Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
File:                     dahWeFOS2ifQC9snCRxZJsMVXYk.mft (raw, json)
Hash identifier:          JKFsh0XUT4ToY5jhZ3xrh1iqbIMB1XC21M16y2DpSI4=
Subject key identifier:   4E:B2:58:2D:9E:7B:95:CE:B8:34:DC:78:52:93:A6:56:93:7E:14:A9
Authority key identifier: 75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89
Certificate issuer:       /CN=75a856785392da27d00bdb27091c5926c3155d89
Certificate serial:       019E9B17773BCAD8F91C668CBFD639116E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
Manifest number:          117A
Signing time:             Sat 06 Jun 2026 04:01:06 +0000
Manifest this update:     Sat 06 Jun 2026 04:01:06 +0000
Manifest next update:     Sun 07 Jun 2026 04:01:06 +0000
Files and hashes:         1: dahWeFOS2ifQC9snCRxZJsMVXYk.crl (hash: 7y5g6cOYWVf2Ymh6HCYjJ4E30PdqwD7hX1WscsOwuNw=)
                          2: eDXxJ-0nUaJuRJ8r9tLMMsrPV9k.roa (hash: VZENBgpRHMOQW00Ak5z3+ezYs7jMSDyUdIGCk++UNGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:17:77:3b:ca:d8:f9:1c:66:8c:bf:d6:39:11:6e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a856785392da27d00bdb27091c5926c3155d89
        Validity
            Not Before: Jun  6 04:01:06 2026 GMT
            Not After : Jun  7 04:01:06 2026 GMT
        Subject: CN=4eb2582d9e7b95ceb834dc785293a656937e14a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a1:e7:34:ac:ea:45:47:4a:dd:9e:cb:d4:bd:
                    18:b5:13:d5:a1:4d:14:34:7c:27:3b:a4:bc:0f:c4:
                    3f:93:ef:cd:09:ce:7f:82:8c:77:4f:75:d4:7e:55:
                    5c:cc:73:ea:13:99:5e:55:63:e5:6b:10:6d:7e:19:
                    8e:34:4b:39:89:a1:c5:81:98:1d:d7:eb:b7:0e:18:
                    ef:d3:f7:19:47:a8:bf:bc:f6:78:a6:b0:15:68:ea:
                    46:05:1e:19:76:06:ef:e0:e0:ed:dc:fd:a6:6d:04:
                    c7:4f:11:0e:b1:06:f5:e8:1c:12:b3:6a:e2:d8:99:
                    3c:66:44:3b:13:b2:dc:79:a7:a2:07:f7:27:b1:71:
                    4e:fe:21:c3:23:e3:fa:a7:d6:f8:c9:48:c7:9f:59:
                    9b:a1:ee:68:a1:ee:c1:f0:5f:bd:d2:4d:af:62:2c:
                    3c:b2:dc:e4:55:1f:6c:ba:39:96:81:38:10:2f:6e:
                    95:bf:3e:ab:19:1e:d0:22:8c:d6:37:8d:13:4c:49:
                    bf:bf:cf:d9:6a:de:05:e2:53:4f:b7:b2:b9:34:2b:
                    25:9d:c6:c1:cd:ea:06:61:68:97:89:57:83:cf:5e:
                    b6:0a:0d:46:6a:9c:f3:92:be:79:e1:af:18:70:84:
                    a6:e7:eb:a2:b7:9d:e2:a9:7b:57:31:fd:ff:10:96:
                    1f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:B2:58:2D:9E:7B:95:CE:B8:34:DC:78:52:93:A6:56:93:7E:14:A9
            X509v3 Authority Key Identifier:
                keyid:75:A8:56:78:53:92:DA:27:D0:0B:DB:27:09:1C:59:26:C3:15:5D:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dahWeFOS2ifQC9snCRxZJsMVXYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ec0da9-ea8c-4b8e-a32a-a5bc0c70c513/1/dahWeFOS2ifQC9snCRxZJsMVXYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:45:73:a0:a4:19:2f:9a:b1:24:17:36:53:d5:56:97:19:26:
         61:3b:0b:b3:73:a5:b9:f9:a0:79:c2:81:c0:42:aa:79:22:5c:
         91:57:b3:03:7a:fa:d3:40:fa:fb:20:9a:32:24:a3:6e:3c:a2:
         be:2d:9e:4a:00:48:a2:c5:a5:e5:cb:b3:61:4d:f4:38:8b:a6:
         f0:93:0a:91:5d:eb:07:73:8a:e9:ef:fb:14:1f:b6:85:e7:d1:
         36:2a:2c:c2:f3:f7:19:4e:d9:10:9b:19:8c:c5:5c:19:d4:37:
         eb:ab:dd:61:8f:fd:20:f6:75:78:a7:8c:03:63:1d:46:72:67:
         db:5d:83:6e:d7:92:41:fc:61:29:1c:f6:0e:81:6d:a0:a1:6c:
         db:1a:90:00:db:43:8c:71:a3:57:e6:04:e6:d8:40:72:e4:4a:
         43:e2:b5:85:af:c1:fd:82:7a:56:cf:8f:12:22:ea:39:55:93:
         72:4e:5c:1a:30:3b:7f:ce:15:03:b2:98:1e:70:e3:10:4d:fe:
         94:20:52:0d:be:c1:61:bc:64:39:60:45:31:cd:23:76:12:fc:
         90:fa:bf:fd:48:fd:3e:b6:04:0b:b5:45:b6:70:f4:f4:8d:98:
         0f:e9:52:97:aa:88:aa:01:b5:16:44:67:f1:71:79:66:0d:e0:
         b0:62:46:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:19:06 2026 by rpki-client