Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
File:                     DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft (raw, json)
Hash identifier:          aZYlYGpvV73gqMOjqAK+neAutGXuKfpQXTVfN3fMzLk=
Subject key identifier:   7D:30:E8:5D:3B:6F:BA:85:F0:DB:FD:A0:89:14:E2:54:E5:41:7B:B9
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Certificate issuer:       /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial:       019FF6EC1086272047C208CBB9CCA64D2297
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
Manifest number:          0D88
Signing time:             Wed 12 Aug 2026 17:01:33 +0000
Manifest this update:     Wed 12 Aug 2026 17:01:33 +0000
Manifest next update:     Thu 13 Aug 2026 17:01:33 +0000
Files and hashes:         1: 0Zv7gbcee3oYhoixuKSpzeAn6hc.roa (hash: g3K2VjxQqR918zAxnhQ8qYXe0zM7/nlsaCescrnOAFg=)
                          2: DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl (hash: G1ArDcm+ArrSkhO7KJpZXuEqIN7QNv+YUYVD2o2gaCc=)
                          3: MtiFhvTFU6eR6K3JPWffFMPpWmA.roa (hash: DwTW8G9tlrgSrBgtQLqohKIvgiVA/TbEnEkmiFwX6uc=)
                          4: R9CKdSuhKcix03lDYUZNj_9bSZw.roa (hash: 25D9RZgSbgAoxxPe4MQJY7sqqlRu8rIg+8wl9bKE/EI=)
                          5: aCdtB2nYu55hGLQQzrV3-u62JS4.roa (hash: 0jBdXE3UE70+A74fzbLHoyPujmWBV5PBwxsIako4QUY=)
                          6: fcJRAvhE3GJ9JzGChcUs2vcrezw.roa (hash: IUgxFKpPcgKwv0m19KbyxHATCx8pJEqt3FiR48y3FC8=)
                          7: wYnksyA9j8IE38MK44WdI8QthwY.roa (hash: kUGjESP6hpImIv040oxFMoVXOTG5+DBRjTAXej9uu34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f6:ec:10:86:27:20:47:c2:08:cb:b9:cc:a6:4d:22:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
        Validity
            Not Before: Aug 12 17:01:33 2026 GMT
            Not After : Aug 13 17:01:33 2026 GMT
        Subject: CN=7d30e85d3b6fba85f0dbfda08914e254e5417bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:11:70:49:e1:27:1b:16:fb:4f:d9:c1:ef:63:
                    3a:46:dd:d5:64:1f:92:fd:ec:dd:86:29:ec:37:95:
                    66:02:a3:b2:ab:38:09:8c:e5:e9:04:b5:8e:99:b7:
                    fc:22:00:ca:63:5a:f1:93:97:e3:30:b1:3f:38:0d:
                    34:2f:13:dc:ed:62:0a:15:10:fe:1e:53:c1:f3:32:
                    1f:16:eb:8e:c7:a1:8a:8d:e7:5b:5d:b6:cc:34:2a:
                    a6:35:96:6b:f0:46:7f:06:cb:e1:06:a0:d4:6e:91:
                    9b:8b:cc:bb:89:d2:59:47:86:86:29:90:50:6d:fe:
                    1e:41:d3:02:c2:60:87:7d:dc:2e:01:db:29:80:6c:
                    85:eb:83:99:43:5b:0c:1b:b7:d4:e6:19:b1:3c:c9:
                    6a:dd:8b:18:cd:b4:ae:b0:39:67:88:da:47:ce:1c:
                    d7:66:26:8c:95:76:65:19:a0:45:67:24:1d:dd:34:
                    34:0e:92:ed:ab:ab:0f:00:ae:5f:09:78:81:66:ff:
                    fc:24:cd:ae:1e:b0:a7:c7:12:84:d6:7d:c8:a4:cc:
