Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
File:                     0coacGq8--G4WGUjjYQ17jPnWCA.mft (raw, json)
Hash identifier:          eTB45un9VbJiCuM555zsuZRuJvsp+Ww5qWvgX2EDKqk=
Subject key identifier:   63:8F:80:B0:FA:7A:3A:10:D9:09:BD:5C:38:DA:CB:BC:4A:1C:BB:30
Authority key identifier: D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20
Certificate issuer:       /CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
Certificate serial:       019D98BD48F98D13EFB0872D1430B7C7A2B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
Manifest number:          0E41
Signing time:             Fri 17 Apr 2026 00:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 00:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 00:00:34 +0000
Files and hashes:         1: 0coacGq8--G4WGUjjYQ17jPnWCA.crl (hash: wsEY+iqQRwLRqshE4KEuXPehYCNFkpLDHunBo4DbQ2U=)
                          2: CbSAZ2938GQUhDueZhU_EovPrRs.roa (hash: 6M1E+PLNKOTQuQ1MVWROY7w7nRYiQzLtRbBBTuCKxio=)
                          3: mk-o5pzcFZ829W_PREQ8FPPRzlM.roa (hash: /akxso2djAilBz3nuuXvJ6Kc63SQJSYVStzj36gpVWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:48:f9:8d:13:ef:b0:87:2d:14:30:b7:c7:a2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ca1a706abcfbe1b85865238d8435ee33e75820
        Validity
            Not Before: Apr 17 00:00:34 2026 GMT
            Not After : Apr 18 00:00:34 2026 GMT
        Subject: CN=638f80b0fa7a3a10d909bd5c38dacbbc4a1cbb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:fa:d3:e6:e1:28:fe:5b:31:57:e0:cf:f6:
                    65:8e:bf:11:27:e4:97:58:89:c5:d2:a1:1c:de:a4:
                    63:56:45:d4:74:7a:f4:f2:ad:c0:21:13:7b:cf:a0:
                    20:a5:b4:54:7b:3f:a3:43:d8:51:7f:e1:2d:2d:d7:
                    14:7c:34:4e:3b:1d:28:e9:ef:50:12:c8:bf:9f:2c:
                    21:41:1d:48:40:33:f8:f2:67:7f:5c:a9:d1:9e:08:
                    e6:e4:0a:3d:1a:fa:56:57:51:e1:52:96:7e:b1:b1:
                    f4:69:37:33:cf:b0:00:f4:2d:e1:e9:6d:f8:6d:90:
                    fc:89:bc:0d:38:8e:cc:0a:7b:c6:7a:f2:fa:36:18:
                    b0:a6:39:11:21:5e:d3:2d:c8:1f:58:41:80:e1:c0:
                    1c:5f:a4:40:7c:88:a2:6d:f9:5e:f5:f0:c2:ec:88:
                    db:1d:0c:52:dc:93:6b:4e:b4:ba:5e:de:27:91:5b:
                    a9:9a:43:c3:0f:a8:80:f9:67:9a:e7:e3:39:7c:58:
                    77:62:d0:cf:be:d6:bc:b4:98:33:1b:2e:40:7d:c7:
                    75:09:60:97:bc:8a:b2:7d:a3:86:af:ef:82:3a:32:
                    0c:1b:73:3f:d2:8d:0e:ba:20:2e:a4:3b:91:af:bc:
                    12:3f:ac:8e:6e:f9:ca:1e:73:ca:c6:4c:1f:dd:eb:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:8F:80:B0:FA:7A:3A:10:D9:09:BD:5C:38:DA:CB:BC:4A:1C:BB:30
            X509v3 Authority Key Identifier:
                keyid:D1:CA:1A:70:6A:BC:FB:E1:B8:58:65:23:8D:84:35:EE:33:E7:58:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0coacGq8--G4WGUjjYQ17jPnWCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cf79a3-f3cc-4d5a-9672-e8f7fd3a4078/1/0coacGq8--G4WGUjjYQ17jPnWCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:93:85:b4:ae:10:16:49:65:f7:bd:ec:ff:7c:28:0b:22:e0:
         fb:cb:c6:17:ef:75:12:a8:5f:c6:ea:75:f0:d2:ce:ad:b9:f8:
         c6:df:01:52:8d:cf:ae:c6:2b:71:b5:01:f5:dd:72:10:a8:b1:
         15:28:d4:66:e6:a3:b3:dc:af:4f:61:9f:14:d9:62:5c:7f:f0:
         d2:0d:6d:09:e0:c0:88:2f:52:25:4b:37:40:da:75:d0:f2:07:
         20:eb:b0:57:41:36:6e:24:a1:65:52:3a:6f:72:bb:91:1f:83:
         b0:22:97:75:62:bd:64:1c:05:fd:b1:53:0b:1a:2d:86:bf:37:
         86:b9:f8:7d:8d:8f:72:22:71:26:f9:96:ae:44:b1:ad:56:7c:
         d9:77:20:e4:3f:1a:32:b1:2b:08:76:45:8b:94:7c:c2:43:84:
         95:55:bc:34:97:21:a4:88:3a:61:bf:06:20:a4:0a:27:19:42:
         45:18:17:1c:92:b1:2d:21:6f:3a:57:0d:8a:a0:86:b1:f4:80:
         5c:0d:ae:92:2b:3b:cf:fe:a3:8e:30:06:bd:ef:c9:93:28:16:
         33:b0:15:5e:58:bc:c0:74:03:de:01:e0:14:d3:df:4a:97:86:
         b5:b3:7c:64:4b:ff:49:36:53:3d:4a:11:28:b4:9f:54:b0:0b:
         7a:f9:fa:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:30:12 2026 by rpki-client