Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
File:                     DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft (raw, json)
Hash identifier:          DrXbWNzjbCw28Zu9w1pR9eP+P/hd8FnSTgw397s9BNk=
Subject key identifier:   57:D4:67:19:BD:78:85:64:0F:8B:49:EE:63:5D:A9:E0:41:CA:70:71
Authority key identifier: 0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81
Certificate issuer:       /CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
Certificate serial:       01A0024B21AF32B7D3EEB1165C786D544557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 22:01:13 +0000
Manifest this update:     Fri 14 Aug 2026 22:01:13 +0000
Manifest next update:     Sat 15 Aug 2026 22:01:13 +0000
Files and hashes:         1: DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl (hash: 7Mpttif5twz0zNMJkHVKG/CyZAoqDATFjVyX1SLlAVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:4b:21:af:32:b7:d3:ee:b1:16:5c:78:6d:54:45:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4baf87f7ba6712f3f65ff3aba02fde62099481
        Validity
            Not Before: Aug 14 22:01:13 2026 GMT
            Not After : Aug 15 22:01:13 2026 GMT
        Subject: CN=57d46719bd7885640f8b49ee635da9e041ca7071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:49:79:4a:cf:e8:84:07:38:91:48:47:89:3b:
                    29:c2:7b:c1:7e:6c:8a:ea:b5:d9:02:96:63:89:cf:
                    7e:00:4b:06:cd:a6:38:da:b5:82:a0:b6:a6:d0:df:
                    90:cd:8a:a5:07:7a:fb:8d:a4:2d:ac:a5:70:50:6d:
                    72:e6:a4:16:f8:e9:79:a6:28:7a:04:a2:ba:c0:45:
                    51:67:e8:81:aa:a9:e1:74:67:11:b0:57:c6:5b:9b:
                    40:74:98:72:6a:7f:92:ea:6d:28:c5:00:4d:74:1a:
                    40:3f:59:7a:8f:0c:d0:43:90:79:cf:93:bb:29:71:
                    9b:9a:01:c1:45:ee:5a:1d:cd:cb:46:87:d2:cc:a0:
                    98:d3:54:ca:59:c5:63:de:9d:6c:dc:69:06:02:93:
                    9e:49:c6:6e:97:d7:53:fd:1a:46:65:62:b6:0d:62:
                    ca:2a:90:25:f9:40:27:e0:68:8f:93:b6:52:c8:ae:
                    78:39:3c:fa:17:1b:c1:e0:e5:e4:79:7b:fb:c9:61:
                    8d:f9:53:c8:35:38:af:a7:7b:0c:2a:db:f7:91:84:
                    18:81:3f:f9:25:ef:43:ba:79:cf:a7:10:b8:ef:8a:
                    14:d8:e4:d8:ca:4f:44:ab:40:02:10:3a:d0:ef:48:
                    2c:6f:0f:ae:3e:2f:ee:04:96:62:43:3c:8e:8e:98:
                    e3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:67:19:BD:78:85:64:0F:8B:49:EE:63:5D:A9:E0:41:CA:70:71
            X509v3 Authority Key Identifier:
                keyid:0D:4B:AF:87:F7:BA:67:12:F3:F6:5F:F3:AB:A0:2F:DE:62:09:94:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7670a2-8819-4ae2-8bf6-9c7f369f7f18/1/DUuvh_e6ZxLz9l_zq6Av3mIJlIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:a9:3d:9f:11:91:eb:43:ee:b5:da:b4:3d:96:06:3d:23:
         a2:68:a5:10:d6:cb:a1:d2:0a:06:12:40:01:e5:b2:85:3a:61:
         4a:29:db:43:59:d0:a9:39:56:3a:91:f6:b2:3f:6f:87:c3:5c:
         46:5a:43:d3:83:c8:fe:37:55:e5:2c:c8:e1:b2:d3:64:43:fc:
         3f:3d:3c:6c:86:f6:7d:04:c2:dc:6d:b0:f6:24:17:88:f0:9f:
         a3:93:48:a2:5c:6f:73:f9:69:85:d4:ac:88:6e:f5:6f:23:e2:
         5c:3e:85:1c:dc:c5:66:89:ec:60:98:b4:f7:2c:fe:6d:7a:ff:
         0d:6c:23:7b:5e:e3:09:0d:b1:9e:9a:e1:10:ab:3e:e9:7e:20:
         09:6b:9a:c1:86:b0:8c:c5:26:41:18:fc:6a:40:18:43:49:20:
         2d:c5:be:45:7e:3c:91:06:31:05:c3:bc:5b:f9:30:0e:f6:46:
         ab:6e:3b:04:dc:d5:66:75:31:6b:9d:71:3e:69:c4:ad:01:8b:
         06:3d:88:91:2e:9b:8f:5c:53:83:4f:a0:54:97:b6:bc:77:f6:
         cc:89:13:91:ff:ea:12:6d:38:d8:9f:22:8b:19:45:67:54:ac:
         e6:bf:d1:24:0c:df:19:42:1b:8b:07:8a:b2:51:a3:45:06:80:
         72:21:43:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:35:36 2026 by rpki-client