Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
File:                     D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft (raw, json)
Hash identifier:          lfXw6Yn4ZSwipSxP17CiNIaHB+/kaj9VcU8prR5qXGM=
Subject key identifier:   DD:41:0B:DF:F4:CC:9C:12:42:1F:09:D2:EA:FC:FF:03:90:48:66:9A
Authority key identifier: 0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77
Certificate issuer:       /CN=0f554afe672744742b4e35027b402e8613c20377
Certificate serial:       01A00025372A8BFF773B23BBED18053E7BE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
Manifest number:          18EF
Signing time:             Fri 14 Aug 2026 12:00:33 +0000
Manifest this update:     Fri 14 Aug 2026 12:00:33 +0000
Manifest next update:     Sat 15 Aug 2026 12:00:33 +0000
Files and hashes:         1: D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl (hash: fAXg0ntdmAVVziqqXyMwatzvchvBYDRjC1YKt6ibts8=)
                          2: aitD5UH29rGUG8_oXWsc-YfKHvk.roa (hash: fXAcocJ6AW36LCgsDsOqq0Ar/nfeKZ+crNQ7BTk4Lec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:25:37:2a:8b:ff:77:3b:23:bb:ed:18:05:3e:7b:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f554afe672744742b4e35027b402e8613c20377
        Validity
            Not Before: Aug 14 12:00:33 2026 GMT
            Not After : Aug 15 12:00:33 2026 GMT
        Subject: CN=dd410bdff4cc9c12421f09d2eafcff039048669a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ff:e2:36:24:15:cf:3d:be:22:5a:e9:72:1a:
                    78:3d:c8:4e:e9:48:60:11:0c:53:b1:0c:90:ea:21:
                    64:72:2c:55:09:65:b5:87:8e:7a:a1:88:30:43:ee:
                    59:ed:63:ff:d6:ff:e1:bc:40:81:f8:32:79:53:7f:
                    47:5b:f7:71:05:7a:3b:3f:df:1d:b5:e4:ae:e3:c1:
                    6c:ad:14:83:a2:93:3b:e1:b1:a5:3c:c2:ef:8d:d1:
                    49:45:bd:8c:f4:a2:17:61:68:5f:db:3d:62:ae:c1:
                    14:ef:c7:c6:90:14:01:b6:6c:d4:53:d3:2e:85:bd:
                    3c:2b:b2:06:1f:87:35:e2:af:7c:f9:94:0d:3b:37:
                    65:a0:da:89:91:30:d2:15:d7:5b:64:84:e9:ab:e6:
                    d6:ce:9d:b2:22:5b:a4:11:50:37:d1:41:6f:86:7e:
                    45:31:fe:f0:bd:e6:a5:e3:5f:88:12:48:9e:d9:f9:
                    f5:f2:7f:12:a6:28:1c:59:87:77:15:f1:8a:15:bf:
                    58:b7:62:c2:b9:c9:ff:47:f0:eb:2b:f4:9d:2a:89:
                    ca:44:5b:5b:09:fc:fb:3c:40:1a:8e:d5:8e:52:67:
                    0b:a9:21:23:9f:71:2b:90:0c:17:2b:26:4d:7b:7b:
                    bd:51:b3:96:23:bf:a9:44:4c:18:a4:42:f9:45:1c:
                    62:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:41:0B:DF:F4:CC:9C:12:42:1F:09:D2:EA:FC:FF:03:90:48:66:9A
            X509v3 Authority Key Identifier:
                keyid:0F:55:4A:FE:67:27:44:74:2B:4E:35:02:7B:40:2E:86:13:C2:03:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1VK_mcnRHQrTjUCe0AuhhPCA3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c1937-9d9b-4315-a3c5-c0ae80b742b0/1/D1VK_mcnRHQrTjUCe0AuhhPCA3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:0a:98:84:aa:4d:ba:81:7a:31:f8:eb:41:fa:3e:33:89:d6:
         56:86:3f:30:83:bb:ae:ff:22:22:39:84:43:ee:34:e7:73:78:
         85:b6:79:47:1e:8f:ce:3e:e3:35:7c:ad:1b:23:92:f5:c1:f7:
         ee:bb:a8:9f:e4:66:9f:88:40:86:af:ad:08:0e:7d:07:ba:0d:
         79:de:33:37:53:e3:4a:f1:33:c8:4f:a1:bc:13:94:c0:16:c6:
         2e:fe:60:67:06:3a:40:6e:2e:0d:ca:fe:04:fd:3a:c5:a8:b0:
         e9:8d:dd:05:62:66:c8:ba:1c:48:99:ca:c5:d2:84:dd:87:a4:
         a3:e6:49:dc:29:e9:cc:0f:30:c4:cd:0e:83:5c:36:ff:e5:dc:
         2e:17:24:12:77:7f:1b:c9:ee:ee:3f:7c:39:93:fa:31:30:0e:
         f6:ea:68:42:1b:08:49:7c:12:ed:c4:f4:59:05:fe:6e:80:fa:
         51:92:af:dd:f9:22:57:8e:64:04:2f:63:6e:6a:7c:6f:f8:b2:
         65:1b:77:c5:70:f5:f7:50:5d:4b:f0:a4:89:ae:e7:67:36:a7:
         48:98:98:71:47:ee:94:07:9f:8b:a2:a4:40:6a:3a:67:17:96:
         10:ca:f7:13:cb:66:ba:f3:8e:d8:e3:12:a4:56:01:2b:50:2f:
         15:69:c7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:49 2026 by rpki-client