Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File:                     dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier:          ZMlA86no843+LM2ci+ucKKFnNJPoirmW7FNMbluhc10=
Subject key identifier:   74:23:8A:42:45:6B:B5:B3:EC:93:E8:16:4D:A6:93:7F:53:CA:FC:EA
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer:       /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial:       01A01A1BEA3CD441B54EB97959F29DEDADD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number:          1745
Signing time:             Wed 19 Aug 2026 13:00:32 +0000
Manifest this update:     Wed 19 Aug 2026 13:00:32 +0000
Manifest next update:     Thu 20 Aug 2026 13:00:32 +0000
Files and hashes:         1: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: PmUhSGabS0IwypkDGiWjE+/P1saaKiKsbr0V1iv82XA=)
                          2: h8XV-KgY396KZBJ7Bi9YlZn3ShM.roa (hash: fluQLEMS1tYgpv9diRyw7o5a3GxgE3HkE4V51yJi7a8=)
                          3: oo1W6F0elMF6_CiE6UvVXxLai4o.roa (hash: t1F5I9ggDgCDZTVdA+hfkYMiN/rTAkrjwkTHtKs69BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 20 Aug 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:1a:1b:ea:3c:d4:41:b5:4e:b9:79:59:f2:9d:ed:ad:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
        Validity
            Not Before: Aug 19 13:00:32 2026 GMT
            Not After : Aug 20 13:00:32 2026 GMT
        Subject: CN=74238a42456bb5b3ec93e8164da6937f53cafcea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:18:3a:80:78:e2:e1:37:bd:d5:12:f8:b6:
                    0e:d4:ab:9b:b4:e7:d7:0e:ac:cc:27:3b:16:a1:7a:
                    7b:60:7f:86:82:be:ee:04:95:2b:d0:c6:2a:9b:53:
                    ad:64:64:da:b3:58:67:f1:aa:03:9e:2e:e5:c0:0d:
                    4b:b2:a1:a5:ee:ec:91:33:83:6a:f4:99:06:7a:de:
                    92:f9:50:51:8c:00:2a:06:a8:61:29:31:54:48:63:
                    f1:3a:d1:53:fa:72:7f:12:e1:71:5c:4e:8e:5a:bf:
                    c0:be:7d:f5:7f:69:b3:be:22:9e:08:8f:67:9e:ad:
                    9e:9c:9d:fa:30:c5:a5:be:7c:c7:3d:64:2f:24:79:
                    fa:39:1e:13:e5:a3:9e:aa:9a:c9:7a:26:28:35:e8:
                    48:d1:f6:e9:2b:6f:fb:e9:36:02:23:3a:1c:5d:b7:
                    b9:8f:84:1d:e7:54:23:7f:45:ee:ec:6d:30:e6:9e:
                    ea:11:d3:d1:17:71:4e:fb:14:87:0b:37:43:77:42:
                    fb:07:9c:4c:f0:7b:54:0d:e0:c7:32:6b:eb:1d:6c:
                    d8:9e:8b:00:f8:02:da:b1:00:bf:04:e7:b9:5c:c6:
                    7b:df:43:89:a3:ff:5e:1d:58:d3:2d:a4:75:dc:63:
                    7f:a2:0b:3b:a7:2a:c3:d5:00:1a:4a:05:a1:cb:94:
                    7f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:23:8A:42:45:6B:B5:B3:EC:93:E8:16:4D:A6:93:7F:53:CA:FC:EA
            X509v3 Authority Key Identifier:
                keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0a:a0:83:f7:be:65:3e:04:fd:95:9c:e1:5a:b5:0d:04:91:
         11:02:b8:73:58:1a:68:a2:e4:1f:d2:90:ed:5e:1b:98:71:c0:
         2f:72:84:ec:16:99:a7:1f:10:f2:d8:23:eb:c7:c4:2a:93:4f:
         00:69:ea:04:2a:46:95:f0:e0:56:3f:d0:88:c7:5d:b8:ee:05:
         4d:42:0a:01:cc:2b:e4:06:7a:d2:8f:fb:8c:1e:af:bf:f6:43:
         39:cb:fe:f3:50:bd:35:67:5c:97:52:d1:fc:cf:8d:e2:e6:8e:
         70:25:5c:7f:06:0b:c7:d4:43:1c:2f:b2:1f:5c:98:01:f8:23:
         b8:bb:1e:ea:69:37:db:1f:6b:58:b3:08:f6:4f:a7:cb:30:7e:
         c2:bc:a7:67:22:bb:13:ff:48:b9:ff:ec:ad:ba:fe:53:a2:25:
         18:e3:9f:8e:d4:c9:23:bd:97:4b:24:67:fa:3a:4b:4f:93:1c:
         70:9d:93:9b:79:d1:73:1c:ff:ab:53:31:13:13:ae:aa:3e:6d:
         a2:d7:73:6d:1e:f1:0d:a6:a8:b8:7e:10:59:c2:8e:25:f4:42:
         a1:1b:c0:fe:1d:3f:19:98:c2:55:ae:8b:a4:63:14:98:fb:14:
         85:90:05:70:4a:97:e2:78:70:fe:bc:4b:23:7d:c0:83:49:1b:
         3f:7e:93:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 21:41:10 2026 by rpki-client