Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File:                     DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier:          KiA2OtmTOMMf35io4Va1K1h94dkkNyUWKDqz8hW6sC4=
Subject key identifier:   8D:AB:6F:FD:AE:FF:DD:BC:C6:9E:B8:5F:BA:DD:C9:04:6A:5E:1F:34
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer:       /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial:       019D39E5FF11E34D95627047960598380EC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number:          051C
Signing time:             Sun 29 Mar 2026 14:01:07 +0000
Manifest this update:     Sun 29 Mar 2026 14:01:07 +0000
Manifest next update:     Mon 30 Mar 2026 14:01:07 +0000
Files and hashes:         1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: iJnnn2B5ydkdXIt7LIHeeft3kFZ6AtYOuLisSQBIco8=)
                          2: Zu63Ow6HIL-cM_My8KJ_oXolMPU.roa (hash: wpqllHKhhs+9B3WcGLDKMWL4IN9CvMn3Xo3gy5XniVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:e5:ff:11:e3:4d:95:62:70:47:96:05:98:38:0e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
        Validity
            Not Before: Mar 29 14:01:07 2026 GMT
            Not After : Mar 30 14:01:07 2026 GMT
        Subject: CN=8dab6ffdaeffddbcc69eb85fbaddc9046a5e1f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ea:8a:83:75:e7:14:5a:bb:9f:4f:80:55:8a:
                    fe:0c:85:bd:99:f0:6e:4f:c1:a9:8d:96:25:8a:34:
                    1d:a8:1d:ff:00:54:ea:0d:ce:f6:2f:f6:52:02:b4:
                    38:01:84:36:b5:90:60:b1:e5:dd:2f:45:ca:26:fc:
                    1b:16:a4:99:4e:46:ab:03:b9:84:64:41:ac:f2:d3:
                    77:81:7a:47:f7:b4:7f:f1:47:56:c7:e4:d4:68:6c:
                    5f:ad:6b:a0:9d:61:e1:c4:11:5c:1e:46:02:eb:9f:
                    70:15:f5:d9:ee:b0:b7:ca:f9:2a:f8:31:3c:cd:ab:
                    ac:08:ea:60:99:15:66:88:7b:18:79:5b:6a:73:bf:
                    c5:9e:12:4d:53:85:5a:ce:d0:29:ca:cf:5d:77:70:
                    31:1b:db:90:32:66:63:b5:19:8b:b7:df:3d:af:f3:
                    00:d0:9c:57:15:e8:21:6f:57:1a:69:b1:41:ba:11:
                    a4:bc:80:c9:80:0d:b1:0c:ed:70:2b:83:de:c4:31:
                    d7:44:d2:3d:74:fd:98:36:bc:2f:55:e0:d3:82:6f:
                    1b:04:fa:7a:a3:26:09:17:81:14:18:df:88:bd:bb:
                    6e:bd:e0:fe:00:e9:a9:9a:af:4f:36:57:66:be:56:
                    50:08:0d:16:78:ac:e1:d8:a8:66:1d:62:66:d0:e8:
                    ae:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AB:6F:FD:AE:FF:DD:BC:C6:9E:B8:5F:BA:DD:C9:04:6A:5E:1F:34
            X509v3 Authority Key Identifier:
                keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5d:82:58:e8:5e:74:73:57:ed:18:17:a6:28:cc:47:8e:fa:
         df:00:a9:57:f6:2d:76:16:81:c2:61:e2:13:ee:4a:4d:2e:28:
         b6:60:fb:91:33:af:ee:7f:49:5a:db:ce:0d:46:bb:d3:50:67:
         f4:ad:52:c3:fe:f6:b7:b7:fb:27:8b:5b:2d:2a:cb:27:89:83:
         35:3c:db:af:4f:7e:fc:89:e5:e6:81:82:2a:1b:b2:66:e0:cb:
         86:0e:d4:fe:e7:a8:c4:f9:91:c1:2b:98:ed:43:a0:92:60:75:
         f0:22:c6:ca:ea:76:36:76:c6:dc:b2:e7:09:1f:72:74:7a:f4:
         85:b0:c6:8b:f2:17:64:6c:08:e3:ee:0c:80:ab:5c:bc:c0:60:
         f8:00:38:a4:73:2f:31:a4:6d:2b:d5:11:ed:ab:7e:83:01:fe:
         69:6d:f3:70:49:45:0c:35:a0:87:75:07:06:d6:5b:c3:36:fa:
         48:49:18:1e:12:9f:d7:17:eb:c2:64:38:bf:70:6e:11:9b:90:
         bb:80:ea:74:c4:ff:7a:ba:e2:f6:f5:26:82:57:67:97:4a:07:
         e4:67:58:b2:5a:ec:d3:2e:2f:b7:30:20:cb:76:2e:fe:fa:0d:
         cb:f3:ee:75:07:6e:a6:57:1c:bb:c6:0c:28:d4:2f:31:39:2a:
         dd:83:d8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:13 2026 by rpki-client