Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
File:                     DR7vsZI4vpruN5lb700q_Ref8sw.mft (raw, json)
Hash identifier:          vWzirc8aWLSbxoqZHG5+yKz93blLnrjOfBHWc+XfChk=
Subject key identifier:   BC:F2:A5:3F:5F:53:12:7D:C2:9C:10:AF:25:DD:F8:3B:51:43:1E:31
Authority key identifier: 0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC
Certificate issuer:       /CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
Certificate serial:       019F1755086808AA098DDAB485FA442E36D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
Manifest number:          102B
Signing time:             Tue 30 Jun 2026 07:01:16 +0000
Manifest this update:     Tue 30 Jun 2026 07:01:16 +0000
Manifest next update:     Wed 01 Jul 2026 07:01:16 +0000
Files and hashes:         1: DR7vsZI4vpruN5lb700q_Ref8sw.crl (hash: PD5IxyegbwrqIRuCuOAlywwE0bYps3fL+CTgz25cZ78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:55:08:68:08:aa:09:8d:da:b4:85:fa:44:2e:36:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1eefb19238be9aee37995bef4d2afd179ff2cc
        Validity
            Not Before: Jun 30 07:01:16 2026 GMT
            Not After : Jul  1 07:01:16 2026 GMT
        Subject: CN=bcf2a53f5f53127dc29c10af25ddf83b51431e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:80:0d:cf:55:c5:56:53:1b:ae:de:69:a2:
                    b6:bd:2f:2a:ac:a6:23:44:ac:31:e5:1b:70:54:0c:
                    12:c6:ba:ff:c2:66:a6:24:59:72:71:50:17:90:38:
                    df:8a:97:73:d6:ca:2c:04:c4:9a:aa:b0:ae:26:59:
                    5d:63:9f:fb:5b:7f:56:62:3c:c3:fe:e8:ab:72:80:
                    91:cb:d4:79:c3:a5:ab:3a:29:c7:f5:bb:4d:e9:ef:
                    b4:4d:a0:d3:b0:b7:ef:de:2d:a2:03:9f:af:9a:a2:
                    2c:ed:8e:86:97:7a:73:69:0a:8f:c3:34:c7:61:6c:
                    53:8c:31:3f:30:31:ef:ac:5a:fd:bb:56:be:80:41:
                    92:87:47:24:47:d9:7c:1b:59:aa:df:34:87:7b:10:
                    23:8f:bf:28:55:60:79:ab:bd:9a:13:50:04:82:e5:
                    06:61:6a:f2:cb:f2:ed:11:ca:50:b3:27:d2:7f:64:
                    89:e7:f4:62:8b:9b:7d:da:22:5b:6d:89:a2:09:6f:
                    d4:c2:7a:33:19:d1:f3:f9:46:a2:42:2d:eb:06:41:
                    ac:89:c7:35:18:05:9a:8c:7d:23:cc:c5:8f:7e:47:
                    ed:a6:f9:62:1a:15:c8:3b:e3:4d:45:5a:8b:85:56:
                    18:d5:1e:ce:e3:98:ec:11:b7:90:06:18:bc:ea:93:
                    51:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F2:A5:3F:5F:53:12:7D:C2:9C:10:AF:25:DD:F8:3B:51:43:1E:31
            X509v3 Authority Key Identifier:
                keyid:0D:1E:EF:B1:92:38:BE:9A:EE:37:99:5B:EF:4D:2A:FD:17:9F:F2:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DR7vsZI4vpruN5lb700q_Ref8sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/e9447a-1e5c-4b1e-8056-3449f33a1842/1/DR7vsZI4vpruN5lb700q_Ref8sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:75:a2:60:f5:59:b3:7a:b1:c7:0d:be:39:f7:4f:8f:06:11:
         cc:e3:7b:75:6e:17:04:b7:79:1c:54:b5:c9:a1:09:47:21:c7:
         d0:e1:19:96:d4:b5:26:ad:a2:7c:3b:5a:17:fd:5d:9f:bf:60:
         af:7c:a6:71:3e:ed:9c:1e:8a:96:d9:06:87:96:13:08:61:ae:
         52:75:a7:d2:c0:86:73:a3:9a:1e:e9:63:d8:f9:6e:3d:c0:1d:
         17:31:2d:66:c8:29:d9:98:79:22:3e:10:9f:9c:53:f2:a2:a8:
         4a:cc:56:16:b5:47:1e:90:1d:35:fc:dd:a1:c4:8e:12:e4:4c:
         96:6f:c6:f6:13:fe:88:2c:cb:9d:16:0c:7a:21:40:4d:d6:d0:
         0e:48:cb:b8:bf:bd:e9:bb:02:38:c1:de:11:87:c6:10:b2:34:
         71:57:e1:d1:71:b0:4e:a5:b2:43:a7:67:4b:7d:1b:38:13:72:
         ff:e4:22:c0:64:2e:a0:71:14:c4:35:ea:b4:a0:50:93:02:45:
         c8:b8:1c:20:79:e5:f3:95:5a:f9:3c:7e:23:21:74:d8:39:f9:
         7c:71:e5:66:f1:75:ea:d0:87:d5:f5:3b:1f:ce:b2:0f:77:d1:
         6c:7a:22:4c:a6:5e:88:f7:99:ba:0c:40:e4:6c:76:32:21:38:
         77:5c:b3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:18:30 2026 by rpki-client