Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
File:                     DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft (raw, json)
Hash identifier:          t1EAXsa1e+oKn2U0TT8aM8x6Elp7zSL+f2aGNMjk4Yg=
Subject key identifier:   06:C3:6A:3A:0C:7C:EA:DF:97:F3:89:38:39:CC:A1:AD:9E:F0:0F:A3
Authority key identifier: 0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5
Certificate issuer:       /CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
Certificate serial:       019E3072AB011C79D05C8CEF8E29B976845B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
Manifest number:          121C
Signing time:             Sat 16 May 2026 11:01:21 +0000
Manifest this update:     Sat 16 May 2026 11:01:21 +0000
Manifest next update:     Sun 17 May 2026 11:01:21 +0000
Files and hashes:         1: DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl (hash: xG5nDdvsPrjNoFB/777d/9SHdb1//ioQaSHUFLDp2NU=)
                          2: SxljHk2cGiaCqx7oBYorH1FyNLM.roa (hash: X0K5Gb0sXyJIajhaLNptLUdlUrzJv1KHea1ZlF2NI+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:72:ab:01:1c:79:d0:5c:8c:ef:8e:29:b9:76:84:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cd27fea3baa3ef680e8f7a07a5f194ac49892a5
        Validity
            Not Before: May 16 11:01:21 2026 GMT
            Not After : May 17 11:01:21 2026 GMT
        Subject: CN=06c36a3a0c7ceadf97f3893839cca1ad9ef00fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:8d:1f:dd:b3:3d:1e:52:a9:db:a1:d4:8c:
                    24:f3:ae:c6:e3:37:ad:1e:16:f0:0b:9b:ad:26:57:
                    20:77:fb:d4:52:4e:eb:75:cb:53:94:2a:1b:8f:ae:
                    f0:d9:7b:16:5f:b8:ea:42:9c:e3:91:93:cf:57:a4:
                    b9:0b:ee:32:6a:f5:51:34:35:ca:1a:99:06:85:41:
                    cf:dc:99:ae:68:f2:1a:26:5b:be:60:3a:bb:12:13:
                    52:a3:dd:1c:32:c3:66:30:9b:73:c7:1a:c5:01:5a:
                    2c:96:c7:4a:bb:36:ca:9e:2c:70:af:44:f4:97:18:
                    a7:42:f6:51:09:b2:66:18:a1:59:12:d7:1f:84:0a:
                    0c:57:74:6b:02:7b:61:1f:1a:94:77:18:f0:39:b0:
                    b9:4d:cc:96:f5:a1:5f:dd:57:20:86:58:34:b8:61:
                    49:81:ec:84:07:fd:20:80:ce:16:d3:eb:d3:1f:7b:
                    e4:b5:ab:92:43:10:df:45:7b:89:78:8f:fa:92:23:
                    8e:e0:d7:be:1a:0a:2f:72:4e:0d:79:66:02:af:cc:
                    32:80:79:e1:92:49:68:86:43:2d:73:32:3d:10:51:
                    ed:f5:83:c1:c6:ce:da:8f:03:77:5e:bd:47:09:a3:
                    88:f7:9f:92:65:52:97:3a:11:01:9c:92:47:80:f6:
                    73:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C3:6A:3A:0C:7C:EA:DF:97:F3:89:38:39:CC:A1:AD:9E:F0:0F:A3
            X509v3 Authority Key Identifier:
