Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
File:                     DvgMyei0RaB_7srAr8WeQtxxAmM.mft (raw, json)
Hash identifier:          5XxjzCpU7+z4UNkuB10iB9ZEGX6q5/WxGX5I9OgW8dc=
Subject key identifier:   43:DA:D0:4C:51:75:CB:CA:00:1C:F7:94:77:5B:73:60:02:A4:5D:9D
Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Certificate issuer:       /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Certificate serial:       019E2AA7B00DB126EB5B23CD30B2DA79C69F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
Manifest number:          065D
Signing time:             Fri 15 May 2026 08:01:32 +0000
Manifest this update:     Fri 15 May 2026 08:01:32 +0000
Manifest next update:     Sat 16 May 2026 08:01:32 +0000
Files and hashes:         1: DvgMyei0RaB_7srAr8WeQtxxAmM.crl (hash: XbHSkz809edCSMazqdHPBEP463tTlcD2IV1yQZGWslE=)
                          2: Xm1NyxAzrsVfmOit8GLDJIUr3T4.roa (hash: FBeGZgtFYVn2jU+qekRgjUacFdjECcP1nPbLiXskECw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2a:a7:b0:0d:b1:26:eb:5b:23:cd:30:b2:da:79:c6:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
        Validity
            Not Before: May 15 08:01:32 2026 GMT
            Not After : May 16 08:01:32 2026 GMT
        Subject: CN=43dad04c5175cbca001cf794775b736002a45d9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:11:7c:a3:ee:19:29:57:a9:5e:dd:5f:f3:
                    1f:28:26:52:03:9b:b8:64:b4:b2:e2:05:25:80:82:
                    d7:d2:be:3c:af:54:93:71:a4:85:06:2d:b5:53:15:
                    02:e8:1a:a8:25:0b:d9:02:0f:d7:fd:1b:1b:0f:e8:
                    1e:74:0b:6f:b4:36:7f:40:97:00:86:6f:44:ee:f7:
                    73:83:d4:cb:56:67:02:a2:0b:ba:2f:22:92:a4:2a:
                    0b:ae:d3:14:1c:61:8a:4b:d2:6d:85:3c:99:23:bd:
                    ce:c2:d8:0f:d0:d1:a5:aa:23:cf:4f:ce:09:53:e8:
                    cd:cb:37:e6:b5:7e:8d:90:c4:e6:db:7c:15:20:1a:
                    86:b9:aa:0a:92:42:d4:9d:39:a7:c5:c9:4b:8c:5b:
                    42:91:e0:9b:c0:ca:62:16:64:e8:c7:a3:1e:7a:65:
                    2e:a9:3e:33:8f:2b:87:ed:aa:ff:7f:aa:58:aa:88:
                    c6:21:fd:4a:be:70:25:e6:2b:8c:d5:96:7f:1f:1d:
                    ff:09:89:a2:13:50:88:2d:81:ca:1f:84:d0:0d:82:
                    75:af:8f:e1:2e:f6:b4:22:c8:2b:4f:fa:c5:03:06:
                    c4:1b:c8:9a:f7:c3:7b:30:fe:ce:d8:88:2e:4d:11:
                    f0:fc:86:ce:39:19:41:4f:49:3e:c8:8c:b7:15:3d:
                    0b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DA:D0:4C:51:75:CB:CA:00:1C:F7:94:77:5B:73:60:02:A4:5D:9D
            X509v3 Authority Key Identifier:
                keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:79:d4:d3:ad:4b:71:1b:bc:f3:de:2d:11:71:5d:94:a8:13:
         e0:58:b8:4f:03:2f:59:fc:b6:3d:a1:9e:43:c9:f5:5f:4c:84:
         2a:78:e4:e3:12:db:d3:f1:b8:df:bd:cb:fc:ae:cd:7e:23:9d:
         fe:02:d3:17:f4:9b:c3:2b:ae:fa:cb:2c:97:4c:97:21:9b:70:
         39:4e:53:9b:5a:a7:ea:97:52:9e:4c:7a:48:a4:bb:a5:81:62:
         a2:ef:b1:af:00:a3:e0:37:45:09:d4:a8:c8:c2:ea:3c:af:a4:
         cf:f2:f3:05:a3:47:e6:c9:88:d4:5d:4a:29:a6:bb:fc:51:e1:
         c3:a8:b0:c7:f7:5c:8b:da:e1:92:36:74:64:7b:5e:ed:1c:c8:
         f4:29:58:fd:60:54:4b:b4:80:58:0c:d4:a2:83:fe:86:94:3e:
         52:dd:59:43:ab:52:16:e0:04:fd:14:f9:a5:9c:c8:c0:bd:b0:
         e8:9a:33:38:73:36:60:60:e2:ad:c4:13:01:dd:36:31:16:a0:
         50:16:94:fc:bd:26:6f:a7:0b:cc:1a:98:c7:86:25:ad:34:f1:
         42:01:fc:f1:1f:78:79:ec:ee:ef:15:9e:83:ae:c2:fc:ab:48:
         95:d6:a5:6d:bb:09:40:25:b6:3d:43:3c:d3:16:e8:ac:32:14:
         94:e0:1a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:15:40 2026 by rpki-client