Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
File:                     dlIO_x7h4o493PuJ58tvfYmnfJw.mft (raw, json)
Hash identifier:          3WGFOWsDJY+scBdKHkSbuUGBHyMs4VC/85zF8CBdLlA=
Subject key identifier:   58:59:C1:CA:FE:49:37:13:73:19:F3:C7:8D:B8:C5:D4:BA:32:CF:3E
Authority key identifier: 76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C
Certificate issuer:       /CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
Certificate serial:       019D9D3F08AE31B08889A0CB3DE8EA550249
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
Manifest number:          0450
Signing time:             Fri 17 Apr 2026 21:00:46 +0000
Manifest this update:     Fri 17 Apr 2026 21:00:46 +0000
Manifest next update:     Sat 18 Apr 2026 21:00:46 +0000
Files and hashes:         1: dlIO_x7h4o493PuJ58tvfYmnfJw.crl (hash: DiCfH4P+hBSS1VKHvl3xVdXVuqhUJWPPJSFpNsOjxAY=)
                          2: vN_iCn3dErMlkINktQHQh6BzVag.asa (hash: xxGSjmec+PJ6pYtZUgzLFor5yYjt4iT2OwVJmP8+ZVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3f:08:ae:31:b0:88:89:a0:cb:3d:e8:ea:55:02:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76520eff1ee1e28e3ddcfb89e7cb6f7d89a77c9c
        Validity
            Not Before: Apr 17 21:00:46 2026 GMT
            Not After : Apr 18 21:00:46 2026 GMT
        Subject: CN=5859c1cafe4937137319f3c78db8c5d4ba32cf3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8b:99:3e:2b:f5:58:04:c0:a7:02:4c:ba:9f:
                    bf:c7:88:16:61:37:4e:8f:fb:af:08:49:bb:6c:f7:
                    72:f0:ae:cc:a4:31:e1:19:61:e0:eb:33:d7:e9:f2:
                    ac:12:80:f3:7d:dc:12:ee:af:a1:45:6d:aa:e0:48:
                    01:6c:bb:ec:6d:aa:9f:dc:b5:e7:73:ff:b7:b8:07:
                    c4:bc:8e:a5:ab:e9:73:80:cf:07:d0:1c:cd:d4:02:
                    0c:8c:27:f1:6c:1a:31:f4:bd:8c:a5:2f:bc:04:83:
                    0d:5c:0e:21:62:99:b4:ac:87:16:ef:91:92:3d:18:
                    b0:33:26:54:fc:05:29:dd:5c:76:d7:44:75:8c:cb:
                    2e:12:da:c0:dd:7f:51:0c:b7:ea:38:74:42:3d:94:
                    c7:88:95:37:5e:74:7c:25:48:fe:46:ea:7a:d5:cd:
                    04:c8:51:a5:cf:2a:43:8d:4b:a7:24:34:56:80:e4:
                    44:ff:b0:b9:d2:93:fd:ab:1b:2c:b1:2d:0d:57:6f:
                    43:1b:f7:89:de:99:ad:de:74:d2:9f:07:fb:a2:a9:
                    b7:f7:ee:34:fa:c2:80:3f:a2:09:0f:3b:f4:ad:1f:
                    a3:6a:d7:c3:cc:8b:e2:02:cf:88:60:d4:93:f1:73:
                    45:1b:a7:1b:6e:1a:ca:f7:ab:54:bb:51:9d:bf:b4:
                    3e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:59:C1:CA:FE:49:37:13:73:19:F3:C7:8D:B8:C5:D4:BA:32:CF:3E
            X509v3 Authority Key Identifier:
                keyid:76:52:0E:FF:1E:E1:E2:8E:3D:DC:FB:89:E7:CB:6F:7D:89:A7:7C:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlIO_x7h4o493PuJ58tvfYmnfJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/dece63-f0c0-465b-ad82-c8751f954524/1/dlIO_x7h4o493PuJ58tvfYmnfJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:1e:27:07:14:06:5f:ed:73:52:4a:d3:a2:0f:c5:89:94:00:
         d6:73:d6:be:f9:91:8f:49:59:de:2a:74:c1:72:ba:23:8b:5d:
         33:71:24:dc:f8:56:8a:f1:99:10:8d:ad:4a:46:85:e3:91:48:
         64:d7:8c:24:fb:71:b3:49:c8:4a:33:7b:53:55:53:48:7f:84:
         3e:45:ef:ef:82:90:e8:66:1e:e9:f0:9f:49:93:59:60:db:b2:
         cd:9c:c2:b4:02:ce:a6:91:93:11:b2:4a:22:43:69:65:90:8c:
         69:f4:fa:9c:3d:87:4c:5f:68:cd:e4:9c:ab:42:3e:1e:22:33:
         f0:b4:9b:bf:ee:1e:fb:ed:d8:65:17:72:ad:20:26:ff:a8:77:
         09:cb:dd:2d:a6:07:df:e3:79:c9:b9:4a:24:d0:99:ee:3c:2e:
         5e:fe:b2:5f:ae:e6:b2:df:ef:6b:7b:d2:8c:9d:1f:42:04:6c:
         35:81:31:5f:ff:d5:6e:08:4a:a9:2e:00:63:5a:54:bb:3e:27:
         d3:ed:c6:39:dd:f4:99:bb:86:ec:d2:d6:90:5b:e6:4e:8b:d5:
         c5:26:3b:ff:40:36:06:cc:2f:c5:e0:eb:d9:78:08:93:25:8d:
         a9:6d:e0:7f:bb:65:ea:3b:38:31:5b:43:cf:62:1f:ef:4a:d0:
         67:16:d9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:34:18 2026 by rpki-client