Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.mft
File:                     Dc5-Jqwd5N5t_3WroAShz8p4dmQ.mft (raw, json)
Hash identifier:          /xYMZs/JD0QnN8I362I+uRmCJWKJmb/l5qLTMaWsGeM=
Subject key identifier:   27:73:8F:58:99:F5:AD:D3:DF:E0:00:6E:23:98:8B:DF:D3:EF:5D:9A
Authority key identifier: 0D:CE:7E:26:AC:1D:E4:DE:6D:FF:75:AB:A0:04:A1:CF:CA:78:76:64
Certificate issuer:       /CN=0dce7e26ac1de4de6dff75aba004a1cfca787664
Certificate serial:       01A00138799F6C6B8380D20CC9DDB0A524F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.mft
Manifest number:          19FF
Signing time:             Fri 14 Aug 2026 17:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:13 +0000
Files and hashes:         1: 2UNDB84tKOWKSZtTOHQrVynZm2o.roa (hash: bE+riimbGHHE6JaqY1PK7174Vmo273vPJm4kl+wv9jA=)
                          2: Dc5-Jqwd5N5t_3WroAShz8p4dmQ.crl (hash: RtK4EiN2lkOP+e4BCgKjj9yMjG2vbbCLuB/wyWrpwyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:79:9f:6c:6b:83:80:d2:0c:c9:dd:b0:a5:24:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dce7e26ac1de4de6dff75aba004a1cfca787664
        Validity
            Not Before: Aug 14 17:01:13 2026 GMT
            Not After : Aug 15 17:01:13 2026 GMT
        Subject: CN=27738f5899f5add3dfe0006e23988bdfd3ef5d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1a:85:e7:5d:2c:49:0b:bf:db:70:49:33:6e:
                    05:8c:81:43:c3:e2:cb:ca:7f:32:02:7c:d6:e7:86:
                    37:e8:cb:c2:b7:c1:3d:9c:83:aa:42:6a:2b:b3:8b:
                    69:e5:bf:aa:0e:b3:79:54:22:56:f5:ca:97:b9:1e:
                    6b:de:79:a1:59:77:0f:56:72:35:61:b1:51:78:9e:
                    7e:57:3e:a0:ba:b7:a3:7c:d6:ca:5a:e9:9e:76:4f:
                    60:31:05:fa:1a:ec:87:99:6a:aa:4c:bb:dd:d2:50:
                    24:c6:13:d4:5e:ad:c2:f8:16:d0:42:21:0c:a7:c7:
                    37:14:5b:58:20:d5:73:93:fe:2f:b4:a3:d6:e8:50:
                    fb:cd:0a:f0:6b:d0:51:21:fc:0f:75:80:8d:b0:39:
                    2f:ed:96:f6:df:e6:d9:d9:42:86:e8:c0:a0:da:68:
                    bb:28:41:8f:ed:8a:6c:73:3c:83:4b:c9:7b:0b:82:
                    dc:42:3c:42:b5:ea:99:d6:b3:df:0c:e8:17:fe:b9:
                    df:ac:cf:0b:4c:b7:f5:df:d1:30:22:96:c7:3c:16:
                    16:b1:01:7a:10:9f:21:60:c9:56:26:45:59:69:3d:
                    85:45:ac:ef:c1:88:26:d8:e1:93:9f:dd:d0:1d:bb:
                    81:4f:96:7e:05:4f:79:37:cb:5c:44:55:8b:cb:13:
                    32:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:73:8F:58:99:F5:AD:D3:DF:E0:00:6E:23:98:8B:DF:D3:EF:5D:9A
            X509v3 Authority Key Identifier:
                keyid:0D:CE:7E:26:AC:1D:E4:DE:6D:FF:75:AB:A0:04:A1:CF:CA:78:76:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e1b5b-0b7e-4004-bf9d-114039d5a9e1/1/Dc5-Jqwd5N5t_3WroAShz8p4dmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3d:4c:2d:8f:97:52:42:fe:24:23:9f:5f:8d:0b:a3:f3:cd:
         3f:12:1f:18:c4:05:04:7e:12:28:7b:d1:c6:31:35:a7:28:f1:
         01:83:09:b0:5c:86:95:5b:00:c8:6d:2b:32:a6:26:9f:4c:0f:
         a1:aa:77:d0:00:16:34:f1:1b:65:ac:41:ed:0d:e2:37:64:e5:
         a9:93:12:02:f4:12:72:a0:7a:fb:ff:cb:1e:15:c6:95:44:55:
         90:ca:6d:e0:ef:95:c7:58:03:17:bd:c0:39:0a:74:46:78:4e:
         17:74:24:26:f0:03:f6:bc:a0:ef:17:ab:2b:eb:a7:8d:1a:8d:
         96:84:58:9d:78:ed:ab:bc:61:84:a1:53:c0:43:2f:83:85:a8:
         cc:d8:60:43:42:57:0d:19:08:9e:ef:d8:ae:c9:07:88:30:ca:
         4b:59:33:00:67:dc:f5:75:66:04:65:03:a2:5c:72:bc:84:40:
         c7:85:fc:51:0d:47:41:6a:bd:63:1c:c0:d7:df:2b:e6:6a:c7:
         8a:ab:62:13:2c:69:38:8c:d6:1c:69:e4:fa:86:7d:f8:40:42:
         6a:eb:83:1c:fd:c6:fe:53:5e:a2:5d:2c:79:54:5e:99:db:71:
         06:21:fd:12:f7:d8:38:a1:58:17:52:ec:88:1a:cd:af:75:32:
         8c:a2:f5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:30 2026 by rpki-client