Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
File:                     DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json)
Hash identifier:          vDGcrIwWXmU4/WSj+BFmr8OGq7eUC73+HxupLcfTflg=
Subject key identifier:   BC:FA:C8:41:52:4D:2C:67:BE:D4:4B:89:4C:CC:B4:B4:81:F1:7C:C2
Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E
Certificate issuer:       /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
Certificate serial:       019F17F92F4E8543F49D96D799C076BDA613
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
Manifest number:          07D3
Signing time:             Tue 30 Jun 2026 10:00:34 +0000
Manifest this update:     Tue 30 Jun 2026 10:00:34 +0000
Manifest next update:     Wed 01 Jul 2026 10:00:34 +0000
Files and hashes:         1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: Wl5/rXEdZvhlZJSkkjeBVH17v6bhGkkJwYbfp8Uqdkc=)
                          2: c437ZNmHK-X0W4HjrhQoFz8sC0k.roa (hash: OO5X7dolAlKIdBk6pdoOqhkso/69x43tE+00VUmgi4I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 10:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:f9:2f:4e:85:43:f4:9d:96:d7:99:c0:76:bd:a6:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e
        Validity
            Not Before: Jun 30 10:00:34 2026 GMT
            Not After : Jul  1 10:00:34 2026 GMT
        Subject: CN=bcfac841524d2c67bed44b894cccb4b481f17cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:85:d0:5c:42:8a:d2:61:22:37:1e:93:e6:
                    21:c9:e6:47:1f:cf:4d:bc:da:2c:21:75:00:6b:ec:
                    e8:27:61:0e:a4:01:c2:bc:cb:d0:eb:ae:52:d4:46:
                    2e:dd:14:26:1d:27:b8:6d:3e:e3:a8:53:00:ba:b3:
                    a8:d3:d7:cb:f5:73:95:e8:49:23:ab:89:2e:47:ff:
                    f8:a7:68:4c:b9:3c:f4:9a:fd:c9:42:d4:01:38:b5:
                    73:7d:1e:2a:31:0a:60:a5:a8:9f:8e:2e:5a:0e:61:
                    b7:ab:23:a1:ab:c5:67:de:9f:90:48:4c:ee:7d:52:
                    d8:dd:bc:ea:46:fd:6d:e1:8b:b0:71:92:be:b0:91:
                    ef:ad:32:d1:f9:4d:16:07:b7:9c:f7:35:5b:3e:0e:
                    da:0d:ca:64:f3:dc:8a:38:1f:3f:22:c7:4f:de:ad:
                    8d:ff:b2:b7:8f:ee:72:1a:c3:f6:2b:ad:55:ed:9c:
                    1b:ec:8d:12:ec:01:22:82:ba:29:4f:3a:01:91:59:
                    17:65:72:5c:ae:7a:92:e1:6e:27:ef:9b:d0:9e:48:
                    ee:85:83:6a:11:bc:90:ba:1f:e6:1f:10:c4:e2:9e:
                    ea:e9:9a:fd:36:70:da:e3:ce:e1:76:68:ff:c8:c8:
                    86:2e:ee:4e:79:1c:cf:0d:ab:1a:21:61:ad:e4:2c:
                    08:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FA:C8:41:52:4D:2C:67:BE:D4:4B:89:4C:CC:B4:B4:81:F1:7C:C2
            X509v3 Authority Key Identifier:
                keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:06:7e:15:87:23:39:e2:5e:64:3a:f0:cf:d3:c7:e7:4f:ed:
         40:6b:59:86:d6:14:7c:2e:05:b5:19:08:70:2b:98:d5:a1:60:
         2e:c4:03:7d:75:80:60:2d:58:30:91:14:eb:fc:56:02:c3:4d:
         cb:60:23:8e:31:f1:58:bd:02:86:c3:aa:e4:ae:19:04:a6:5e:
         83:20:20:53:95:d5:ef:c4:9f:b3:e3:34:ce:dc:b4:95:61:a0:
         5b:d8:e5:9e:24:42:bc:b1:49:fd:6f:80:ea:c0:01:98:37:c1:
         e0:63:a5:17:58:0b:43:3d:c7:d1:51:ae:ac:6e:c4:36:9c:f2:
         d9:2d:e5:31:a0:34:b7:b2:4f:ff:e2:ad:d8:8f:10:ae:ee:05:
         9e:8d:b6:a8:98:ff:89:3b:8c:0d:b7:98:64:6f:d4:3b:f1:2b:
         48:e5:d5:55:06:ee:b6:4f:c5:30:74:5d:19:16:8a:d8:b3:e3:
         10:91:72:49:19:e7:fd:f6:6b:f3:e6:b3:07:9c:cf:d7:85:2e:
         a6:80:f0:62:14:51:6d:53:6e:61:61:ae:be:74:f5:f7:7b:2f:
         80:30:60:a1:16:f1:35:8e:9c:6f:e4:2d:53:e5:79:64:c8:5e:
         59:9f:97:32:be:7d:e7:75:48:57:26:bd:36:56:80:61:44:30:
         24:0e:d3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:03 2026 by rpki-client