Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
File:                     DWu1npe_Ox78NWnflWxF5HKEmGE.mft (raw, json)
Hash identifier:          i4bUu9A58lTQXeYkGrp1zEAlu/FOZ11D4MBgjqeX5fw=
Subject key identifier:   DF:50:5B:7E:FD:2F:6A:AB:B2:44:45:3B:2F:21:90:47:A6:7E:A6:40
Authority key identifier: 0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61
Certificate issuer:       /CN=0d6bb59e97bf3b1efc3569df956c45e472849861
Certificate serial:       01A001019908EB36D5419761F2DDA10D90F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
Manifest number:          0D11
Signing time:             Fri 14 Aug 2026 16:01:16 +0000
Manifest this update:     Fri 14 Aug 2026 16:01:16 +0000
Manifest next update:     Sat 15 Aug 2026 16:01:16 +0000
Files and hashes:         1: DWu1npe_Ox78NWnflWxF5HKEmGE.crl (hash: CruBrRjz4U0eIoE4EKxkAtOu7ZAlA4CpoPuJJjboxoQ=)
                          2: j8vNC93uxoh-4kk4cHhskKuIFe4.roa (hash: BN9kSSFWkYcPXBEGoOjVhdYG3iHtGqPP4CWGHkZ5iSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:01:99:08:eb:36:d5:41:97:61:f2:dd:a1:0d:90:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bb59e97bf3b1efc3569df956c45e472849861
        Validity
            Not Before: Aug 14 16:01:16 2026 GMT
            Not After : Aug 15 16:01:16 2026 GMT
        Subject: CN=df505b7efd2f6aabb244453b2f219047a67ea640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:27:43:56:7a:33:fe:ff:3e:22:67:9a:5d:a2:
                    af:f5:00:2d:e9:00:bb:0c:bb:7e:05:b2:84:39:34:
                    7c:21:8c:af:56:90:19:21:21:36:dd:f3:2d:87:de:
                    66:a0:51:e4:22:50:d9:45:6b:8f:f4:60:33:43:03:
                    ef:0f:9c:be:24:aa:b1:e1:ec:7e:ac:a1:5d:b4:2a:
                    c9:46:8e:ad:09:88:73:6b:e2:05:86:36:e3:22:ac:
                    f6:4c:c1:59:2a:91:06:b8:01:7e:05:5a:f8:ff:92:
                    fc:bb:f6:f9:a4:2c:18:5f:28:d9:5f:f3:44:44:2d:
                    1e:68:b1:27:ad:a8:c3:80:c4:4a:f2:db:ba:8a:26:
                    0c:f5:41:45:55:25:da:d0:7e:86:d8:60:d1:42:c3:
                    41:19:c3:cb:c3:fc:7d:7d:01:12:0c:19:8a:ce:63:
                    a5:aa:9f:38:2b:e5:0a:91:a5:cf:64:4b:c7:f3:e1:
                    aa:70:0e:e6:0d:d5:17:a9:9c:2c:1f:2e:ee:d5:51:
                    ab:eb:f8:a5:20:b3:db:44:be:07:75:55:48:ed:51:
                    e0:71:d4:f9:b0:74:25:3c:da:7f:cc:01:40:82:59:
                    6d:de:30:b8:e9:62:91:5b:f9:2b:e6:90:df:39:15:
                    8e:7c:18:f9:91:86:24:e8:06:8d:fd:d1:33:16:be:
                    fb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:50:5B:7E:FD:2F:6A:AB:B2:44:45:3B:2F:21:90:47:A6:7E:A6:40
            X509v3 Authority Key Identifier:
                keyid:0D:6B:B5:9E:97:BF:3B:1E:FC:35:69:DF:95:6C:45:E4:72:84:98:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWu1npe_Ox78NWnflWxF5HKEmGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d3de4-76a5-4941-b626-e954e16ab27d/1/DWu1npe_Ox78NWnflWxF5HKEmGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:85:dd:2b:30:8a:47:a5:4c:cc:95:49:3a:d3:24:de:16:ea:
         da:9d:77:68:15:78:e1:bb:d1:13:f9:3e:9c:3a:da:d1:b6:88:
         96:7b:2d:6a:1c:51:80:3c:ed:f0:ef:71:df:73:14:fb:24:3c:
         71:1d:67:45:e6:94:57:16:05:7a:c5:4d:01:e6:13:47:ef:78:
         a2:9a:26:ac:48:74:b8:7c:bc:a1:19:e7:39:9a:52:73:a9:b7:
         45:36:9a:7e:de:45:04:f6:a3:c1:5c:ab:ab:32:20:f1:84:c2:
         41:ad:f3:e3:82:89:0c:5c:55:d7:3e:44:2c:87:13:2b:60:40:
         19:48:39:ca:9e:b2:fe:fa:a1:37:90:5c:8b:91:aa:37:ad:d5:
         f2:2f:8f:c3:d1:c1:6d:25:7e:72:13:9e:7b:57:8a:c4:db:4c:
         35:02:f0:6f:d4:2f:19:aa:bf:9d:62:52:91:23:4b:2d:03:b3:
         50:89:e3:f5:67:23:3b:ed:fa:16:6d:e9:fd:00:db:ed:9d:27:
         92:9b:25:f7:ae:da:77:fb:ad:d0:43:ab:69:6a:b4:a0:e3:de:
         6b:4c:cd:db:86:a4:76:27:73:8e:c2:9a:56:48:57:52:80:49:
         9e:8d:a1:5f:4e:cf:7e:a1:fe:60:67:72:b5:3a:2e:99:6c:85:
         73:d8:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:58 2026 by rpki-client