Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
File:                     DibUX9VpIdNGnRnEdXLydfnVUkI.mft (raw, json)
Hash identifier:          aVbg3P4D9gJkD4B6QZqrVnf+Fa4Tnw8DmaZCgTaiQsw=
Subject key identifier:   39:BB:26:88:E4:84:9E:DB:C6:B2:34:CC:8F:64:E7:53:D7:D2:69:9B
Authority key identifier: 0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42
Certificate issuer:       /CN=0e26d45fd56921d3469d19c47572f275f9d55242
Certificate serial:       019F190D4CDE18429B6DC9ED4A2CAD07BE01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
Manifest number:          0BD6
Signing time:             Tue 30 Jun 2026 15:02:09 +0000
Manifest this update:     Tue 30 Jun 2026 15:02:09 +0000
Manifest next update:     Wed 01 Jul 2026 15:02:09 +0000
Files and hashes:         1: DibUX9VpIdNGnRnEdXLydfnVUkI.crl (hash: LfTdkP54xkWlu7ZXvKaxDFOcZg7UvDMJufHst8uYsQM=)
                          2: E5N49IFOZzcUudGH8Hfr0F0ywvk.roa (hash: qu/cDpuHW9hVmNW832+M9NPLYicyAqIzhTV6hHRmh3Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0d:4c:de:18:42:9b:6d:c9:ed:4a:2c:ad:07:be:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e26d45fd56921d3469d19c47572f275f9d55242
        Validity
            Not Before: Jun 30 15:02:09 2026 GMT
            Not After : Jul  1 15:02:09 2026 GMT
        Subject: CN=39bb2688e4849edbc6b234cc8f64e753d7d2699b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:cf:49:78:1f:51:37:0e:10:8f:ad:05:65:
                    c6:5b:0f:81:d1:8a:90:cc:9d:f0:25:13:f0:3a:24:
                    4a:2e:6c:d0:9b:ce:c2:a5:d3:75:ee:7d:78:b3:2e:
                    f2:81:9e:36:c7:f0:13:85:68:4f:ca:0c:02:70:31:
                    9b:11:60:d4:ab:1a:65:54:4b:42:b7:34:e9:f3:31:
                    9e:4d:51:0e:28:95:8c:24:f1:bd:68:c3:fe:34:28:
                    b6:58:9c:1a:7c:1b:c0:d7:23:fb:35:83:a5:ff:dc:
                    7c:81:f0:1d:02:27:d2:31:f9:69:1a:2a:a7:fc:95:
                    73:d5:f6:59:35:24:68:c0:0e:8d:97:c5:20:0d:8c:
                    83:23:31:74:48:e5:99:e9:89:f4:67:60:e2:c2:c3:
                    4f:3e:ac:73:a3:7e:63:2b:e0:b9:c5:8d:78:06:01:
                    2d:c6:e9:7e:7c:54:fa:f0:07:58:1e:ee:3d:b4:ab:
                    5d:51:34:4c:f4:46:eb:ca:56:7f:3d:12:ee:e2:51:
                    45:45:8c:b1:f6:2c:37:2c:5a:b7:3f:47:77:3f:c6:
                    cd:27:04:7b:b9:3a:8d:42:ea:ec:71:7c:ca:e2:3b:
                    28:d6:38:d9:ad:d0:b6:60:80:bc:b3:c8:08:2f:92:
                    f6:bb:66:f5:77:98:f0:8e:25:67:80:99:b8:c7:77:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BB:26:88:E4:84:9E:DB:C6:B2:34:CC:8F:64:E7:53:D7:D2:69:9B
            X509v3 Authority Key Identifier:
                keyid:0E:26:D4:5F:D5:69:21:D3:46:9D:19:C4:75:72:F2:75:F9:D5:52:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DibUX9VpIdNGnRnEdXLydfnVUkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6a1baa-5f8f-420a-90c4-665a69cb8900/1/DibUX9VpIdNGnRnEdXLydfnVUkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:17:8a:6f:6c:6d:d7:ee:16:9d:58:0b:ca:56:b9:84:30:24:
         d0:55:c3:e8:d2:2e:e5:ec:4a:c0:b0:7f:fd:66:62:14:db:39:
         25:46:75:2d:0c:4e:c8:8e:31:77:ca:dc:98:32:1a:a0:fa:5f:
         1e:ad:40:d4:44:56:60:ab:e3:50:f7:8a:81:21:cb:eb:bf:77:
         d9:99:cc:cd:36:8d:ff:4b:e2:d5:4e:3b:3e:c3:d8:46:85:05:
         e5:72:a0:fc:ca:b3:d1:33:d2:0f:84:95:4f:30:e7:b9:31:d1:
         54:5b:bc:71:81:a3:77:eb:bf:81:4a:aa:df:ae:f6:af:2b:74:
         57:4a:98:2a:2c:21:0a:10:9e:3a:35:38:56:67:1f:4e:2e:86:
         08:f6:73:46:84:87:43:0e:57:a7:b9:08:e4:f8:32:6f:b2:ef:
         a5:95:33:1d:1a:72:ab:8e:d0:92:a6:27:50:28:ee:b0:ef:92:
         9f:57:15:1e:db:d2:d3:65:9b:a6:ff:88:3e:2e:6b:d2:60:19:
         af:32:f8:ee:13:f9:bd:cc:f3:af:84:98:d9:64:39:58:15:f0:
         18:14:f0:38:ff:59:8e:8f:25:15:0f:3e:46:b1:26:3f:5a:c6:
         53:3e:ce:91:0a:c6:fb:eb:06:27:62:91:8d:77:4e:50:6a:7b:
         53:bb:88:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:18 2026 by rpki-client