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9ysqoFM
m77ZxkDIfgYHOBXY6ddrTclYCJxucBAypwv/Wv3CAvUpoDkguLrqIBqecQ3xmLxQ
woH2xM2YPRY46l785WUk/McJw5HOg9YM1eicmaWfYLkNaRGGZAQZsBTiLF8+S8zC
vuKT5YlufC1H0Cc0MViap/rnCGtC3kmXu2US57tAZenvh2YHOTXA0QzoL91KjqkN
z6cX23ZH7hVeeXS3AxnwVNCQF8fGD+362L10OzXJ7Yc22eaH9d8+4VbcfvAMlf8j
cK0VMzRVGrWJXqopjc9POic3NB6VSg/52j1YOWzTh04pBbNzTR7krhsHl/AORUhA
vp4XOSS2wrGVTg==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:20:55 2026 by rpki-client