Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
File:                     dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft (raw, json)
Hash identifier:          rACgoKDWoyu8GiIX4vq6nM+9w5zx6hxq9BkypDqEms8=
Subject key identifier:   73:AC:AD:E7:61:0A:1F:F7:A2:90:8F:35:F5:22:54:D7:84:BE:B2:EA
Authority key identifier: 76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30
Certificate issuer:       /CN=7699c189027e25ecc53f98b52ea65ae725d2a730
Certificate serial:       01A02A33F65C13CD692AC0E1DB2B8DAB9489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
Manifest number:          15E6
Signing time:             Sat 22 Aug 2026 16:00:43 +0000
Manifest this update:     Sat 22 Aug 2026 16:00:43 +0000
Manifest next update:     Sun 23 Aug 2026 16:00:43 +0000
Files and hashes:         1: 6DOga19N-SJus9fSs8aWod0Yc8s.roa (hash: 6YzaiBJdvsex7JXKRsYEZt98CcuLIqwEZkpbs74D19I=)
                          2: XE1kOIB75TvdzQX6XL4UIF1VSVU.roa (hash: m19jT0n9FXKgSHyXS7xQh4IgY66LSF6KAUB6MwLyHjw=)
                          3: dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl (hash: mfU5LKI07uF6byXAEHDFuG38EzjEL9QRHvG9JwwgKp0=)
                          4: in97d_QuA5JBuVN7OnV-KU6w3C8.roa (hash: zwPzJSQ51+tk8t5b6PNsOReOwHPxkeVD+OmohksBsx4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:2a:33:f6:5c:13:cd:69:2a:c0:e1:db:2b:8d:ab:94:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7699c189027e25ecc53f98b52ea65ae725d2a730
        Validity
            Not Before: Aug 22 16:00:43 2026 GMT
            Not After : Aug 23 16:00:43 2026 GMT
        Subject: CN=73acade7610a1ff7a2908f35f52254d784beb2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:c5:47:cd:f7:cb:35:a2:f5:ff:61:ae:4c:
                    c7:6e:65:3d:38:ec:6a:9a:ec:77:89:ee:43:66:e6:
                    09:bc:6c:ca:ad:39:4a:0b:3b:11:48:91:8a:db:ab:
                    cb:57:5a:c6:d3:fd:f5:bd:03:66:2e:af:f5:f8:3a:
                    c9:e7:89:a4:92:3a:b1:f7:57:87:d9:d3:f0:dc:99:
                    22:14:ef:8e:c4:f8:f3:10:b6:00:99:cd:cd:22:11:
                    60:75:74:75:f3:20:07:10:da:f9:d5:26:61:b8:d7:
                    a6:6a:17:72:71:9e:98:f1:16:e9:94:bf:5f:22:14:
                    c6:a1:80:37:dd:17:98:d7:cf:1d:65:b5:20:63:34:
                    b5:cf:39:18:35:c0:28:7c:26:60:90:aa:c9:12:fd:
                    d9:8a:a3:e4:f0:c6:cd:fa:0b:67:84:5e:d8:7f:e4:
                    d8:db:aa:fa:f8:47:bd:e6:6d:66:6d:c5:55:29:9c:
                    e1:e3:d9:89:8b:27:22:43:c3:a2:10:b6:69:48:9b:
                    c6:33:3f:f0:18:18:e8:b9:dd:e0:66:05:60:ae:58:
                    81:3c:c8:01:ae:d7:f1:12:87:8c:52:38:c1:20:f7:
                    38:b5:69:38:96:b9:da:12:a3:5d:b1:ff:3b:01:37:
                    53:cb:2f:75:d1:c0:03:a1:61:45:9b:be:fd:da:01:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:AC:AD:E7:61:0A:1F:F7:A2:90:8F:35:F5:22:54:D7:84:BE:B2:EA
            X509v3 Authority Key Identifier:
                keyid:76:99:C1:89:02:7E:25:EC:C5:3F:98:B5:2E:A6:5A:E7:25:D2:A7:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dpnBiQJ-JezFP5i1LqZa5yXSpzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/717555-354f-4b37-8a6a-0940436691bd/1/dpnBiQJ-JezFP5i1LqZa5yXSpzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:aa:30:e3:23:fd:29:c0:0d:f1:8c:78:f4:c5:12:00:81:d7:
         12:b5:66:a4:ae:fc:d7:b6:2a:17:b2:8c:18:a4:0c:9d:e1:a5:
         6c:9a:6a:d6:f0:bf:33:45:7b:68:9a:c9:f7:eb:b3:23:19:17:
         63:d2:b1:91:0d:02:f5:3a:20:8a:04:48:f1:84:72:16:09:a6:
         cc:45:40:cc:20:3d:3d:32:ee:5c:36:aa:fe:d5:f4:d3:5a:ab:
         73:c1:1d:fd:1a:27:2c:8c:32:e6:71:a9:f5:59:ca:29:c2:91:
         43:80:57:ee:40:c8:3e:f6:f4:fc:5a:11:b9:37:e6:a0:71:63:
         c8:45:15:06:b9:31:61:03:71:ab:fa:13:f4:78:e2:0a:51:a2:
         e7:9e:c9:04:ed:3e:b1:e8:c2:b8:a7:31:26:95:d8:e2:53:08:
         5e:4f:df:f8:86:b9:ee:82:4e:f4:be:bf:9b:6d:f0:cb:cc:09:
         ef:29:c3:a6:57:fb:9c:61:47:22:01:c6:db:49:88:16:8c:c0:
         9f:91:5e:1d:8e:aa:d9:e4:11:66:8f:f5:0d:03:d2:53:86:3c:
         dd:d1:d9:c3:4b:71:4a:1a:87:77:56:47:1a:8b:a1:74:a3:9f:
         c4:90:04:bc:6d:25:61:14:4d:56:a7:10:46:85:2a:a8:b1:61:
         b7:f9:e5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:53:42 2026 by rpki-client