Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File:                     dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier:          zQUP/iyIumYRxMRwoguL6oZIpmNHOm7CsipDOBL8BN8=
Subject key identifier:   E3:DE:12:A9:B4:DB:6E:94:28:43:ED:26:8E:79:7D:9A:3F:D6:C6:FD
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer:       /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial:       019CAB6BB6C514BF57E174BE351AB2F2DA8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number:          157E
Signing time:             Sun 01 Mar 2026 22:01:28 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:28 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:28 +0000
Files and hashes:         1: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: EgPqqv/Bk+JNQtAJ788vN3TrCmcZ6IE11pHVI8n134o=)
                          2: h8XV-KgY396KZBJ7Bi9YlZn3ShM.roa (hash: fluQLEMS1tYgpv9diRyw7o5a3GxgE3HkE4V51yJi7a8=)
                          3: oo1W6F0elMF6_CiE6UvVXxLai4o.roa (hash: t1F5I9ggDgCDZTVdA+hfkYMiN/rTAkrjwkTHtKs69BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:b6:c5:14:bf:57:e1:74:be:35:1a:b2:f2:da:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
        Validity
            Not Before: Mar  1 22:01:28 2026 GMT
            Not After : Mar  2 22:01:28 2026 GMT
        Subject: CN=e3de12a9b4db6e942843ed268e797d9a3fd6c6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:65:cb:20:dd:2b:f8:6c:01:fd:9a:b5:6d:7a:
                    cd:81:37:36:b3:94:84:0a:56:e5:6e:b2:0f:cd:39:
                    49:c3:95:5b:f3:5a:94:ed:0a:dd:2f:42:ba:e7:a8:
                    49:82:38:f3:38:f6:3c:db:1c:d3:53:bc:ee:9f:5a:
                    f9:ed:a7:cf:c2:81:5d:0e:10:6b:82:f9:c9:45:bc:
                    f9:9f:1e:02:47:9a:0c:2c:98:60:a7:4b:0a:5e:57:
                    8a:db:61:2f:a6:60:89:4c:32:a9:d6:48:3e:35:cb:
                    e6:d8:e5:e2:71:ea:93:3d:a4:d5:f1:00:ba:b6:cc:
                    e4:ad:4b:23:54:05:fd:21:92:26:42:b6:01:a2:de:
                    f5:91:7e:32:ff:d9:f6:96:d8:1c:f7:75:a1:de:70:
                    ae:97:e5:92:9a:90:27:28:cd:e3:2f:a5:3d:39:9f:
                    08:3d:0a:f7:55:a7:28:18:8a:e9:bd:f2:ec:26:17:
                    e0:f2:3b:f7:d3:0e:23:ce:64:be:fb:c5:cc:66:5b:
                    2a:d6:a4:66:de:09:5e:62:be:3c:6d:5b:66:69:ef:
                    4e:8b:88:89:73:21:3e:6c:59:ac:70:ae:27:1f:73:
                    50:f0:1e:62:1a:09:ca:ba:2e:c7:5c:96:95:92:7f:
                    ea:b5:9f:18:e1:3a:04:86:c3:5e:c0:72:1e:c8:fc:
                    30:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:DE:12:A9:B4:DB:6E:94:28:43:ED:26:8E:79:7D:9A:3F:D6:C6:FD
            X509v3 Authority Key Identifier:
                keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:a9:ce:88:ba:39:2c:31:4a:35:29:55:d5:62:c5:70:a0:0a:
         6e:a8:8e:c4:3a:0c:2a:25:04:e8:e7:b2:06:fe:8d:8f:e9:a1:
         ac:c0:99:d0:cb:cd:5d:20:1e:98:4f:8f:18:1f:a6:3c:88:1e:
         27:dc:ef:04:31:7c:7b:7d:b3:c4:98:e5:a4:41:5d:5b:65:6f:
         83:b8:41:2c:1b:98:3d:f0:4d:e4:06:f3:28:7b:7e:c6:7a:e5:
         55:5c:28:dd:01:80:04:fc:d9:ec:3a:ce:bf:41:c7:b6:6e:95:
         ec:75:88:88:fe:0e:9e:93:a5:53:a4:81:99:79:74:a4:8c:bd:
         04:fd:5e:44:17:46:70:12:02:30:89:09:72:e8:f0:e3:1b:c3:
         c3:de:50:04:4e:75:27:00:d4:78:21:53:37:62:de:5b:38:48:
         b7:9d:cf:e4:cf:4a:b6:16:11:b3:2d:0a:18:9b:ca:a0:6d:84:
         8d:fb:17:87:91:ab:1e:f0:c0:cb:90:ac:1d:44:14:c2:f5:0b:
         6c:b7:a7:b9:a4:09:89:38:b4:02:2b:7a:49:51:40:2e:4c:7c:
         53:7b:07:d8:6e:1a:e3:ad:10:ba:7f:19:31:db:ae:25:b2:e1:
         0e:5d:92:0e:f5:d0:81:d4:74:4a:58:1f:ed:aa:c6:d8:82:80:
         a7:d3:ef:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:04 2026 by rpki-client