Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
File:                     Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json)
Hash identifier:          rZiATBMQPe4vKrdRcw1z2fgq5OT5fl3wTXU3fkkfIkc=
Subject key identifier:   C4:0D:79:9F:B3:9D:E7:6F:5D:2C:FC:37:2D:AE:06:BE:AC:AA:4E:E3
Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4
Certificate issuer:       /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
Certificate serial:       019FA1163273C04A9BC056DB110632D93F12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
Manifest number:          19CC
Signing time:             Mon 27 Jul 2026 01:00:14 +0000
Manifest this update:     Mon 27 Jul 2026 01:00:14 +0000
Manifest next update:     Tue 28 Jul 2026 01:00:14 +0000
Files and hashes:         1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: 2fFCbgATWMytsaXfRP4efPZPhbzmWLUNT0cuVuHlhjY=)
                          2: pUIM7v10t5OGFrSPmfiKdj44TIc.roa (hash: Oo445ykGaPumhWQXMGT+U7KwU/ygHDEsLqsafB1c140=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 01:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:16:32:73:c0:4a:9b:c0:56:db:11:06:32:d9:3f:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4
        Validity
            Not Before: Jul 27 01:00:14 2026 GMT
            Not After : Jul 28 01:00:14 2026 GMT
        Subject: CN=c40d799fb39de76f5d2cfc372dae06beacaa4ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5d:79:1f:05:66:80:91:9c:63:d0:da:6a:0c:
                    eb:73:c9:ac:71:52:09:07:d9:58:2e:c7:24:8b:f5:
                    4a:b1:ab:4e:97:f0:74:fb:e5:26:13:ec:22:ae:4b:
                    e1:b1:bf:af:8d:ea:89:00:8f:ce:e7:c1:6b:6a:f7:
                    69:13:a3:20:36:c0:39:65:c6:f2:64:70:5a:bc:eb:
                    c8:b2:75:22:27:07:2e:31:4b:d3:8d:9b:32:27:8b:
                    13:2a:5a:c0:b6:a8:42:dc:3f:1b:22:33:38:6a:16:
                    75:da:f4:45:13:b6:92:3b:64:1f:79:7b:ff:f1:46:
                    aa:8c:be:32:4b:cd:db:67:03:9a:8d:1d:40:92:aa:
                    be:59:80:66:f7:c4:ce:e3:01:1d:b2:eb:d8:9a:4f:
                    5d:c4:8f:1a:a0:24:f7:af:07:f9:00:a5:26:c0:fd:
                    99:8a:4b:82:eb:11:d6:38:ff:f7:b4:cb:8a:cc:51:
                    94:dc:9a:75:3e:2f:37:17:3e:4f:2a:38:6e:c8:1c:
                    05:7c:de:ae:10:ab:92:b8:95:c7:16:e1:cf:34:80:
                    4c:c3:47:c5:f4:d7:e3:97:96:f8:92:d4:80:22:8c:
                    22:f1:cc:d3:37:83:f2:bb:4c:47:8f:98:c6:41:2e:
                    b7:4d:f6:18:10:57:12:75:03:3c:6f:6b:c5:22:4a:
                    dd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0D:79:9F:B3:9D:E7:6F:5D:2C:FC:37:2D:AE:06:BE:AC:AA:4E:E3
            X509v3 Authority Key Identifier:
                keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a3:ec:0c:72:72:15:fb:cd:15:a6:fb:de:17:d9:6c:de:3a:
         7c:e8:2c:36:0a:de:a9:ec:ef:ec:1f:82:de:02:2b:6c:92:32:
         de:36:4a:08:d6:c4:d6:fb:17:c1:0e:c4:10:f2:bb:96:c4:c1:
         94:73:e2:40:3d:c7:9a:3c:b2:36:39:18:44:1e:6c:6a:7c:24:
         e5:72:a2:61:42:29:83:9e:30:ee:a4:63:c6:43:45:06:d6:ed:
         bb:ca:7f:a7:16:b6:06:1c:21:b1:5b:55:47:8e:ff:07:ee:86:
         bc:36:55:97:b8:2e:e9:e2:1a:81:2d:38:89:f1:0e:6e:63:67:
         ff:76:ce:fa:f6:ce:ce:9f:70:2b:8f:43:32:3c:00:ce:e1:4b:
         06:80:d4:7f:44:f8:31:56:10:fd:49:e3:b1:58:56:86:32:be:
         f2:16:c5:30:46:c7:96:90:83:c0:35:6d:85:8b:60:ea:52:a9:
         35:96:9b:5b:41:d4:52:6c:48:e4:66:4f:44:6a:96:a1:47:4a:
         b4:4e:b5:9e:48:d8:63:a4:b6:e5:a4:b1:30:10:4f:23:45:42:
         e4:cc:d5:46:0b:ce:4a:46:89:a4:f5:55:1a:0d:25:ea:29:a8:
         06:17:14:3b:01:cc:d5:07:97:6b:6c:3b:94:86:3a:63:95:69:
         c5:9c:fd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:45 2026 by rpki-client