Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
File:                     dvcgGLQorSicn4WX43vKYUqhCaA.mft (raw, json)
Hash identifier:          AdkVFDoD6A2k0hSBb4tP5s/ymJVdM00fiL+5k9V1LHg=
Subject key identifier:   C4:55:D8:53:07:D9:81:C7:82:89:C3:AA:08:DB:4A:86:0D:BD:D7:A1
Authority key identifier: 76:F7:20:18:B4:28:AD:28:9C:9F:85:97:E3:7B:CA:61:4A:A1:09:A0
Certificate issuer:       /CN=76f72018b428ad289c9f8597e37bca614aa109a0
Certificate serial:       01A12EB40A7CA70F72E2658183A951631D52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
Manifest number:          0116
Signing time:             Mon 12 Oct 2026 06:01:53 +0000
Manifest this update:     Mon 12 Oct 2026 06:01:53 +0000
Manifest next update:     Tue 13 Oct 2026 06:01:53 +0000
Files and hashes:         1: dvcgGLQorSicn4WX43vKYUqhCaA.crl (hash: ItxraQ//XVVpEDFoY4u9adVzZJAbn9aWGy1/hLZ/ZBc=)
                          2: xs3iSBh200_EoCetOIrLYygCcuQ.roa (hash: NQKjQyiCL3pt+LnR0jXNZKqsq984PZkORPtaWm+NSuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 06:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:b4:0a:7c:a7:0f:72:e2:65:81:83:a9:51:63:1d:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76f72018b428ad289c9f8597e37bca614aa109a0
        Validity
            Not Before: Oct 12 06:01:53 2026 GMT
            Not After : Oct 13 06:01:53 2026 GMT
        Subject: CN=c455d85307d981c78289c3aa08db4a860dbdd7a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bb:18:7f:a4:dd:8c:fa:0f:56:e3:25:ba:df:
                    30:5c:6c:f9:e3:e6:24:e3:ff:ad:d4:d7:6b:3c:64:
                    70:11:82:3e:1a:4d:80:0a:09:81:99:9b:9f:ce:03:
                    ee:55:4b:6c:42:35:9e:5e:b6:61:6b:74:41:a4:fd:
                    35:22:ae:a3:4a:a3:aa:7b:cd:ab:b5:2c:46:70:31:
                    5d:96:d9:6e:a6:44:43:f6:93:be:48:f0:3c:c8:08:
                    5b:7e:87:a0:66:0c:85:6c:65:f9:a2:69:4a:13:ea:
                    85:7a:16:22:0d:65:7e:8d:cb:f2:af:2b:6f:0a:6b:
                    63:73:59:b0:e8:8a:88:a8:8c:c3:92:4e:86:fd:47:
                    3a:21:15:8c:46:5a:d0:2b:da:6f:ed:88:4c:dc:73:
                    57:9a:2a:ce:c1:0d:92:50:03:01:98:56:58:02:35:
                    06:ee:e2:e7:fc:f1:90:80:d3:6a:ba:6f:5d:4a:cd:
                    4d:d6:09:e5:e4:1d:91:4b:63:91:c9:51:d8:53:92:
                    93:4a:3e:83:06:db:6e:2b:03:f2:c7:63:8e:7d:52:
                    c7:03:59:b0:d8:b7:80:16:6f:89:80:b7:b0:83:09:
                    95:5b:2f:00:68:45:d7:4e:19:4e:85:a8:26:93:9a:
                    1c:3b:9d:49:40:ad:8d:9b:02:1e:51:62:8f:a6:fe:
                    26:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:55:D8:53:07:D9:81:C7:82:89:C3:AA:08:DB:4A:86:0D:BD:D7:A1
            X509v3 Authority Key Identifier:
                keyid:76:F7:20:18:B4:28:AD:28:9C:9F:85:97:E3:7B:CA:61:4A:A1:09:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dvcgGLQorSicn4WX43vKYUqhCaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/21bdbb-856f-41dd-aad9-066ddf32bfcc/1/dvcgGLQorSicn4WX43vKYUqhCaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:d6:2e:e5:c2:b9:0d:03:c3:42:71:7d:c9:e3:45:67:bf:7d:
         b4:8d:36:ad:6d:ce:d5:23:a3:ee:69:15:3f:bc:10:c7:78:5a:
         74:37:fe:f8:48:10:25:68:1d:ac:de:6e:0c:06:dd:d1:72:7f:
         56:2e:05:6a:b4:ae:5f:21:18:74:85:34:44:3e:2d:d2:61:1a:
         ce:ed:09:cf:48:47:b0:f2:01:63:bb:5e:0f:16:fe:30:5b:78:
         13:75:95:f2:6f:81:99:a5:a8:92:35:68:d0:af:30:60:18:d0:
         ee:6d:94:1c:74:32:13:68:d4:d6:be:f8:b8:b1:b6:c1:23:2d:
         d1:00:42:a7:ca:53:f2:20:11:e2:dc:d7:c5:bc:59:58:68:94:
         60:f1:28:dc:90:90:82:d7:a9:27:f1:91:41:f5:d6:7c:f7:d6:
         cf:45:09:e2:11:62:ea:b1:fd:f2:b4:eb:37:8f:9d:2d:aa:c9:
         ef:95:73:cc:eb:9e:c1:ca:7f:ab:50:9a:88:f5:f3:c9:da:cb:
         5d:0e:24:61:11:73:b2:6a:6e:fa:63:6b:43:21:7b:53:e0:e1:
         a8:b3:c9:5f:5b:5f:c1:c4:3c:56:cd:38:7a:e5:73:fa:23:8f:
         b1:ba:93:73:02:ad:f3:6d:9d:db:95:34:0b:bc:63:3e:05:c7:
         c6:08:2e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 12:18:58 2026 by rpki-client