                    89:f5:ce:5d:bd:5e:4c:dc:22:a2:29:f3:38:df:b7:
                    7d:a8:d1:34:07:0a:97:c3:3e:5c:e0:b1:43:29:da:
                    67:85:1f:d9:ae:2b:4c:2d:3b:61:31:b0:b3:11:5b:
                    82:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:30:E8:5D:3B:6F:BA:85:F0:DB:FD:A0:89:14:E2:54:E5:41:7B:B9
            X509v3 Authority Key Identifier:
                keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:62:42:7d:b8:41:88:c6:9b:f6:c5:22:5a:8b:e5:8a:fa:b8:
         71:9c:83:43:8e:13:6e:ad:fc:9e:23:0b:d7:02:45:55:19:c8:
         a5:3a:41:dd:b5:54:e7:9c:6c:a7:ef:1b:20:61:cf:0f:ad:7c:
         68:de:01:71:12:3c:07:de:1b:9c:0d:80:92:0b:98:9a:fa:8a:
         d4:47:af:03:8e:0d:2f:c9:4f:8e:e9:1a:ad:82:47:44:04:3f:
         c7:75:0b:be:2f:15:d8:fc:36:5b:02:e7:cb:d9:40:24:a9:68:
         d9:ec:ec:35:2d:c5:9d:05:7b:b2:73:9f:20:39:44:1c:b8:c6:
         8c:94:aa:23:77:cd:2e:4c:9b:53:a1:89:f1:b2:03:8f:85:a7:
         f1:0d:62:7f:06:09:2e:bc:36:a8:ff:ee:f0:bd:b0:10:41:e9:
         96:0f:04:96:0a:6d:3c:1b:17:26:f2:0d:9d:b7:f9:c2:95:ea:
         8a:3b:43:ee:33:6f:41:c9:10:cd:46:31:7f:de:7e:da:ac:8d:
         a2:31:d2:b2:51:2d:6d:17:6c:86:a5:b9:8d:93:01:0f:44:68:
         77:3b:00:e2:56:3f:ea:dd:49:92:08:4f:3d:7a:8b:9d:0e:29:
         d5:0c:0e:bf:59:e9:20:f1:52:e8:92:65:e2:87:a9:f6:c8:4d:
         30:a5:20:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/27BCGJyBHwgjLucymTSKXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMDVjYTExMWMwMDkzYjU2NTE0MjE1YmU0NjdiNTE1ZGRh
NTZjMDYwHhcNMjYwODEyMTcwMTMzWhcNMjYwODEzMTcwMTMzWjAzMTEwLwYDVQQD
Eyg3ZDMwZTg1ZDNiNmZiYTg1ZjBkYmZkYTA4OTE0ZTI1NGU1NDE3YmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBFwSeEnGxb7T9nB72M6Rt3VZB+S
/ezdhinsN5VmAqOyqzgJjOXpBLWOmbf8IgDKY1rxk5fjMLE/OA00LxPc7WIKFRD+
HlPB8zIfFuuOx6GKjedbXbbMNCqmNZZr8EZ/BsvhBqDUbpGbi8y7idJZR4aGKZBQ
bf4eQdMCwmCHfdwuAdspgGyF64OZQ1sMG7fU5hmxPMlq3YsYzbSusDlniNpHzhzX
ZiaMlXZlGaBFZyQd3TQ0DpLtq6sPAK5fCXiBZv/8JM2uHrCnxxKE1n3IpMyJ9c5d
vV5M3CKiKfM437d9qNE0BwqXwz5c4LFDKdpnhR/ZritMLTthMbCzEVuC4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH0w6F07b7qF8Nv9oIkU4lTlQXu5MB8GA1UdIwQY
MBaAFAwFyhEcAJO1ZRQhW+RntRXdpWwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQt
NmEzNjcwNWJiYTZmLzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wZmJmNDgtNWRiNy00OWZlLWJmNDQtNmEzNjcwNWJiYTZm
LzEvREFYS0VSd0FrN1ZsRkNGYjVHZTFGZDJsYkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWJCfbhB
iMab9sUiWovlivq4cZyDQ44Tbq38niML1wJFVRnIpTpB3bVU55xsp+8bIGHPD618
aN4BcRI8B94bnA2AkguYmvqK1EevA44NL8lPjukarYJHRAQ/x3ULvi8V2Pw2WwLn
y9lAJKlo2ezsNS3FnQV7snOfIDlEHLjGjJSqI3fNLkybU6GJ8bIDj4Wn8Q1ifwYJ
Lrw2qP/u8L2wEEHplg8ElgptPBsXJvINnbf5wpXqijtD7jNvQckQzUYxf95+2qyN
ojHSslEtbRdshqW5jZMBD0RodzsA4lY/6t1JkghPPXqLnQ4p1QwOv1npIPFS6JJl
4oep9shNMKUgQQ==
-----END CERTIFICATE-----
Generated at Wed Aug 12 23:06:09 2026 by rpki-client