Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
File:                     DXL-LIBe1jr8nInpMkrJTTCTmqs.mft (raw, json)
Hash identifier:          1FkzwzRIg7nrA39vKaKLe/dXjHQKFNF8NGQlCfPOsMM=
Subject key identifier:   8B:18:13:F7:8E:7F:FE:5B:1F:97:8E:D0:EA:CF:5C:D8:3C:7B:DD:B2
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Certificate issuer:       /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial:       019CEC02517203F8A3CDF5CFAC385A7EE567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
Manifest number:          10CC
Signing time:             Sat 14 Mar 2026 11:01:40 +0000
Manifest this update:     Sat 14 Mar 2026 11:01:40 +0000
Manifest next update:     Sun 15 Mar 2026 11:01:40 +0000
Files and hashes:         1: DXL-LIBe1jr8nInpMkrJTTCTmqs.crl (hash: ZKQAqJEnbQtrHsQ/uWIN7sFCJs3CnoC9SlpFCOv+YW8=)
                          2: G_ts_4Mq_gm33efoxHmW4h4Xa3o.roa (hash: zaxxR0jHx8djgjzgNeNchFmTBAVbOxlIsfNcGA7bRFE=)
                          3: PRXYBUMYEQRkV3ToDuIhNBrHhyA.roa (hash: uvNCYHR/ZZCKYM9W7EA0XBc+nLp6Db9Y2V2m/ZWTRGE=)
                          4: u2UoUcD01FR6Gm9X9tpyAaOzZTo.roa (hash: /+na6f52i0IzWlXOvWB9jKcZ2W/nTF/S0c3QA8HP8eI=)
                          5: wlFKLKiiGrz35Xi-5LjAPv-O29I.roa (hash: Xc0LKCazMtZLUwvnl2NzDp5cLTNr9d3bVVU78MpvOYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 11:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ec:02:51:72:03:f8:a3:cd:f5:cf:ac:38:5a:7e:e5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
        Validity
            Not Before: Mar 14 11:01:40 2026 GMT
            Not After : Mar 15 11:01:40 2026 GMT
        Subject: CN=8b1813f78e7ffe5b1f978ed0eacf5cd83c7bddb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:61:8d:9f:ec:fb:08:b0:65:5e:b3:97:a2:
                    eb:74:2c:3d:cb:f5:97:af:b6:9f:b0:c7:91:f7:ef:
                    0c:af:a2:cc:30:64:2a:80:1d:c4:93:9f:4e:08:90:
                    1b:e1:aa:34:c3:b6:b0:dd:56:e2:74:53:19:0d:0f:
                    26:b2:f4:6d:28:50:1d:8c:70:b5:76:d4:07:3b:61:
                    d7:6c:ec:e8:92:23:42:5e:e4:66:6b:4e:3a:f3:cb:
                    11:52:1d:f7:1d:17:6a:e9:cd:3c:65:53:58:dc:a8:
                    4f:6e:60:c3:d1:45:9b:b2:23:19:11:c0:4c:48:44:
                    f0:81:fd:11:07:c4:9c:30:92:b2:c0:b7:13:f7:03:
                    d0:9e:d9:05:7f:6c:56:1b:05:75:e7:24:21:f5:f3:
                    49:e6:04:c2:a9:94:86:27:d9:16:3b:7a:8e:d1:30:
                    3a:b5:94:51:49:e2:b7:e8:d8:e1:3c:29:69:01:be:
                    d0:71:f9:ff:cc:14:c2:f9:e8:a1:eb:96:54:d6:68:
                    39:3c:ff:65:89:53:9d:0a:78:dd:ea:91:3e:80:9a:
                    82:33:2c:48:46:8f:b2:24:b5:7a:26:bd:47:6d:09:
                    16:51:97:94:21:91:9b:3e:6a:4d:65:1c:79:84:c2:
                    d1:79:b3:91:ef:5c:4d:9f:14:5d:2a:1a:c6:f4:c2:
                    d1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:18:13:F7:8E:7F:FE:5B:1F:97:8E:D0:EA:CF:5C:D8:3C:7B:DD:B2
            X509v3 Authority Key Identifier:
                keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:66:73:e2:5d:de:32:4f:28:86:8e:bb:c9:22:d8:71:5e:d5:
         19:5f:d4:e5:87:6c:ec:96:70:f4:f2:2b:41:e9:56:18:3d:05:
         4e:9b:65:e7:80:de:bf:a9:ac:2e:aa:dd:f9:fa:e9:96:56:80:
         8b:82:fe:ef:5b:cd:cc:6c:5c:10:c2:be:ce:42:e6:0b:ab:c2:
         98:87:9c:69:fa:44:c2:d4:96:60:c9:c5:72:9e:05:f0:65:75:
         06:a9:0f:c2:93:2a:41:24:17:cf:ec:6d:c1:66:84:e6:5a:05:
         09:e3:cc:9f:22:10:44:a4:b5:41:e3:64:c0:d5:aa:14:35:dd:
         72:4a:69:a3:ed:48:4f:5f:d5:01:38:02:19:1f:52:8b:7c:d8:
         fb:c7:37:24:6e:3d:4d:2a:4c:2b:d6:83:53:5d:76:38:30:3c:
         2a:61:9a:a4:69:35:da:8c:df:79:f3:91:83:70:e1:e5:63:cf:
         65:2b:a0:ff:8e:f4:eb:7a:67:41:54:50:f1:02:ad:2a:f4:2f:
         a0:79:4a:88:1a:6b:33:4e:a3:a3:c4:d9:cd:7b:c7:3d:fe:47:
         84:13:f0:30:53:1b:a1:94:13:52:5e:b4:ea:77:34:e7:7b:22:
         74:b9:b2:23:5d:aa:3a:e1:0a:ba:22:b0:5c:4f:6b:63:64:24:
         a0:8b:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:15:09 2026 by rpki-client