Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
File:                     DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft (raw, json)
Hash identifier:          ruGWI/wV8+70fR5qPTBEXe3xCPcDZsKvxJUKrD0+C88=
Subject key identifier:   61:34:B6:BB:C6:27:0E:70:9E:83:77:A2:E3:BA:66:08:6A:CF:C7:8E
Authority key identifier: 0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3
Certificate issuer:       /CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
Certificate serial:       01A13F3903F9ABAA0F83F917F6F3AAD0E149
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
Manifest number:          130D
Signing time:             Thu 15 Oct 2026 11:01:03 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:03 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:03 +0000
Files and hashes:         1: DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl (hash: 89kn4uY8//AnS0ND63tKsR4bLRjFp4qFHCE61wMxODA=)
                          2: _BUMsTjl98MmLHvFrqovjD8YBPw.roa (hash: ae3nr29GY4pUAfaoxVhHdX9CIL595T+FSAPmy0/E9aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:03:f9:ab:aa:0f:83:f9:17:f6:f3:aa:d0:e1:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1a3131fe8bea9c8258313a0f24ba2a560b58d3
        Validity
            Not Before: Oct 15 11:01:03 2026 GMT
            Not After : Oct 16 11:01:03 2026 GMT
        Subject: CN=6134b6bbc6270e709e8377a2e3ba66086acfc78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3d:ba:ae:c2:a0:1f:d4:94:bb:eb:a9:a1:26:
                    4f:fc:a8:eb:d7:ee:cf:1a:d7:6b:82:0b:04:a6:06:
                    0d:2c:89:a6:16:04:20:0d:98:3c:63:52:3d:5a:5f:
                    5b:cf:9a:f5:3b:30:6a:6c:83:2f:ec:92:cf:a1:6e:
                    04:f0:5a:4d:c7:13:8a:6b:d0:c3:c1:ef:fd:02:7b:
                    23:af:b2:02:bd:dc:3c:6b:d6:d4:99:97:af:94:99:
                    4c:71:b1:69:58:df:f3:58:82:27:28:aa:b6:9c:40:
                    50:13:1a:07:22:21:01:84:5c:a8:7c:e1:78:57:68:
                    ec:24:73:c3:ca:16:09:10:4e:ae:47:9b:bb:d0:ea:
                    ad:ec:a0:5c:45:99:8e:f3:55:e0:3d:37:f5:f7:ca:
                    af:05:16:db:fc:13:27:17:cd:7d:59:12:d6:f4:2d:
                    e7:3f:c2:ff:38:85:2d:e1:60:70:d0:e9:ed:f1:ff:
                    2f:65:82:80:71:9d:ab:71:d4:36:b8:b5:53:9d:55:
                    53:6f:e6:f3:84:5a:9b:ee:aa:42:9f:26:ee:3d:18:
                    82:e4:a5:c2:f7:3f:87:c9:86:0e:9a:b8:63:1c:c3:
                    2a:88:74:65:51:48:46:f8:d1:32:8c:75:0a:94:04:
                    ba:31:5a:24:5e:d9:b0:fb:fe:ab:f7:10:06:73:4e:
                    80:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:34:B6:BB:C6:27:0E:70:9E:83:77:A2:E3:BA:66:08:6A:CF:C7:8E
            X509v3 Authority Key Identifier:
                keyid:0D:1A:31:31:FE:8B:EA:9C:82:58:31:3A:0F:24:BA:2A:56:0B:58:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DRoxMf6L6pyCWDE6DyS6KlYLWNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/13b165-0986-4e93-b1b4-bbf7c70ef4b3/1/DRoxMf6L6pyCWDE6DyS6KlYLWNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:16:8d:fa:25:68:91:cb:59:c1:02:21:f0:ce:2a:d4:ff:69:
         35:02:20:be:cf:c5:05:8c:45:c3:87:fe:a4:80:a5:ea:cc:72:
         47:80:cd:14:47:bd:0d:9f:53:0d:43:90:53:e9:c7:aa:55:09:
         2c:bf:32:8c:0d:45:54:c9:df:82:a4:69:7f:42:c7:4d:a3:eb:
         91:44:5a:d4:51:73:d6:54:0d:88:5e:5d:ec:0a:0c:ab:c7:8e:
         a2:68:27:e6:06:6b:98:01:91:f7:52:78:fc:b2:67:56:e2:23:
         3b:7b:bc:07:8f:49:e9:4f:da:a5:ee:97:c6:45:3b:76:49:1b:
         13:d7:da:e6:bb:0b:6b:fa:37:02:69:d4:1e:6b:a7:d9:a0:7e:
         16:8f:ff:ea:74:f5:17:b5:6c:32:cf:a8:47:bc:25:f3:04:36:
         51:43:9d:89:44:5d:fe:2b:26:da:3c:2e:d0:ad:72:9b:3b:01:
         91:f4:50:88:1d:7c:db:4a:0d:06:99:c2:cc:e2:fb:e4:17:86:
         c8:fd:6f:cf:ec:aa:97:e6:d1:83:da:02:e2:32:18:4e:63:b3:
         13:ba:71:bc:db:43:12:11:82:21:8d:57:46:f5:ad:e8:92:ca:
         bb:2c:93:44:3f:22:c8:24:7c:87:16:09:2c:12:08:9c:36:0e:
         01:d8:9b:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:54:55 2026 by rpki-client