Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
File:                     DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft (raw, json)
Hash identifier:          rbmAotuSY6Lgjyb1ZlzZfq78MhWr7nB0ZKWOH0n3kW0=
Subject key identifier:   1A:C9:96:B4:85:CF:18:01:41:52:1D:C9:0D:6F:DF:E0:98:0D:CC:B9
Authority key identifier: 0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11
Certificate issuer:       /CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
Certificate serial:       019E2FCDE08382719E8EEAE8811FE39E9414
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
Manifest number:          15AF
Signing time:             Sat 16 May 2026 08:01:21 +0000
Manifest this update:     Sat 16 May 2026 08:01:21 +0000
Manifest next update:     Sun 17 May 2026 08:01:21 +0000
Files and hashes:         1: DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl (hash: n/gWfyiSj66vPAY1x2Yi5RmzqHAtaAoB7HDABvsU9UM=)
                          2: u6dKU2x8O3xV7S3OaviPva82180.roa (hash: 9A10Ud5zhJp6APcwr5M/hOCYfKIxkVszIE4bdVZOg/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 08:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2f:cd:e0:83:82:71:9e:8e:ea:e8:81:1f:e3:9e:94:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c6fa156c57c4e885b9e6af8230b654d796a5611
        Validity
            Not Before: May 16 08:01:21 2026 GMT
            Not After : May 17 08:01:21 2026 GMT
        Subject: CN=1ac996b485cf180141521dc90d6fdfe0980dccb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:e8:21:71:1c:56:42:ba:59:f8:b7:d2:a9:
                    0d:22:b0:5c:2e:51:8e:ec:8b:b9:f4:f3:04:fb:b4:
                    b7:1d:d2:64:75:15:37:4f:0a:9d:d4:0a:85:c0:e5:
                    6c:02:0b:67:3d:c9:91:6c:d1:49:02:46:0b:58:8b:
                    2b:2b:99:4a:6e:9b:1b:19:6c:24:35:d4:f3:f6:4e:
                    0c:8e:20:c8:83:84:56:14:ac:d9:a3:14:58:ae:9c:
                    19:2b:72:6a:b4:8e:72:7d:e1:f6:9a:dc:ee:36:4f:
                    ea:05:95:5b:72:21:bb:47:66:d0:97:55:46:b5:90:
                    ce:4c:ab:da:44:1b:ef:6f:72:1a:b6:5c:3b:67:ab:
                    76:40:79:ee:10:ec:28:a1:1e:74:ab:c2:09:c6:1d:
                    5a:38:fd:da:9a:bc:d2:28:da:f1:b2:cd:e1:db:20:
                    ce:ea:1a:a2:db:4d:56:99:8b:d2:d0:b0:ac:c7:a4:
                    44:cc:7c:93:ce:5e:4e:56:d4:a4:1d:c2:65:25:58:
                    03:1e:81:cb:59:52:1f:c6:b6:4b:3c:5e:ba:ea:4b:
                    73:78:f0:52:c1:56:42:35:37:e2:58:de:f5:05:6e:
                    4c:9b:54:e0:95:72:94:e0:f1:d9:6f:25:a8:22:60:
                    cf:b8:42:e1:aa:0c:c8:94:ae:23:68:c4:6a:fe:3a:
                    df:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C9:96:B4:85:CF:18:01:41:52:1D:C9:0D:6F:DF:E0:98:0D:CC:B9
            X509v3 Authority Key Identifier:
                keyid:0C:6F:A1:56:C5:7C:4E:88:5B:9E:6A:F8:23:0B:65:4D:79:6A:56:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DG-hVsV8Tohbnmr4IwtlTXlqVhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/48c56d-5727-42ba-80c4-b8c36ecedad8/1/DG-hVsV8Tohbnmr4IwtlTXlqVhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:29:20:fa:f6:08:4e:7c:3f:f0:9d:a4:8f:ba:79:f9:94:aa:
         02:36:2b:e2:b0:ac:43:fb:45:de:24:bd:9b:24:ec:3d:4d:ef:
         71:0d:c6:01:8b:ad:63:d9:98:b6:80:7a:a2:f9:45:00:bf:2e:
         25:64:ed:0a:e6:69:cc:08:54:19:5e:36:e9:24:77:7c:cb:6e:
         15:e2:f4:df:96:92:e7:c0:6c:e8:2b:37:9b:94:af:f7:13:b8:
         2a:fa:17:38:5a:1c:45:42:12:83:a2:65:b5:da:83:9f:4b:71:
         3f:54:61:de:5e:72:72:f6:b7:ba:dc:95:19:b4:72:18:d9:6d:
         7e:70:62:7c:66:95:6e:05:86:5f:3b:4b:d5:f9:05:23:58:09:
         7b:1b:99:72:9e:dd:a7:99:ab:a1:6e:45:5c:04:53:9f:5d:90:
         3a:f6:bb:f8:fd:6f:c2:e1:cb:80:e0:3c:6c:41:48:29:2e:a0:
         c0:40:61:7e:c1:f9:0d:b9:fb:6b:5b:f5:e4:3c:68:de:a7:9b:
         11:aa:79:51:c4:cb:f8:18:7c:9f:85:35:4d:3a:d2:08:db:f8:
         90:3d:34:2c:3e:eb:d1:d0:14:44:a1:bb:44:67:b9:a2:f9:ad:
         54:dc:b3:08:a1:04:79:bf:a6:b9:64:2e:7a:9c:ae:bf:f7:22:
         09:6a:38:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:08 2026 by rpki-client