Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
File:                     Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft (raw, json)
Hash identifier:          /zZArbla9WVDZ/UJsnytCLzixkvi7Qgjg7E7yxnVkVw=
Subject key identifier:   70:55:C6:DE:23:00:A7:38:C8:6C:2F:40:68:D9:A8:CC:CB:1D:3C:3F
Authority key identifier: 0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F
Certificate issuer:       /CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
Certificate serial:       019F42AD170D450288763FB7A6B820E29F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
Manifest number:          19
Signing time:             Wed 08 Jul 2026 17:01:07 +0000
Manifest this update:     Wed 08 Jul 2026 17:01:07 +0000
Manifest next update:     Thu 09 Jul 2026 17:01:07 +0000
Files and hashes:         1: Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl (hash: 0MXhiqrOvH/fMJMsCQG9f9qU++OGl9H67qWzVvQJMkA=)
                          2: P0TSUa_O2R0WqImkYTbqNvp_xSA.roa (hash: FdEGT+YAusCANOcQeGpBhtrd2xw82WN4CDsU+y058Uk=)
                          3: _Q5u_aa4oQ-ih3YeJ-eiQhiEGDA.roa (hash: R9XukPe4DSAWpgSPkCL5g1hxeUwcjBv75r2z5QRzV8A=)
                          4: fz3IBcPUYgyEi3HKy3o15CbAZtg.roa (hash: Xf1iCJJHpif2NVYysmUBCRlEjnut8UfGRj8zHdLVVNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 13:45:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:42:ad:17:0d:45:02:88:76:3f:b7:a6:b8:20:e2:9f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e09bd1d8f52f32e1a66c91e43891dcd3cb0693f
        Validity
            Not Before: Jul  8 17:01:07 2026 GMT
            Not After : Jul  9 17:01:07 2026 GMT
        Subject: CN=7055c6de2300a738c86c2f4068d9a8cccb1d3c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ef:0a:0a:82:93:eb:4d:b3:24:67:00:89:5d:
                    09:f0:59:9e:a2:da:ff:8c:5b:95:36:5b:18:2e:10:
                    d7:d1:b3:44:07:59:fd:0c:99:61:26:70:f0:27:8e:
                    24:5e:a7:21:f0:0d:9a:a4:41:dd:e7:70:8d:cf:b7:
                    fe:9e:cb:39:49:8a:e3:2c:27:1e:c5:e3:85:f7:5a:
                    6e:ee:cd:69:89:b0:08:66:a4:59:34:59:16:92:e1:
                    08:d8:ab:f1:af:d4:4b:c1:a7:9a:5d:d0:2f:dd:18:
                    61:42:51:f8:40:bd:36:6d:9a:20:2c:a8:ca:33:b1:
                    61:0c:72:04:ea:3f:df:f7:bd:a1:0f:59:17:48:0e:
                    ca:71:be:18:79:e8:ed:ab:0a:cc:88:3d:58:19:72:
                    5f:87:48:30:69:3f:b5:ca:eb:7c:f0:aa:28:2c:ea:
                    5e:f9:42:2b:fd:d1:ec:32:ea:8b:70:6e:d3:75:1b:
                    de:00:e2:05:bc:ab:20:18:53:28:1d:60:1d:54:72:
                    60:f2:e9:55:45:3f:bb:0b:5c:26:7b:74:5c:2f:a8:
                    64:fe:b6:56:08:3f:fe:5c:53:f0:89:03:c0:a6:23:
                    2d:47:4c:94:42:c8:f1:90:52:8e:71:91:e9:28:f3:
                    e4:8c:86:df:83:d9:80:0a:e7:fe:0c:80:ba:1a:01:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:55:C6:DE:23:00:A7:38:C8:6C:2F:40:68:D9:A8:CC:CB:1D:3C:3F
            X509v3 Authority Key Identifier:
                keyid:0E:09:BD:1D:8F:52:F3:2E:1A:66:C9:1E:43:89:1D:CD:3C:B0:69:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dgm9HY9S8y4aZskeQ4kdzTywaT8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Dgm9HY9S8y4aZskeQ4kdzTywaT8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e0:bd:8b:8e:db:93:48:06:1b:ef:6c:c4:98:1d:75:8e:c2:
         4a:58:55:b9:c6:14:b1:4f:83:ba:6d:f4:a3:9c:73:35:cc:4b:
         d8:4c:d9:6d:9c:87:cf:33:0e:17:06:50:35:5d:59:b5:d6:46:
         cd:59:2a:09:ca:41:e1:c5:ea:0d:d0:23:9b:fc:95:19:89:34:
         1b:98:e6:83:29:ad:d9:97:45:71:70:ea:f9:fb:ab:17:0f:74:
         ba:99:d4:f0:f4:03:79:65:26:44:d7:60:fc:8f:ba:d4:88:d2:
         e2:11:54:7c:00:4c:5f:4a:30:89:31:c9:46:5f:47:5c:77:ec:
         0f:4d:d9:a2:4b:15:90:44:7e:fa:7d:dc:a6:ab:0e:ab:20:17:
         3e:51:cd:6e:85:41:77:0e:8f:5d:ba:34:70:4b:7b:7a:e7:9a:
         b1:72:c7:b9:cc:74:36:5e:cf:a4:64:c1:bd:06:b9:26:f9:c6:
         aa:96:5a:97:1d:30:36:4a:7f:e6:19:83:11:16:dc:26:0e:61:
         6c:85:2c:8a:b7:49:d3:a6:71:ab:52:10:52:e4:2a:a7:cc:54:
         19:89:1f:0f:11:61:1f:e6:7d:ed:7a:34:55:6b:c3:88:e6:16:
         e4:71:8e:ba:16:09:b8:f4:6c:16:6c:23:07:ce:45:9f:40:53:
         df:05:dc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:26:52 2026 by rpki-client