Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
File:                     DAN90it6q-KCIlr7JWuNncvro1M.mft (raw, json)
Hash identifier:          gz2SEVf++jIWlB2xRVnHquQWhDXZJ+pjinnGtAvCRUA=
Subject key identifier:   C3:8D:55:45:86:3C:58:82:61:91:E5:9D:0C:0D:8E:78:C0:43:D3:24
Authority key identifier: 0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53
Certificate issuer:       /CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
Certificate serial:       019D98F4E38B4779A5FBAC0BCE4ECDBCA0BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
Manifest number:          082B
Signing time:             Fri 17 Apr 2026 01:01:18 +0000
Manifest this update:     Fri 17 Apr 2026 01:01:18 +0000
Manifest next update:     Sat 18 Apr 2026 01:01:18 +0000
Files and hashes:         1: DAN90it6q-KCIlr7JWuNncvro1M.crl (hash: lUZKCbYkFHnzUKcYyZXee1gh7Nu7sFTJ8Zi/zTOc1u8=)
                          2: ItFf5mGxUD7KxGy789UtNATPKKo.roa (hash: q6yJcUukZanUDWbF7+j0aEo4I20oQqnK0aRmb9zfRQg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:e3:8b:47:79:a5:fb:ac:0b:ce:4e:cd:bc:a0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c037dd22b7aabe282225afb256b8d9dcbeba353
        Validity
            Not Before: Apr 17 01:01:18 2026 GMT
            Not After : Apr 18 01:01:18 2026 GMT
        Subject: CN=c38d5545863c58826191e59d0c0d8e78c043d324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:70:f7:ba:e1:4d:84:43:a6:1f:25:16:bd:b0:
                    4c:63:e2:2e:de:a6:5e:30:c9:58:55:69:b5:8f:6f:
                    fd:36:d9:b2:98:3c:69:c5:81:62:97:ad:56:55:8d:
                    14:95:c3:6b:36:43:bf:9c:0b:d2:74:14:ec:75:18:
                    03:0a:56:65:43:5b:29:a1:6d:b9:a9:57:f5:ea:3c:
                    44:c4:11:06:a1:b7:46:91:83:b5:97:97:0b:57:ac:
                    1e:df:09:1c:1c:54:d6:c5:f9:2b:63:71:33:7b:e0:
                    f0:e1:89:8d:d6:fa:c8:2f:be:dd:5c:96:81:ba:bf:
                    ff:82:dd:4a:30:98:49:00:f9:e5:23:77:39:56:96:
                    3e:60:28:1b:57:a7:6c:20:2e:bd:e9:50:42:74:a9:
                    d5:15:47:13:97:73:9d:3b:a1:11:df:b5:e5:53:55:
                    e3:4d:e3:42:e6:39:1f:92:cd:d5:63:04:30:b5:04:
                    71:4e:75:67:ce:e9:63:5d:79:b7:4a:f0:f7:a7:62:
                    9d:77:87:fe:e4:e7:73:1b:b6:2b:db:b5:aa:3d:b1:
                    0c:32:68:8c:5c:73:84:21:80:09:5d:7e:ff:45:41:
                    c2:8d:48:3a:b0:9c:4d:f4:27:df:b9:69:45:be:89:
                    77:6f:e2:99:98:2f:cf:f4:59:17:f0:47:aa:2b:14:
                    92:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8D:55:45:86:3C:58:82:61:91:E5:9D:0C:0D:8E:78:C0:43:D3:24
            X509v3 Authority Key Identifier:
                keyid:0C:03:7D:D2:2B:7A:AB:E2:82:22:5A:FB:25:6B:8D:9D:CB:EB:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAN90it6q-KCIlr7JWuNncvro1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/da81cb-1972-4c9b-9dab-e8f3a66ef558/1/DAN90it6q-KCIlr7JWuNncvro1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:19:91:82:15:68:91:15:16:33:25:ec:02:9b:2c:38:29:00:
         3c:ff:cc:a2:d9:4e:99:8e:45:9c:de:14:41:ed:8f:e2:a5:a1:
         03:bf:65:9c:46:d1:76:66:47:32:21:53:55:18:c7:5c:40:64:
         27:97:40:40:22:a9:a4:bf:73:36:c7:dc:92:88:94:29:af:8c:
         d9:c7:1c:5b:6d:72:53:5a:48:6a:ea:b3:81:3b:18:81:bc:ed:
         2b:43:40:c8:e2:32:f6:0c:a3:39:94:de:35:7f:d4:99:da:ce:
         f0:01:ab:d8:b7:7c:d1:9b:b8:ca:ba:d0:94:b4:cd:fb:2b:f4:
         12:89:19:9e:1c:f3:ff:68:38:2b:4d:1a:58:e2:22:6c:7b:11:
         e7:57:27:59:24:14:e0:9d:53:83:d3:b0:c8:a7:ad:d8:65:03:
         c4:b9:a9:a8:ac:be:f7:67:44:82:66:c6:54:cf:f1:cc:ae:58:
         b3:c5:65:18:c2:3a:bc:98:91:4f:11:66:94:93:f3:7b:a5:94:
         aa:17:f7:df:55:d1:72:a2:55:7e:3d:4a:b0:5b:6f:95:8f:1d:
         ef:a5:2b:59:6d:98:9a:2f:27:b1:53:ad:3a:91:d1:43:4b:07:
         96:46:a5:d9:a9:04:91:60:c9:6a:4c:b3:9c:ef:a9:1a:97:68:
         c7:76:4b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:40 2026 by rpki-client