Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
File:                     DpFsLKNrUAlu4v5EuUUpwto8PsI.mft (raw, json)
Hash identifier:          M7lEPylbop6Z07o1VZ4XD3lqTB+bQmMedyiFfMo3GzU=
Subject key identifier:   73:67:FF:5C:A5:2B:71:B0:07:32:A5:D4:B1:8C:AE:40:19:97:3C:71
Authority key identifier: 0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2
Certificate issuer:       /CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
Certificate serial:       019E3005A1EA13F95A5677A2915D96174303
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
Manifest number:          0696
Signing time:             Sat 16 May 2026 09:02:15 +0000
Manifest this update:     Sat 16 May 2026 09:02:15 +0000
Manifest next update:     Sun 17 May 2026 09:02:15 +0000
Files and hashes:         1: 4Et2FEuVd4yMRqu4nNmNFk3gGwQ.roa (hash: jjoiLF44l4+yah2U1/vSTzToVAf877+4InBXrM7HTBw=)
                          2: DpFsLKNrUAlu4v5EuUUpwto8PsI.crl (hash: wHqSznzreYDddm2WrHlAGGC8Jpx7pwawhdyRLXshW3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 09:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:30:05:a1:ea:13:f9:5a:56:77:a2:91:5d:96:17:43:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e916c2ca36b50096ee2fe44b94529c2da3c3ec2
        Validity
            Not Before: May 16 09:02:15 2026 GMT
            Not After : May 17 09:02:15 2026 GMT
        Subject: CN=7367ff5ca52b71b00732a5d4b18cae4019973c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a4:1c:28:b7:da:8a:b0:fe:e1:30:30:0b:d1:
                    d0:fc:eb:15:02:da:ad:56:de:78:ee:80:84:ea:e8:
                    4e:d4:98:5e:f8:ba:ec:c8:f8:c5:d2:24:e5:ce:66:
                    d2:cc:05:9e:ba:a5:a5:f4:4d:5a:3b:df:f0:83:fd:
                    e2:27:aa:2b:c7:f0:a0:92:f8:13:0b:b5:0c:31:9c:
                    07:21:4c:81:1a:5a:cd:17:b1:32:59:45:79:48:a7:
                    d7:2c:6b:9a:d9:e9:99:da:e8:a6:b1:44:51:d2:3f:
                    af:e3:44:42:61:d1:ee:76:c1:30:cd:c2:a5:6e:ac:
                    ae:c9:ea:4d:94:ae:92:a7:71:2c:73:3c:b0:1e:99:
                    b8:77:b8:9f:9d:47:0b:e6:83:dc:24:3e:ec:6b:88:
                    42:e3:67:cb:37:eb:b6:24:b2:1d:bd:a4:67:38:94:
                    94:e5:3d:fc:c5:7c:a7:ff:ce:d1:a7:02:49:31:1a:
                    22:4f:43:5b:04:70:5e:4b:22:0d:b5:53:36:b0:36:
                    5c:bc:cc:d9:29:e2:2b:23:ed:a4:8a:43:69:30:6a:
                    ff:0a:08:ff:58:8f:2b:15:03:45:a2:71:2d:92:ab:
                    24:14:09:39:14:82:24:fd:bb:f5:67:ba:e7:ca:c3:
                    fc:20:f8:f9:14:4e:aa:2b:8e:01:22:ef:35:2c:d9:
                    5a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:67:FF:5C:A5:2B:71:B0:07:32:A5:D4:B1:8C:AE:40:19:97:3C:71
            X509v3 Authority Key Identifier:
                keyid:0E:91:6C:2C:A3:6B:50:09:6E:E2:FE:44:B9:45:29:C2:DA:3C:3E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpFsLKNrUAlu4v5EuUUpwto8PsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f908b-eef9-4a1a-8f80-5fc44fd6bafc/1/DpFsLKNrUAlu4v5EuUUpwto8PsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2a:73:ed:1c:f0:12:89:36:9e:88:a2:78:26:bb:5f:30:ee:
         3d:2c:81:e8:4f:79:86:ee:2a:1d:ee:d3:c7:37:1a:ac:1e:a9:
         90:b0:5f:8f:d9:0b:1b:50:c0:e7:fc:c6:bd:14:4e:41:1f:3d:
         b1:b8:f4:f1:8c:6f:1e:58:1d:80:9c:d5:5e:9b:b6:ac:8b:1a:
         5d:f6:bc:bd:b5:e1:b2:3e:9d:62:a9:75:e3:4c:c5:9b:d2:c4:
         b8:a5:2e:29:6f:27:f8:32:0f:2b:cf:41:a3:ab:2f:b7:6b:40:
         a8:95:4f:b4:89:ad:9e:31:c8:a5:5b:3b:5e:96:e7:4a:a7:f7:
         c5:ef:82:f1:25:50:3c:b3:42:9f:1d:5c:e9:42:aa:ed:0e:87:
         bc:14:e5:72:83:b5:62:bc:34:75:6e:ae:15:64:e9:e1:14:b9:
         e9:f2:86:db:51:6f:b2:17:0f:5f:b9:19:dd:8f:b6:aa:62:60:
         6b:87:0a:e9:9c:62:d9:c2:94:31:73:d1:74:f4:45:07:48:23:
         1e:9a:0a:40:97:ad:cb:76:64:03:27:a0:a1:2d:69:a8:20:ef:
         58:4e:06:e1:58:25:11:00:eb:86:01:fb:a9:cd:9c:18:2f:f1:
         48:7f:b8:87:ad:3b:34:e8:de:8b:fb:89:ba:88:93:e3:ba:e0:
         ae:a6:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:11:51 2026 by rpki-client