Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File:                     dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier:          wfnqHcyAMeKxBKBMy7j1QaKDdylp1tsqlQhctnpkdcI=
Subject key identifier:   DC:12:1D:8B:2B:78:CD:82:14:D0:6A:3D:32:7E:74:65:B9:BE:58:0E
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer:       /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial:       01A10F5F6F8F64A2C79883A11C2AD95C26E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number:          17C4
Signing time:             Tue 06 Oct 2026 04:01:15 +0000
Manifest this update:     Tue 06 Oct 2026 04:01:15 +0000
Manifest next update:     Wed 07 Oct 2026 04:01:15 +0000
Files and hashes:         1: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: 1V9AM9S2eiebluk8Bn8ZPrFj085LBBhssDSgQMq6YAc=)
                          2: h8XV-KgY396KZBJ7Bi9YlZn3ShM.roa (hash: fluQLEMS1tYgpv9diRyw7o5a3GxgE3HkE4V51yJi7a8=)
                          3: oo1W6F0elMF6_CiE6UvVXxLai4o.roa (hash: t1F5I9ggDgCDZTVdA+hfkYMiN/rTAkrjwkTHtKs69BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:5f:6f:8f:64:a2:c7:98:83:a1:1c:2a:d9:5c:26:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
        Validity
            Not Before: Oct  6 04:01:15 2026 GMT
            Not After : Oct  7 04:01:15 2026 GMT
        Subject: CN=dc121d8b2b78cd8214d06a3d327e7465b9be580e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4f:1c:8a:6a:35:6f:18:92:a7:76:63:59:19:
                    95:10:57:bc:0e:98:91:20:26:1a:ba:24:c1:94:34:
                    08:6c:57:23:f5:78:84:9a:6a:96:92:f5:0e:7f:9f:
                    6b:c6:3b:52:07:42:ac:07:ad:27:7d:17:07:bf:45:
                    ea:e1:b1:c6:2e:b4:bb:d2:b1:2b:67:c0:14:aa:0e:
                    43:db:15:64:22:19:28:ac:17:42:a9:07:a4:64:51:
                    5b:bb:fc:9a:63:21:7e:ff:75:2e:9b:b9:56:b1:67:
                    ed:db:30:3a:8f:7c:7a:dd:b8:c8:99:91:36:0a:e0:
                    a1:a3:c4:f5:12:c4:08:1c:09:57:49:97:01:e5:7b:
                    fe:93:0f:59:27:4e:f6:7b:5f:ad:0a:01:10:df:ca:
                    30:75:5e:f7:33:83:94:69:b8:97:5d:ac:b2:97:94:
                    1a:34:9a:a2:16:08:8e:7f:2c:2c:b7:06:57:60:cb:
                    0a:ca:1d:ec:d7:63:5c:a2:60:20:7d:be:6d:fc:0f:
                    c0:7f:41:5a:8f:b2:91:fb:82:e8:ca:16:e0:db:1d:
                    19:f7:96:07:80:dc:b6:b7:3d:7e:d8:48:09:65:29:
                    26:75:b9:c6:e0:5e:92:f9:a5:48:5a:e5:c3:64:9f:
                    a0:2a:08:12:1e:32:d7:d1:0b:8c:a2:08:1c:88:20:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:12:1D:8B:2B:78:CD:82:14:D0:6A:3D:32:7E:74:65:B9:BE:58:0E
            X509v3 Authority Key Identifier:
                keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0c:91:a5:88:a2:5d:62:a6:a2:0f:45:38:5f:4e:51:f6:3f:
         11:ff:e2:bf:de:5b:7e:fb:83:5d:47:2b:c1:b8:20:a2:a5:3f:
         ae:41:80:86:e8:11:c7:b6:0a:a3:30:58:c7:31:1e:eb:8b:f1:
         35:3d:45:0e:07:0d:5f:79:65:41:7e:55:d7:0f:77:b5:82:c4:
         55:b6:17:bc:e8:d9:b6:ce:9d:3e:a9:3e:43:18:39:fb:cc:d5:
         11:bb:a1:11:a4:03:f9:3d:f2:94:c1:5b:26:76:de:be:4c:e3:
         8f:be:36:42:c8:7a:a2:b6:51:ee:67:2c:25:ea:a4:7b:34:62:
         c1:7e:5d:7b:13:11:43:9f:b1:12:c7:39:e6:1b:f9:66:2c:8f:
         46:2e:75:2b:dc:d6:ee:82:2e:d0:d9:ab:da:1f:ce:e9:47:9e:
         6d:8e:4e:c0:59:58:f0:c4:5e:f4:0f:c8:b6:7b:99:14:02:43:
         6a:6e:a0:35:5a:3e:e2:e0:64:87:6f:97:6e:0c:f2:fc:4e:de:
         32:62:1d:23:55:df:fa:96:b8:bd:67:37:9b:19:8d:a2:8d:b7:
         b4:ea:84:78:4f:ae:ff:7d:d8:d1:18:a0:74:7b:23:ff:a2:ce:
         2e:91:c9:f6:6e:ed:b9:30:ef:45:a7:2a:2d:4c:1b:5d:69:7b:
         ef:74:6a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:58:49 2026 by rpki-client