Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File:                     dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier:          qJUTKNzKDo5wOCIqZbI6Zr2mdGecrfl1iR+TnYn/goM=
Subject key identifier:   85:45:2E:B0:1F:A3:E2:8F:45:D9:2F:31:92:6E:85:08:4E:3F:C1:8A
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer:       /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial:       019EFB3B0F56E1CECB5FAD9DF82BA5CE74FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number:          0DA2
Signing time:             Wed 24 Jun 2026 20:03:32 +0000
Manifest this update:     Wed 24 Jun 2026 20:03:32 +0000
Manifest next update:     Thu 25 Jun 2026 20:03:32 +0000
Files and hashes:         1: cLTBY0x98iSs-6Cq3vbECPm_74w.asa (hash: 8w6sqSdlGvX1lbVCngXKKl24zTm7KhQKQzRK40Ycchc=)
                          2: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: SidpVjB4S4xeb68X8kK7zOyxkeyRyh+hrEWR7l8jJoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 20:03:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:3b:0f:56:e1:ce:cb:5f:ad:9d:f8:2b:a5:ce:74:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
        Validity
            Not Before: Jun 24 20:03:32 2026 GMT
            Not After : Jun 25 20:03:32 2026 GMT
        Subject: CN=85452eb01fa3e28f45d92f31926e85084e3fc18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:73:3a:82:e7:c7:42:44:5c:2c:2a:9a:31:
                    3f:af:bb:9b:c5:60:84:35:8c:95:25:d0:5f:5e:4f:
                    a3:76:74:d4:16:59:37:f4:66:6b:e3:8c:cb:6c:2d:
                    51:b2:f8:59:c6:42:f8:d5:3e:38:c8:04:12:73:a3:
                    c0:3a:eb:2d:f4:1a:d4:88:5b:30:d0:05:96:af:84:
                    c3:5d:c5:e4:77:59:cd:0c:06:dc:31:6e:37:d5:a6:
                    d8:ef:26:e1:80:e6:d9:60:f2:c2:3c:1b:f8:a8:d5:
                    72:1c:45:b7:f3:4e:e2:a4:70:b7:30:79:3d:19:28:
                    48:cd:7c:55:24:46:aa:f8:e9:de:99:25:c8:b7:65:
                    c6:b4:0e:96:ec:3a:91:0f:60:1c:cd:f3:fb:ce:c4:
                    6d:23:bb:f6:3f:ba:8b:1c:5f:35:04:9c:fe:96:27:
                    17:26:13:60:9f:3c:81:ac:8d:f1:0e:33:41:a7:88:
                    ea:72:be:09:1a:0e:f2:0a:5b:59:0a:fc:d2:5a:81:
                    51:a3:e8:46:81:79:1e:48:05:a4:53:b0:8d:9f:6d:
                    96:52:44:2e:f9:9b:e9:60:ba:5a:92:72:75:2f:78:
                    d1:df:54:66:ed:34:50:42:64:8a:9a:80:42:6c:fc:
                    02:cf:c0:d1:ab:b7:1c:7c:52:70:9c:a0:78:c6:d8:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:45:2E:B0:1F:A3:E2:8F:45:D9:2F:31:92:6E:85:08:4E:3F:C1:8A
            X509v3 Authority Key Identifier:
                keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:37:19:47:66:39:7b:81:ea:4e:cc:24:a7:d6:df:79:0f:10:
         8c:17:88:74:c5:5c:6b:53:b2:5a:8d:17:a2:be:d4:13:70:53:
         e6:b9:d6:41:da:e6:e2:43:99:78:41:18:6d:5c:07:4c:a4:07:
         f8:97:f3:1a:3b:4f:29:56:cc:87:1b:c2:8b:75:c6:5d:17:e5:
         93:12:43:96:f1:84:63:85:73:61:7f:ef:0d:dc:6c:32:55:cf:
         ad:76:26:35:0f:18:16:b3:bc:e2:3b:7e:8f:d4:0c:f1:14:1b:
         a6:d7:8b:5d:71:b6:49:82:b3:75:42:78:4b:ce:9f:e6:ea:c7:
         04:c6:48:78:4e:c4:94:ad:ee:25:5c:34:be:09:e7:0d:4b:37:
         0f:11:64:43:a4:13:76:6f:7a:eb:33:83:ee:22:bf:01:d7:04:
         d1:93:58:f5:99:c2:08:bf:b0:3a:b6:4a:3c:ef:53:00:93:f3:
         53:c1:89:89:15:01:75:69:04:78:77:4b:1e:56:99:29:df:a5:
         47:89:59:07:66:cf:f7:c5:a6:1b:29:79:0b:ef:c3:93:b8:61:
         21:6a:2e:75:7c:c4:84:23:9f:09:56:cb:66:1e:05:c3:98:72:
         2d:03:da:ab:b3:23:2c:89:9b:1e:e3:7f:63:3a:14:3e:30:60:
         a0:7a:b0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 06:56:01 2026 by rpki-client