Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File:                     DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier:          pkY/QMfXXpd7tWCd0j1PdXCB/YgW2llakDBZ9eSIPB0=
Subject key identifier:   FC:E9:C7:31:64:5B:09:02:DD:45:88:ED:AD:A4:A2:50:5D:CE:F9:3A
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer:       /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial:       019E303B477FA79361CBD8D55B7797A75912
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number:          075B
Signing time:             Sat 16 May 2026 10:00:51 +0000
Manifest this update:     Sat 16 May 2026 10:00:51 +0000
Manifest next update:     Sun 17 May 2026 10:00:51 +0000
Files and hashes:         1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: 1lOUSWqo2WLoR0ljtVZ2jN6++lXYCISnWSr2XEHvY9c=)
                          2: c437ZNmHK-X0W4HjrhQoFz8sC0k.roa (hash: OO5X7dolAlKIdBk6pdoOqhkso/69x43tE+00VUmgi4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:3b:47:7f:a7:93:61:cb:d8:d5:5b:77:97:a7:59:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
        Validity
            Not Before: May 16 10:00:51 2026 GMT
            Not After : May 17 10:00:51 2026 GMT
        Subject: CN=fce9c731645b0902dd4588edada4a2505dcef93a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:ac:71:e6:f7:43:d2:7d:f9:47:fd:51:30:
                    f4:26:1a:4d:81:6a:bb:1c:b6:ad:51:6f:c1:f1:cd:
                    fa:e5:1e:f5:74:15:f7:b8:d1:c1:b4:50:cd:03:e3:
                    ff:6e:9c:79:a5:a1:8e:f6:78:19:21:de:8e:18:93:
                    76:a2:46:11:55:de:19:52:60:13:1a:94:7f:ee:97:
                    11:be:fc:94:62:b7:04:8f:12:39:c3:d5:42:0f:e5:
                    74:cc:f6:07:ae:f4:3d:8f:7b:05:30:31:a2:c8:a2:
                    02:6d:12:d0:7c:5c:6c:f9:bd:73:05:69:61:42:b0:
                    04:50:2e:68:5d:c9:8a:1b:82:df:4a:ad:13:dc:92:
                    0e:95:9c:be:96:35:51:59:fd:97:59:09:24:6f:d4:
                    9f:fe:9b:47:23:1c:17:31:f3:be:8e:ac:f3:b8:28:
                    1e:ad:82:f2:19:6d:97:10:ae:8c:42:09:70:03:a6:
                    1b:c6:49:3c:23:14:26:51:5b:4a:f6:46:fd:be:40:
                    70:f8:21:37:d4:6b:e1:f3:24:f1:43:ac:19:57:35:
                    6b:00:6a:f6:aa:b7:33:d2:9d:9d:a2:9e:0d:9f:7f:
                    2e:6b:f9:d3:49:63:76:90:7c:78:2f:2a:b9:a1:30:
                    92:d6:36:33:3c:0f:f1:52:75:12:91:c3:30:21:31:
                    8a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E9:C7:31:64:5B:09:02:DD:45:88:ED:AD:A4:A2:50:5D:CE:F9:3A
            X509v3 Authority Key Identifier:
                keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:64:cc:f4:51:17:15:a8:4e:33:5d:f4:3f:17:6b:a5:b4:a1:
         d7:c1:52:91:2e:3e:40:9b:3b:58:39:97:bc:59:87:07:5b:23:
         1b:4f:63:70:84:c6:42:14:af:1d:91:8b:06:2d:b3:4c:3a:1b:
         12:e0:7a:d6:b3:11:92:c3:92:b4:2d:f1:f6:69:ea:43:32:0c:
         cc:a7:9c:01:7f:c4:ae:a5:ba:76:84:44:15:f5:3c:6e:56:c5:
         2d:88:2d:99:39:7a:c2:14:8b:a4:7e:76:33:05:fb:a0:b2:9f:
         97:bc:a9:6b:43:88:be:49:9c:d6:fa:a0:4b:cd:e3:1e:fc:ae:
         d6:cf:34:ee:3d:45:eb:9a:1a:69:4d:0f:c1:4f:8f:09:07:66:
         91:f0:44:91:35:49:b3:39:59:d9:f6:fb:02:d7:fa:54:cb:17:
         57:8a:83:9f:f0:6d:f1:77:6a:23:ba:3d:c9:4b:f8:27:09:97:
         6e:75:18:c7:44:2d:5a:be:7f:c7:0c:47:36:27:78:4c:37:d1:
         f5:7d:7f:3c:3b:6a:1f:fe:d2:19:8f:6f:f4:67:e9:b7:4e:d8:
         8f:8f:36:1f:83:17:ce:d5:33:0f:22:9e:bd:e9:83:db:4e:bb:
         6a:db:84:e6:e9:33:91:b8:a0:21:6e:b7:d0:04:cc:15:85:ae:
         e7:c6:49:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:40:13 2026 by rpki-client