Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
File:                     DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json)
Hash identifier:          coT3YdmMIZifgfWYLo54jdtzXIxh/FNLgH8TeHKCk2s=
Subject key identifier:   18:FA:E0:5A:ED:CD:77:95:AE:81:2D:E3:87:35:F7:96:E0:10:2D:E6
Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0
Certificate issuer:       /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
Certificate serial:       01A111BBEDD8BD3A0A213D2684B5CF677F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
Manifest number:          1754
Signing time:             Tue 06 Oct 2026 15:01:30 +0000
Manifest this update:     Tue 06 Oct 2026 15:01:30 +0000
Manifest next update:     Wed 07 Oct 2026 15:01:30 +0000
Files and hashes:         1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: nRUsT8To2SERLCEJceIZRK/rxnyzl8OOa4xJdsRb7Xw=)
                          2: Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa (hash: G8coFslA7SGGsh7OBwFjSWY/mTtlNbU81EsuVTVQlk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:bb:ed:d8:bd:3a:0a:21:3d:26:84:b5:cf:67:7f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0
        Validity
            Not Before: Oct  6 15:01:30 2026 GMT
            Not After : Oct  7 15:01:30 2026 GMT
        Subject: CN=18fae05aedcd7795ae812de38735f796e0102de6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:13:26:4e:b2:78:59:bf:9c:fe:53:f4:0a:
                    a2:6b:3c:c6:18:93:40:01:ec:76:a2:0a:82:b6:da:
                    03:b5:85:5d:f7:04:28:85:c2:02:4a:eb:db:c6:9c:
                    f4:9e:4f:55:2b:f0:13:dc:ad:2a:14:3a:5a:8c:78:
                    f0:ad:22:af:a0:70:23:33:c1:b2:f3:37:64:a8:87:
                    a6:27:d2:53:29:7c:37:94:44:a8:97:c8:83:11:fd:
                    85:d2:5d:27:15:12:2c:c8:5b:cb:24:cb:d4:61:36:
                    97:25:93:21:c6:2b:9a:66:51:fd:d7:9b:47:a2:2d:
                    1c:18:b3:a3:49:df:15:61:ac:7d:72:28:09:85:64:
                    01:b8:34:0d:7e:a6:40:55:5f:e1:9a:e3:27:6a:48:
                    b6:a1:73:42:9c:7f:73:f3:19:b6:20:75:34:51:03:
                    c9:f0:f0:33:c4:1c:ef:d1:b5:5e:0a:e9:8e:13:86:
                    97:cb:61:5e:4a:f7:53:ad:36:b5:e5:bf:c0:84:d2:
                    30:5b:bc:a7:76:63:5c:c0:4e:3e:56:19:6f:40:eb:
                    e5:0a:00:41:32:ab:c0:93:ec:51:9a:4c:24:6b:58:
                    17:82:fe:02:be:6a:36:62:f6:53:c2:5a:8c:f5:bc:
                    16:38:67:c3:52:51:20:e2:a9:52:7e:d3:1c:77:1b:
                    b6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:FA:E0:5A:ED:CD:77:95:AE:81:2D:E3:87:35:F7:96:E0:10:2D:E6
            X509v3 Authority Key Identifier:
                keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:78:bc:e6:0f:d4:79:27:3f:6e:70:ff:63:3c:cf:1c:50:e4:
         37:a5:20:df:d0:c4:57:e8:74:da:2d:97:aa:36:d2:21:36:35:
         49:19:65:c1:10:ae:49:07:34:aa:7a:da:72:46:42:f8:49:45:
         36:cc:db:57:23:6a:52:fa:b5:0c:48:5d:53:83:7c:58:db:e4:
         5e:03:51:06:1a:05:76:0d:35:03:32:7b:1d:05:cd:0a:4e:eb:
         d1:34:cd:2a:d7:e6:d7:64:f9:9e:5b:de:ad:82:b1:41:c3:81:
         e8:fb:7c:e3:fa:d7:8b:8a:9c:f3:1b:09:d7:ed:b3:69:61:21:
         7f:77:af:1c:7e:0a:b1:84:6d:35:2d:fd:5d:96:de:b1:08:86:
         f7:25:1e:d6:0c:70:6c:82:47:63:6a:e5:15:36:45:38:8f:9e:
         6c:74:ca:ff:e2:ad:7f:22:6a:54:39:83:56:7b:85:e3:ee:b3:
         04:af:0e:42:c9:18:f8:16:39:36:e8:d3:70:a9:2f:71:d5:98:
         2a:73:d9:e0:77:73:55:a1:c5:86:94:60:86:cf:e0:f5:62:e6:
         80:bf:2a:61:75:65:d5:a9:84:ed:45:0f:f1:24:4f:aa:b1:9f:
         21:14:34:e7:34:a3:0d:17:c2:ee:62:17:54:01:1a:f9:4f:9d:
         1e:a4:9a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:17:49 2026 by rpki-client