Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
File:                     dvcgGLQorSicn4WX43vKYUqhCaA.mft (raw, json)
Hash identifier:          uVVnCETt8BM0mmPmL8skQOCj8hDmbR00/17I8znwjYg=
Subject key identifier:   4C:0C:2F:EF:03:F2:2E:B3:4A:BC:8A:76:11:5F:93:27:5F:7F:68:2A
Authority key identifier: 76:F7:20:18:B4:28:AD:28:9C:9F:85:97:E3:7B:CA:61:4A:A1:09:A0
Certificate issuer:       /CN=76f72018b428ad289c9f8597e37bca614aa109a0
Certificate serial:       01A14BAB76F70BD84678382D18000E7405CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
Manifest number:          0125
Signing time:             Sat 17 Oct 2026 21:01:30 +0000
Manifest this update:     Sat 17 Oct 2026 21:01:30 +0000
Manifest next update:     Sun 18 Oct 2026 21:01:30 +0000
Files and hashes:         1: dvcgGLQorSicn4WX43vKYUqhCaA.crl (hash: WyCRp251/1jbi/eAGCjt1fd4dgsTrLkfaLNLgDLVfbo=)
                          2: xs3iSBh200_EoCetOIrLYygCcuQ.roa (hash: NQKjQyiCL3pt+LnR0jXNZKqsq984PZkORPtaWm+NSuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 21:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:ab:76:f7:0b:d8:46:78:38:2d:18:00:0e:74:05:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f72018b428ad289c9f8597e37bca614aa109a0
        Validity
            Not Before: Oct 17 21:01:30 2026 GMT
            Not After : Oct 18 21:01:30 2026 GMT
        Subject: CN=4c0c2fef03f22eb34abc8a76115f93275f7f682a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d6:7c:bd:0c:23:dc:ef:cd:22:46:c7:47:b9:
                    31:ba:50:32:17:f3:44:80:3c:70:e2:98:fa:6e:e3:
                    8f:a6:6e:b8:b0:23:e4:be:aa:80:fa:24:f0:35:c7:
                    f1:4e:7e:60:eb:54:0e:9f:14:ee:5a:39:2c:cd:0f:
                    31:83:b3:0b:44:89:f0:36:92:66:cb:68:5a:6f:ad:
                    cd:af:e2:e6:36:36:83:a9:05:bd:d7:66:94:1f:70:
                    18:e9:7a:6d:8d:5f:d0:b6:f8:7e:b8:be:4c:ca:23:
                    41:b7:15:cc:f4:7a:e7:46:9e:e4:c4:97:aa:95:b3:
                    6f:19:22:98:8b:27:cd:3a:9f:9f:2f:ad:f0:7d:60:
                    1b:b2:72:f1:fa:13:d9:8b:16:58:2c:f7:5b:64:ad:
                    00:45:fe:1c:2e:fc:5b:08:74:70:88:b8:e4:cc:5b:
                    d5:62:ac:d8:55:45:d6:76:43:17:1b:dc:eb:38:c0:
                    34:20:7f:5a:34:e9:c6:db:e3:db:45:20:cf:1b:28:
                    89:65:53:11:ee:f6:ce:77:7b:27:bf:a3:14:4c:d3:
                    fc:80:f2:c7:43:cf:a7:3a:b6:d7:ce:0f:88:43:99:
                    55:74:98:22:65:c3:16:dd:10:53:4e:41:b2:b2:80:
                    3f:38:73:27:2e:b9:e7:29:75:f7:46:62:2a:cd:6b:
                    e4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0C:2F:EF:03:F2:2E:B3:4A:BC:8A:76:11:5F:93:27:5F:7F:68:2A
            X509v3 Authority Key Identifier:
                keyid:76:F7:20:18:B4:28:AD:28:9C:9F:85:97:E3:7B:CA:61:4A:A1:09:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:3f:1c:13:43:8d:2f:78:9b:69:b7:a4:11:14:5e:2d:ca:f3:
         28:ac:2d:c0:c4:de:53:91:80:68:f9:a6:98:0b:9a:bb:df:6e:
         0a:51:4e:56:50:96:4d:18:70:ac:07:c3:f9:f9:08:cd:f9:97:
         e8:3b:96:6b:47:ae:f1:8e:e9:6d:81:8e:08:f0:df:26:1d:c0:
         02:f1:32:a9:84:98:a3:16:fe:b4:03:4d:1c:0d:2c:ce:4f:43:
         46:a0:ba:d3:6e:cb:2f:2a:45:0a:38:4a:2e:97:28:21:18:ab:
         fb:a7:aa:79:25:e0:ee:c5:7d:be:8a:0b:d9:3f:09:10:46:4c:
         af:6f:32:5f:f8:b2:63:eb:c1:cf:75:0e:32:4c:fd:3f:26:94:
         19:e2:99:c1:2b:16:cd:5f:a0:f9:d9:97:ec:f7:dc:0e:4c:c8:
         a6:d3:4a:55:85:68:09:7c:1b:79:8a:f2:be:ac:7a:f7:b1:9a:
         cd:95:9d:6a:f5:d1:e1:36:48:e1:63:e7:9f:94:97:ab:db:3d:
         a1:d3:58:73:7e:bc:df:84:41:c4:7e:37:b3:3a:25:57:da:ee:
         73:bc:86:71:77:e9:f6:74:90:1e:f8:df:b2:c2:19:2b:71:54:
         fa:d9:6f:24:89:fd:c5:3e:dc:4a:57:9d:be:6e:90:2e:e6:97:
         da:84:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:20 2026 by rpki-client