Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File:                     DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier:          bwPoi/hOGp1TFZuVCFlhtSDJEO9Iesek9oDcZrCJwL0=
Subject key identifier:   64:A4:FA:16:4E:6D:35:95:5D:C8:A0:93:34:D4:08:87:C8:55:7F:90
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer:       /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial:       019F17C24B41A0476E76AE1A2EC9B90C549D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number:          164E
Signing time:             Tue 30 Jun 2026 09:00:36 +0000
Manifest this update:     Tue 30 Jun 2026 09:00:36 +0000
Manifest next update:     Wed 01 Jul 2026 09:00:36 +0000
Files and hashes:         1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: hK3D/YXGyc9Dea8CZxVeJrJf0LNe9zayITJx3StcvnU=)
                          2: Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa (hash: G8coFslA7SGGsh7OBwFjSWY/mTtlNbU81EsuVTVQlk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c2:4b:41:a0:47:6e:76:ae:1a:2e:c9:b9:0c:54:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
        Validity
            Not Before: Jun 30 09:00:36 2026 GMT
            Not After : Jul  1 09:00:36 2026 GMT
        Subject: CN=64a4fa164e6d35955dc8a09334d40887c8557f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:20:e2:f3:0c:0e:41:26:3f:d1:44:1c:32:
                    b9:31:cf:7b:b6:b6:e8:57:2c:7a:8a:60:0b:f2:f9:
                    21:7b:16:e8:de:f1:29:d0:38:eb:e8:ed:dd:5b:37:
                    72:8f:57:71:ee:67:fb:15:34:28:36:07:d3:7d:25:
                    0b:b9:8b:de:5e:8e:34:30:1e:3d:27:10:53:3f:ec:
                    1f:f7:50:10:8c:0c:dd:d1:83:54:b0:40:96:94:3d:
                    d6:d1:6d:a4:7c:be:2e:72:31:25:43:7b:72:21:96:
                    f8:97:f2:0a:b1:1c:59:fc:84:c5:8b:5a:98:cc:52:
                    08:67:75:6c:4a:b7:0e:d3:a4:ef:c7:0e:a9:10:aa:
                    f1:b4:47:a7:e1:4a:f2:1f:8a:53:07:b3:20:81:61:
                    24:96:7a:5c:0f:51:19:b7:05:fa:b0:6a:ec:ff:aa:
                    db:8e:4c:9e:0e:ad:d1:c5:cb:b1:3f:9d:d8:ad:a7:
                    2d:d5:93:6d:1f:28:53:c5:e9:87:85:ae:4b:a4:e9:
                    17:20:c5:36:d9:71:3c:0b:ee:93:3e:eb:62:50:2b:
                    54:2c:fa:46:7c:ee:fb:98:22:e4:62:ff:d3:36:d6:
                    1f:3f:43:03:57:9e:0c:41:b1:7f:03:6b:bc:b3:7c:
                    fc:a6:00:7a:8e:22:18:94:90:a3:84:e5:8a:fb:d2:
                    f7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A4:FA:16:4E:6D:35:95:5D:C8:A0:93:34:D4:08:87:C8:55:7F:90
            X509v3 Authority Key Identifier:
                keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:08:97:2f:03:95:a4:49:74:db:e5:27:2c:b7:d8:10:f3:90:
         80:e7:c6:7c:8d:9a:6e:50:a6:62:be:14:c1:65:7c:19:84:28:
         7e:46:7b:22:9d:d5:42:39:15:73:a2:14:4e:99:13:aa:8e:4c:
         22:a8:78:8b:bc:51:21:a3:c3:b5:4d:ee:9b:d3:26:27:cf:d2:
         38:4d:56:ed:ff:71:43:b0:ab:a9:db:7f:86:eb:ff:8d:a7:d9:
         db:bc:71:51:55:34:b6:8b:4b:39:43:22:05:d4:35:da:d4:1a:
         e4:8a:37:ab:03:3e:0c:ec:ca:34:b9:c9:7d:8d:da:a8:9c:30:
         2a:21:b5:26:99:da:51:b6:75:a1:ed:b6:c9:94:7f:48:87:80:
         bd:ac:b5:0b:a9:93:64:ab:d9:bf:96:9d:75:10:4d:cc:e6:05:
         d4:be:2c:7b:ce:51:cf:41:6a:e0:b3:f5:93:ea:72:c1:61:67:
         b0:c5:a6:38:9f:c4:7a:62:5c:56:0c:b0:5a:04:41:ec:09:c7:
         60:0b:cf:5c:35:36:85:2d:6b:3a:7f:c6:7d:1f:8b:a7:96:86:
         f9:f4:c0:7d:68:db:7f:40:cf:ea:d0:3f:1a:f3:b2:9a:76:97:
         ca:fc:06:78:df:84:11:3b:e5:53:60:50:f4:48:f4:00:f0:c2:
         5d:a5:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:38:04 2026 by rpki-client