Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
File:                     cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json)
Hash identifier:          uBJdroJch2dy5anNtaRK9Xt6qpEVFhX6h0GBUIqEEqQ=
Subject key identifier:   A0:A3:59:DD:82:BC:13:21:F1:DD:A2:FE:10:3F:98:29:C9:D5:10:5E
Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31
Certificate issuer:       /CN=7036e04e53b9d3967cf9d418e78b60bbad075831
Certificate serial:       019D9BBE41540044CF9AD372FE69B7F70AD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
Manifest number:          0466
Signing time:             Fri 17 Apr 2026 14:00:30 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:30 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:30 +0000
Files and hashes:         1: S00d78TItkDHq888CPL8snBiq8U.roa (hash: xbbWOfkY4EBmGgNTfua9nJ1QvCvgAkZPsqc/WKzPEio=)
                          2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: yJAg4+Aofu47WXru0vik9UBl6a9m4e1l4hW3Qj2e0qk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:41:54:00:44:cf:9a:d3:72:fe:69:b7:f7:0a:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831
        Validity
            Not Before: Apr 17 14:00:30 2026 GMT
            Not After : Apr 18 14:00:30 2026 GMT
        Subject: CN=a0a359dd82bc1321f1dda2fe103f9829c9d5105e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a2:38:ac:40:31:a7:2f:06:01:e8:09:c5:93:
                    6f:4c:e3:ed:b0:92:3f:87:ba:39:d6:7f:8a:4b:b2:
                    bb:6f:eb:df:f5:1a:aa:bf:7d:52:24:2e:c4:f3:f5:
                    57:88:88:66:f4:c5:8b:48:e3:8d:62:a0:b6:31:74:
                    dc:d3:f5:95:15:6f:50:f1:c7:5d:b8:aa:53:70:a7:
                    1a:16:a1:8e:be:dc:00:73:89:74:8a:98:10:5f:5a:
                    a2:75:62:86:2f:a2:0e:f0:e8:2c:de:f8:ee:7a:f4:
                    37:95:20:c1:0f:ca:a4:a8:b8:0d:a8:8b:a8:0e:c5:
                    cb:e2:30:12:4f:ef:32:6f:49:d5:3c:84:86:dc:5e:
                    05:ea:65:3d:17:47:59:54:f4:8f:44:e8:b0:99:62:
                    2b:31:1f:5a:72:87:d2:0e:68:d5:f3:fd:6f:1a:9f:
                    c0:fa:b8:6b:22:43:40:e4:a2:eb:30:3d:cf:72:5b:
                    ab:3a:04:3f:9a:9f:cf:69:5d:c9:0f:3c:ce:ed:eb:
                    e3:82:d5:cd:c0:8e:4f:7e:33:32:d1:1c:2b:86:8b:
                    96:dd:29:c9:c7:21:74:9a:98:a9:28:43:06:42:9f:
                    69:c2:69:98:81:15:32:dc:15:7c:c2:f5:12:55:2d:
                    5e:c4:4f:02:50:35:ba:da:2b:f2:0f:9c:70:c5:19:
                    d9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A3:59:DD:82:BC:13:21:F1:DD:A2:FE:10:3F:98:29:C9:D5:10:5E
            X509v3 Authority Key Identifier:
                keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:21:67:86:d8:f0:4e:b6:71:82:1e:a8:09:0e:12:00:5a:d1:
         0a:75:a6:5c:18:8a:51:f8:da:6a:b3:19:a4:79:00:22:42:22:
         7b:b9:63:f9:a3:86:db:74:f8:4f:48:17:fb:15:ea:88:5c:42:
         f6:1e:a5:b6:72:73:4d:83:a0:13:83:77:36:87:90:94:dc:35:
         aa:1a:23:21:bf:a7:7d:4d:6d:55:7b:48:88:1d:07:ed:22:87:
         6a:ba:ba:d9:89:18:07:e6:9b:ba:d4:91:79:e9:98:a4:3b:94:
         a9:0d:61:b8:6a:91:c5:79:c1:c2:6e:3d:38:4d:f4:8a:75:30:
         03:3a:3d:40:a6:44:45:65:1f:fa:f7:fc:d1:0e:70:5a:1a:51:
         50:cf:25:3e:e6:e7:5c:4b:16:85:5b:33:9a:da:64:b8:4d:41:
         d1:47:07:8d:9f:1a:0e:37:77:1f:45:15:65:92:f1:5a:c6:98:
         a1:ac:41:85:f1:30:49:b3:ad:f1:28:06:71:96:7c:c5:1f:a9:
         bc:b1:26:ba:fd:e5:35:4e:53:cb:90:01:63:b8:ce:2b:f6:32:
         46:a4:34:e9:e6:a7:12:cf:a3:22:4d:65:60:1e:c7:05:6e:77:
         5a:b7:6a:af:9f:27:96:99:3a:54:af:5b:87:44:b3:64:fe:d8:
         63:60:47:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:17:08 2026 by rpki-client