Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File:                     dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier:          oI7R1S33xmPatsJQxDo9IFlUiudup5MFWEUK2agcWNs=
Subject key identifier:   FD:EB:F5:B7:59:44:F1:75:EE:27:99:C7:ED:A0:DE:06:08:01:F4:8D
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer:       /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial:       019D97063BF86C51B52BB18C94AE3EAAEA4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number:          15F8
Signing time:             Thu 16 Apr 2026 16:01:01 +0000
Manifest this update:     Thu 16 Apr 2026 16:01:01 +0000
Manifest next update:     Fri 17 Apr 2026 16:01:01 +0000
Files and hashes:         1: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: o34s4ypbwRzc0IelR7JxD5p4FXczFcfrDePjAYtaP3g=)
                          2: h8XV-KgY396KZBJ7Bi9YlZn3ShM.roa (hash: fluQLEMS1tYgpv9diRyw7o5a3GxgE3HkE4V51yJi7a8=)
                          3: oo1W6F0elMF6_CiE6UvVXxLai4o.roa (hash: t1F5I9ggDgCDZTVdA+hfkYMiN/rTAkrjwkTHtKs69BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 16:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:06:3b:f8:6c:51:b5:2b:b1:8c:94:ae:3e:aa:ea:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
        Validity
            Not Before: Apr 16 16:01:01 2026 GMT
            Not After : Apr 17 16:01:01 2026 GMT
        Subject: CN=fdebf5b75944f175ee2799c7eda0de060801f48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ba:a8:21:87:21:f5:03:3b:16:58:0c:94:14:
                    94:b9:37:30:12:de:11:23:5f:a0:1d:38:ea:3d:69:
                    22:4e:62:5a:96:1f:ef:91:98:05:e2:0f:a8:c3:17:
                    c6:ee:0c:c8:83:56:63:13:78:b4:f0:28:9b:9c:a0:
                    fb:85:08:82:cb:a9:e9:0c:51:3c:d2:ca:16:ae:b1:
                    99:b1:4f:9c:e0:ec:4d:b4:a6:83:c2:f3:bc:2b:59:
                    62:58:10:3a:37:e0:15:73:c3:88:eb:4a:0a:4b:0a:
                    49:7f:e6:6a:a4:cb:19:08:44:bf:8b:f2:38:2e:c1:
                    ba:44:ab:c9:d0:8e:8b:c4:58:ef:81:80:46:5d:b2:
                    80:8a:1b:cb:39:9d:d9:ea:93:0d:01:7e:3e:bb:4e:
                    c0:bf:19:cc:98:be:38:b2:70:96:ee:56:a1:97:4c:
                    1a:21:ba:6d:e2:6e:fe:1a:eb:21:b3:63:02:99:d7:
                    68:3e:fa:b6:f1:02:fc:6f:80:4f:03:36:02:c9:84:
                    72:76:48:fb:dd:6d:22:47:32:a5:18:eb:32:1f:8a:
                    19:43:c8:82:fb:44:1f:0c:d8:35:42:ec:63:fc:3e:
                    02:f6:c4:9d:80:fb:7d:5a:cf:3a:d9:31:cf:d2:35:
                    a3:04:12:f7:20:a0:30:eb:8b:0c:ce:bc:ce:a0:72:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:EB:F5:B7:59:44:F1:75:EE:27:99:C7:ED:A0:DE:06:08:01:F4:8D
            X509v3 Authority Key Identifier:
                keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:71:51:d1:29:b6:b7:a4:f9:76:09:43:bf:22:8f:e2:67:30:
         24:7b:26:19:26:e4:fa:42:e6:c6:63:97:a1:2d:ef:a2:0d:fb:
         82:29:60:88:ed:fd:19:7f:69:a1:4c:80:81:a5:90:a1:0f:b2:
         1d:bd:17:17:d7:0d:e2:5f:16:f3:9c:70:f1:98:3b:64:9a:14:
         34:56:04:a9:52:c6:e6:c9:0d:95:1b:0b:ea:17:0c:08:03:b9:
         9e:38:3e:7e:d6:de:5a:bd:e5:f2:25:ef:70:4f:ef:ce:c2:45:
         63:33:b9:de:38:ee:29:14:a7:39:e9:26:1a:0c:72:3f:d4:bb:
         01:6e:25:45:e7:f6:59:1e:23:9c:9f:d5:eb:87:bc:f8:dc:83:
         67:63:3c:4e:c9:57:4f:cc:56:7a:8a:97:d8:b4:3f:33:b3:e9:
         76:d0:ae:75:ad:87:91:97:67:92:33:45:29:34:10:35:5a:cc:
         2c:4c:37:56:eb:cd:c8:13:e1:99:e2:2e:82:7f:01:d3:94:a0:
         53:a2:8a:8b:d1:2d:ef:09:c9:59:25:6c:3a:43:e8:10:e8:16:
         12:31:a3:e8:ec:02:22:f4:9b:73:2d:84:d3:bc:eb:e0:d9:62:
         fc:fd:9d:10:9b:42:db:16:b6:9c:91:f6:6e:ac:9d:a7:a9:af:
         5c:0c:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 00:04:02 2026 by rpki-client