                keyid:0C:D2:7F:EA:3B:AA:3E:F6:80:E8:F7:A0:7A:5F:19:4A:C4:98:92:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNJ_6juqPvaA6Pegel8ZSsSYkqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5531a6-964a-419e-95ff-a60f13198d5d/1/DNJ_6juqPvaA6Pegel8ZSsSYkqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:41:23:26:30:79:44:27:b4:13:dd:ed:7e:42:7f:21:ff:a0:
         46:31:49:0c:82:ef:81:84:06:af:49:97:22:a9:0e:48:70:56:
         74:72:dc:5d:87:83:5b:44:41:d0:76:b2:f6:d8:69:3b:63:7a:
         38:ab:0f:08:d2:52:5f:00:5b:c5:4f:03:3d:43:50:7e:bd:70:
         20:69:6c:81:35:30:92:15:56:d8:53:6e:26:47:1e:9e:59:e9:
         98:7e:6c:16:a6:10:4d:61:b4:0b:05:8a:07:4c:02:75:fe:70:
         3c:c2:ca:b9:a9:15:58:95:41:1c:6d:5d:cd:12:12:e7:82:a7:
         7c:c7:f6:8b:b3:ca:58:2e:54:4c:3a:5e:6b:a7:94:07:33:08:
         93:cc:ff:21:43:27:2c:19:19:9f:91:9c:76:8f:3e:b4:5d:15:
         22:a5:c8:59:c4:11:be:7a:03:a3:10:a2:30:43:54:4f:06:1c:
         5f:a8:c3:44:5a:38:a7:8a:ce:cb:75:b8:74:6b:d8:5e:8f:1d:
         0d:93:f9:c5:e9:f0:24:dc:74:d9:c0:75:9a:20:c1:98:08:9e:
         aa:a1:99:9a:7f:0b:30:19:8a:54:56:4a:f4:15:8a:7a:2b:8d:
         cb:0a:b8:ee:9d:da:50:ae:37:80:88:d3:50:fa:1a:6c:1b:2e:
         64:43:d8:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wcqsBHHnQXIzvjim5doRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjZDI3ZmVhM2JhYTNlZjY4MGU4ZjdhMDdhNWYxOTRhYzQ5
ODkyYTUwHhcNMjYwNTE2MTEwMTIxWhcNMjYwNTE3MTEwMTIxWjAzMTEwLwYDVQQD
EygwNmMzNmEzYTBjN2NlYWRmOTdmMzg5MzgzOWNjYTFhZDllZjAwZmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKONH92zPR5Sqduh1Iwk867G4zet
HhbwC5utJlcgd/vUUk7rdctTlCobj67w2XsWX7jqQpzjkZPPV6S5C+4yavVRNDXK
GpkGhUHP3JmuaPIaJlu+YDq7EhNSo90cMsNmMJtzxxrFAVoslsdKuzbKnixwr0T0
lxinQvZRCbJmGKFZEtcfhAoMV3RrAnthHxqUdxjwObC5TcyW9aFf3Vcghlg0uGFJ
geyEB/0ggM4W0+vTH3vktauSQxDfRXuJeI/6kiOO4Ne+Ggovck4NeWYCr8wygHnh
kklohkMtczI9EFHt9YPBxs7ajwN3Xr1HCaOI95+SZVKXOhEBnJJHgPZzvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbDajoMfOrfl/OJODnMoa2e8A+jMB8GA1UdIwQY
MBaAFAzSf+o7qj72gOj3oHpfGUrEmJKlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYt
YTYwZjEzMTk4ZDVkLzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS81NTMxYTYtOTY0YS00MTllLTk1ZmYtYTYwZjEzMTk4ZDVk
LzEvRE5KXzZqdXFQdmFBNlBlZ2VsOFpTc1NZa3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWEEjJjB5
RCe0E93tfkJ/If+gRjFJDILvgYQGr0mXIqkOSHBWdHLcXYeDW0RB0Hay9thpO2N6
OKsPCNJSXwBbxU8DPUNQfr1wIGlsgTUwkhVW2FNuJkcenlnpmH5sFqYQTWG0CwWK
B0wCdf5wPMLKuakVWJVBHG1dzRIS54KnfMf2i7PKWC5UTDpea6eUBzMIk8z/IUMn
LBkZn5Gcdo8+tF0VIqXIWcQRvnoDoxCiMENUTwYcX6jDRFo4p4rOy3W4dGvYXo8d
DZP5xenwJNx02cB1miDBmAieqqGZmn8LMBmKVFZK9BWKeiuNywq47p3aUK43gIjT
UPoabBsuZEPYHQ==
-----END CERTIFICATE-----
Generated at Sat May 16 19:31:49 2026 by rpki-client