Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
File:                     152FaqqerRL3XLaM2ulqDSyN3h4.mft (raw, json)
Hash identifier:          53zYr+90Q2rLWPTdmPu02iRQcqajWF+Ido47p1wucWc=
Subject key identifier:   CA:DC:4C:AD:83:D3:56:60:CF:4E:CA:32:22:52:B1:06:76:59:B6:0B
Authority key identifier: D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E
Certificate issuer:       /CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
Certificate serial:       019CAE356B9C89401C5FCAE9621F25F55959
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
Manifest number:          1203
Signing time:             Mon 02 Mar 2026 11:01:02 +0000
Manifest this update:     Mon 02 Mar 2026 11:01:02 +0000
Manifest next update:     Tue 03 Mar 2026 11:01:02 +0000
Files and hashes:         1: 152FaqqerRL3XLaM2ulqDSyN3h4.crl (hash: 13OLF+x1GS1ngLyKkxoWBWBJ3JncOvEyIR11L3B8COE=)
                          2: VpcTd6xXlgFFUSrpk4clP1LplCk.roa (hash: z6Z+0vG8Hh50YDE7aHF3RrHxwQleH1k0N54rCd2esz8=)
                          3: uGnD4olvWwb-IxQgtMlpkYc5Ygc.roa (hash: 3grRGp9lhYOmkty3bAIcup/fw2wObERf8v9hgQgL3a8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ae:35:6b:9c:89:40:1c:5f:ca:e9:62:1f:25:f5:59:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79d856aaa9ead12f75cb68cdae96a0d2c8dde1e
        Validity
            Not Before: Mar  2 11:01:02 2026 GMT
            Not After : Mar  3 11:01:02 2026 GMT
        Subject: CN=cadc4cad83d35660cf4eca322252b1067659b60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:c5:0d:5a:72:5f:0b:21:48:1e:0a:58:67:
                    92:dd:91:2f:d5:7c:2b:12:f2:1b:ef:98:05:f3:53:
                    7c:b8:fd:16:29:15:4c:c6:bb:7a:a8:33:9c:d3:df:
                    29:65:d7:2e:97:73:49:eb:b8:4f:45:37:56:3c:02:
                    2c:ff:fd:23:04:9f:5c:3a:e9:0d:c5:21:9d:98:26:
                    2e:e8:80:17:25:a7:60:86:c8:ad:a8:33:7a:58:f5:
                    63:40:f0:d7:b6:e4:fb:67:15:ad:0c:db:c8:92:a5:
                    af:50:5c:27:1a:0a:2e:65:49:92:f1:b3:bc:d5:3b:
                    51:cf:fc:57:bc:e8:af:23:af:45:a2:95:98:f5:bf:
                    27:62:7a:80:a6:30:cb:f9:94:b0:76:4a:84:29:bc:
                    52:76:75:b4:ed:17:90:70:56:ef:db:19:83:ef:70:
                    51:06:6b:3e:46:0b:a1:d5:39:73:4b:83:a2:e2:d4:
                    29:17:9a:ec:96:4f:cb:82:78:1d:9d:b6:56:aa:08:
                    75:07:79:ac:00:cc:33:1e:bf:aa:f0:ff:9d:5f:15:
                    73:02:5c:ea:6f:2f:6c:12:5b:87:c4:b1:a3:9f:a5:
                    71:29:c6:34:2b:0a:8f:a0:43:b6:20:18:2d:18:a6:
                    e3:a5:7c:2c:c5:1a:af:2c:61:04:5b:99:4b:21:71:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DC:4C:AD:83:D3:56:60:CF:4E:CA:32:22:52:B1:06:76:59:B6:0B
            X509v3 Authority Key Identifier:
                keyid:D7:9D:85:6A:AA:9E:AD:12:F7:5C:B6:8C:DA:E9:6A:0D:2C:8D:DE:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152FaqqerRL3XLaM2ulqDSyN3h4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a5baa2-2a35-4c76-a940-5990cd4de88b/1/152FaqqerRL3XLaM2ulqDSyN3h4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3b:54:44:1f:7f:a4:7f:20:98:82:75:6b:e5:6a:94:32:3b:
         dc:c2:2a:a4:19:2c:82:11:7b:cf:65:36:ef:13:4b:c3:91:95:
         9f:99:ab:37:23:58:61:25:95:85:c6:d4:96:1a:80:99:94:49:
         b3:9b:81:5b:a2:61:60:48:36:0a:75:b4:54:a6:9c:8c:92:c6:
         88:06:fe:8d:2c:e1:b6:a9:be:d6:0e:06:46:91:d2:0c:2b:0a:
         f3:17:9e:b8:40:1d:cb:84:cd:27:71:49:ad:5a:bf:96:b7:70:
         01:4a:9d:97:b0:97:ab:21:58:9a:99:41:99:8d:04:82:6a:45:
         e5:c2:38:4e:70:06:14:93:cc:fd:82:1b:3e:e3:5e:fd:c4:ee:
         bf:a1:c5:6d:9c:81:55:d3:24:40:c2:a5:51:b3:7b:6d:f6:b8:
         a8:3d:1d:c4:a3:f8:50:b0:27:44:b4:56:d3:d2:04:c0:55:a4:
         15:36:74:ea:eb:6b:4a:c5:59:3a:de:bc:f0:49:0e:52:b2:05:
         b8:90:93:b3:a3:69:ba:76:e7:7c:98:10:e7:d4:40:0e:c3:18:
         51:e1:c8:ac:de:ef:e1:cb:cf:6a:d7:5d:4e:15:c4:9b:28:8d:
         c5:4b:76:ac:64:63:66:de:98:d8:4b:e1:4f:13:86:f0:a5:38:
         4e:30:87:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:57 2026 by rpki-client