Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
File:                     DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json)
Hash identifier:          y/uogzHkQ1SxnulQxufKBb7k++Zf4yVDCwG2cst0MhM=
Subject key identifier:   15:2F:76:6D:ED:31:4D:D1:6E:F2:9C:42:5B:5C:7B:2F:35:04:AD:70
Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B
Certificate issuer:       /CN=0d7d3c72802223577880d38f048c81891226403b
Certificate serial:       01A0021387E75F01D4EBE5694C239011884A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
Manifest number:          0E62
Signing time:             Fri 14 Aug 2026 21:00:29 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:29 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:29 +0000
Files and hashes:         1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: MQ9ltwmlebXdIssJBVT6Wj68iIWWgcH1Rdtk0FMUm3g=)
                          2: rmlQHSPR8QbJ4-lSxSii48UeNZs.roa (hash: xz18D6VTlXYgx+ypy0VFWQBhdsBWNVKOCFQd2upOGqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:87:e7:5f:01:d4:eb:e5:69:4c:23:90:11:88:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d7d3c72802223577880d38f048c81891226403b
        Validity
            Not Before: Aug 14 21:00:29 2026 GMT
            Not After : Aug 15 21:00:29 2026 GMT
        Subject: CN=152f766ded314dd16ef29c425b5c7b2f3504ad70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:23:26:18:9e:49:5d:9d:54:c4:d5:c3:9a:f5:
                    f6:b8:47:d7:61:ba:0a:1d:ac:9d:0c:1b:27:0c:4d:
                    20:1c:07:6f:9e:e9:b4:f8:e5:29:cd:0c:e9:89:b1:
                    6e:f2:7e:77:4a:f4:fb:ba:a1:a9:ee:8b:6d:8a:eb:
                    e5:1f:d1:e0:2e:99:d3:bb:b3:0a:30:f2:1a:bf:4e:
                    39:d3:55:ae:65:06:54:fe:39:48:61:03:2f:54:96:
                    74:b2:a2:ef:da:1f:75:c2:9a:b3:3e:3a:4c:0e:13:
                    79:b0:1b:df:6a:8e:01:ac:4a:0a:8a:08:de:65:95:
                    a5:b0:34:0e:d0:51:76:d0:68:42:85:ad:8a:9b:db:
                    d2:4a:ef:98:53:1c:62:7c:66:9f:7b:83:81:14:fb:
                    7e:62:08:f8:fd:a8:2b:d5:b4:3f:b7:97:71:b0:f5:
                    6f:9a:9c:9c:1d:9a:97:49:41:9c:ba:b2:04:0e:6a:
                    fd:cb:03:f3:83:e5:57:bb:3d:97:17:e1:6a:93:2c:
                    43:a7:47:0f:74:30:61:41:85:b5:5f:ea:da:f7:bc:
                    fa:69:96:f2:1e:30:a4:9d:1b:31:7a:ca:c1:8a:0c:
                    f2:e1:cd:0b:f1:67:73:ca:4e:83:36:9d:56:c2:4a:
                    f5:90:7d:f1:f7:16:1d:60:b0:d7:58:07:3f:c1:44:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2F:76:6D:ED:31:4D:D1:6E:F2:9C:42:5B:5C:7B:2F:35:04:AD:70
            X509v3 Authority Key Identifier:
                keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b7:0d:01:cf:34:51:7f:65:4a:b2:20:8f:ce:04:23:ca:d6:
         e6:40:1f:04:50:69:55:4d:bc:ef:56:75:17:f2:ec:ad:d2:46:
         38:86:59:d4:73:10:eb:24:c1:ae:f4:04:87:8d:85:23:04:0e:
         39:23:74:5b:f9:09:0c:bd:b5:0e:92:f3:de:0c:c8:62:a8:2f:
         2a:97:29:16:4b:2a:67:6a:54:13:a5:7e:34:bd:47:66:65:57:
         a6:b1:c1:45:a0:b3:a2:f2:46:c6:f2:5f:43:d8:b9:84:3c:62:
         e1:d2:b5:dd:00:60:6c:ee:a3:32:17:18:24:33:50:0f:47:9a:
         52:56:0d:7a:1d:8c:10:62:7a:fd:de:b7:fd:b7:10:bb:4c:2c:
         3f:75:d7:0f:1a:02:7d:fb:79:49:ca:fb:7b:e7:07:ff:91:87:
         c0:16:57:34:dd:82:85:62:0e:92:c6:67:e6:02:98:7f:e3:b7:
         bb:88:84:7d:6c:78:16:41:6f:a0:4b:29:65:04:85:75:9a:61:
         70:81:20:6a:90:80:9b:83:73:ca:66:45:36:d7:5d:65:0c:ba:
         aa:da:84:0f:1c:d7:c2:5b:2e:60:2d:d7:e0:fe:c7:06:27:ff:
         3b:58:e7:6e:46:45:09:a2:01:94:79:16:90:e4:1c:fa:63:32:
         93:14:0f:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE4fnXwHU6+VpTCOQEYhKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkN2QzYzcyODAyMjIzNTc3ODgwZDM4ZjA0OGM4MTg5MTIy
NjQwM2IwHhcNMjYwODE0MjEwMDI5WhcNMjYwODE1MjEwMDI5WjAzMTEwLwYDVQQD
EygxNTJmNzY2ZGVkMzE0ZGQxNmVmMjljNDI1YjVjN2IyZjM1MDRhZDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSMmGJ5JXZ1UxNXDmvX2uEfXYboK
HaydDBsnDE0gHAdvnum0+OUpzQzpibFu8n53SvT7uqGp7ottiuvlH9HgLpnTu7MK
MPIav04501WuZQZU/jlIYQMvVJZ0sqLv2h91wpqzPjpMDhN5sBvfao4BrEoKigje
ZZWlsDQO0FF20GhCha2Km9vSSu+YUxxifGafe4OBFPt+Ygj4/agr1bQ/t5dxsPVv
mpycHZqXSUGcurIEDmr9ywPzg+VXuz2XF+FqkyxDp0cPdDBhQYW1X+ra97z6aZby
HjCknRsxesrBigzy4c0L8Wdzyk6DNp1Wwkr1kH3x9xYdYLDXWAc/wUS95wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBUvdm3tMU3RbvKcQltcey81BK1wMB8GA1UdIwQY
MBaAFA19PHKAIiNXeIDTjwSMgYkSJkA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0Mzct
ODY0ZmRiYzc5NzcwLzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0MzctODY0ZmRiYzc5Nzcw
LzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7cNAc80
UX9lSrIgj84EI8rW5kAfBFBpVU2871Z1F/LsrdJGOIZZ1HMQ6yTBrvQEh42FIwQO
OSN0W/kJDL21DpLz3gzIYqgvKpcpFksqZ2pUE6V+NL1HZmVXprHBRaCzovJGxvJf
Q9i5hDxi4dK13QBgbO6jMhcYJDNQD0eaUlYNeh2MEGJ6/d63/bcQu0wsP3XXDxoC
fft5Scr7e+cH/5GHwBZXNN2ChWIOksZn5gKYf+O3u4iEfWx4FkFvoEspZQSFdZph
cIEgapCAm4NzymZFNtddZQy6qtqEDxzXwlsuYC3X4P7HBif/O1jnbkZFCaIBlHkW
kOQc+mMykxQP4Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:22 2026 by rpki-client