Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
File:                     DVNi1c7cImPJBzUDwu6RT5PzHvI.mft (raw, json)
Hash identifier:          v2UX0Ft8HnoZkKuBUmo4jkh7wB1NcOrawSkcaP8zhpU=
Subject key identifier:   52:89:63:10:CC:BE:7E:5B:C9:6A:C8:1F:59:06:D8:00:DC:37:E8:1E
Authority key identifier: 0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2
Certificate issuer:       /CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
Certificate serial:       01A06F840476481F390E3F3FC298AD5373B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
Manifest number:          B3
Signing time:             Sat 05 Sep 2026 03:01:57 +0000
Manifest this update:     Sat 05 Sep 2026 03:01:57 +0000
Manifest next update:     Sun 06 Sep 2026 03:01:57 +0000
Files and hashes:         1: 3vLigIAmr0enEPBVbFd-Efg6QLM.roa (hash: z47OAtBU59ox9Fv71R6UjtJxoV/Msptr2wMI8Rk4Vlc=)
                          2: DVNi1c7cImPJBzUDwu6RT5PzHvI.crl (hash: VeO+E3Di/efgTAl5Rff9/lxUubykFBdJER2AyH6u128=)
                          3: w82F-_2KUo6780OReWbrcXFgOCI.roa (hash: 2sFKVV9OfbJAOCqpzaEbs0k2EluCBWR6KS26tdOE0SQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:84:04:76:48:1f:39:0e:3f:3f:c2:98:ad:53:73:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d5362d5cedc2263c9073503c2ee914f93f31ef2
        Validity
            Not Before: Sep  5 03:01:57 2026 GMT
            Not After : Sep  6 03:01:57 2026 GMT
        Subject: CN=52896310ccbe7e5bc96ac81f5906d800dc37e81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ff:02:83:75:01:28:a5:92:7e:e6:91:89:68:
                    09:f8:1f:96:cf:f8:22:52:3c:5d:b5:dc:c2:56:33:
                    28:2d:88:92:02:ee:23:09:e1:ec:c9:eb:fb:e0:6d:
                    83:9c:60:a5:78:4b:ab:b8:6a:70:64:5b:be:97:05:
                    24:bc:0c:bc:dc:8c:c0:bc:4e:e5:31:61:6d:8b:ff:
                    43:ef:9e:19:5f:00:b2:bc:15:3a:17:63:d0:36:40:
                    17:e6:c3:a8:05:df:38:8f:aa:6e:6b:ee:75:92:4f:
                    90:30:0e:98:d7:64:32:bd:9d:fd:32:ef:a0:b6:76:
                    96:bd:54:de:b9:6c:cf:f4:01:f7:6f:f0:09:b1:c8:
                    2a:86:6b:1a:fc:67:9a:fa:5f:ac:10:0e:bb:92:48:
                    5e:1e:a7:f4:87:f7:ef:df:64:81:ba:e2:25:07:a9:
                    b6:90:eb:bd:89:86:7d:6b:8d:88:7c:01:c2:94:17:
                    4d:b9:d7:46:e7:7d:dc:ce:50:d5:43:82:d3:f2:17:
                    df:41:a4:eb:e0:7e:76:df:16:4e:eb:ca:b2:23:c8:
                    d2:94:15:85:da:4f:7a:f6:e6:c7:59:22:1f:27:6c:
                    f5:ee:04:dc:b0:3a:74:f9:3f:86:15:e2:d4:e5:17:
                    a4:df:d8:95:8c:7d:0a:ee:a8:53:8b:f3:39:b4:21:
                    44:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:89:63:10:CC:BE:7E:5B:C9:6A:C8:1F:59:06:D8:00:DC:37:E8:1E
            X509v3 Authority Key Identifier:
                keyid:0D:53:62:D5:CE:DC:22:63:C9:07:35:03:C2:EE:91:4F:93:F3:1E:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVNi1c7cImPJBzUDwu6RT5PzHvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/DVNi1c7cImPJBzUDwu6RT5PzHvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b3:d3:dc:9c:86:cf:d2:5c:f7:5b:6f:b1:81:37:a9:ff:ac:
         14:72:3d:3c:e8:1f:1a:f1:f9:18:d1:80:0e:9d:8c:06:33:44:
         dc:fb:e1:c1:aa:76:a3:ae:66:2e:9d:ce:a1:4e:30:5e:ea:6d:
         19:09:ee:d2:b1:8d:dd:9b:13:11:1f:f7:ab:19:0d:67:08:02:
         08:3d:db:6d:85:d9:17:0a:33:78:d2:1a:92:8b:25:9a:1e:b6:
         b9:0b:d4:70:9c:32:64:0e:a8:d7:8b:45:9f:ae:ea:42:d8:5e:
         84:46:a9:cb:a0:df:b9:7b:96:13:0e:ee:f3:fd:6b:f0:64:dd:
         1b:d8:a5:22:ba:0a:51:11:e6:77:5a:33:36:0c:6b:35:d8:83:
         ce:1b:83:66:35:76:1e:79:e6:38:34:f3:2f:47:a9:f8:25:c4:
         37:8b:57:75:7b:24:28:f0:4e:2b:61:ad:db:1b:3b:b3:00:08:
         96:89:50:75:72:75:46:ca:3a:eb:34:2f:04:83:c8:3f:3a:81:
         c0:51:4c:63:e6:40:19:0d:45:dd:f1:4f:33:94:b6:af:b1:5d:
         9f:aa:b5:52:23:7a:8c:6f:cf:92:70:28:23:5f:eb:a1:41:98:
         be:24:0c:62:d0:59:2f:f2:1d:37:38:99:9d:5a:2e:7b:0f:c8:
         04:55:ce:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:08:29 2026 by rpki-client