Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File:                     5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier:          WxmV+PDayKi4VoHc/T9q7wFzKNUUSjGcRtRYV30gMe4=
Subject key identifier:   5C:1C:E8:8D:18:EC:BA:D9:C8:FB:05:60:33:43:78:6D:E6:EA:C6:65
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer:       /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial:       019D25F22047A6BCDB8BFBCD2D79497B6443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number:          1366
Signing time:             Wed 25 Mar 2026 17:01:58 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:58 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:58 +0000
Files and hashes:         1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: TrkI8MTkzP7umRqd8ZB6hc7riQpkZ8Nykn7Fq5gVDwQ=)
                          2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=)
                          3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=)
                          4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 17:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f2:20:47:a6:bc:db:8b:fb:cd:2d:79:49:7b:64:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
        Validity
            Not Before: Mar 25 17:01:58 2026 GMT
            Not After : Mar 26 17:01:58 2026 GMT
        Subject: CN=5c1ce88d18ecbad9c8fb05603343786de6eac665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:f6:ec:27:e3:48:f9:6d:3c:2b:68:7f:89:
                    8a:5b:5f:de:ca:ba:f8:6a:70:2f:b6:ff:f3:37:7b:
                    a1:ba:bb:0c:1d:d4:ba:cd:b2:cd:c5:3c:54:9f:a2:
                    0e:88:2b:bf:f0:f5:0d:9e:35:b1:73:30:4e:5f:e2:
                    05:14:87:95:29:15:f8:3d:e0:33:f1:e5:16:59:91:
                    6f:81:47:69:38:e3:a1:2d:86:99:8f:eb:a0:1c:a3:
                    a0:86:61:16:d1:86:50:68:18:24:09:f5:6e:4c:02:
                    68:ff:82:40:54:84:f9:52:6c:03:3d:73:18:fe:b8:
                    c8:a1:0a:f7:c2:c7:71:73:9f:c4:ba:e5:3e:a4:38:
                    32:9b:c0:6d:32:e0:f0:e9:a1:af:28:bb:21:1f:85:
                    db:03:ae:06:38:aa:87:43:62:52:2f:dc:22:ee:f0:
                    eb:69:1e:31:6b:9f:a0:84:aa:27:d0:ac:04:02:5d:
                    27:75:9e:a5:b8:b1:f7:30:73:00:b8:dd:76:a4:82:
                    3d:66:e6:c8:4f:19:10:06:b9:16:c4:c2:ae:3c:45:
                    b7:ae:ef:8d:7f:61:40:f1:82:d7:5a:e3:fe:1b:09:
                    dc:2a:5f:32:aa:7b:72:a2:15:6e:48:16:53:c8:94:
                    a8:2d:c2:92:f7:99:7d:20:ba:70:01:e4:d0:42:5c:
                    ba:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:1C:E8:8D:18:EC:BA:D9:C8:FB:05:60:33:43:78:6D:E6:EA:C6:65
            X509v3 Authority Key Identifier:
                keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:1b:0e:82:5a:4a:81:a6:76:4b:27:66:bb:c8:34:13:16:e2:
         3c:a2:22:bc:03:19:f9:af:c9:dc:a9:ec:60:a1:22:10:69:0d:
         7b:ed:e1:5e:ee:f9:6c:db:68:c8:44:b2:7e:a7:48:48:aa:e3:
         3d:4a:60:7d:13:29:08:e4:92:2e:49:9d:3f:a8:e7:85:05:20:
         82:48:28:fd:02:21:45:ca:74:c2:2b:69:b7:83:c8:b4:ef:c4:
         1d:91:92:19:43:f3:8b:40:7d:fb:d0:cd:13:bc:22:22:36:03:
         ff:69:bb:14:ee:23:0d:e6:f8:09:7d:7a:82:55:f5:4d:f4:af:
         f4:a3:05:37:76:0d:80:ad:9a:9e:39:13:8b:c3:32:44:c5:3d:
         ed:04:fd:bc:a9:47:2a:41:36:be:fb:55:30:d9:bc:a7:81:ca:
         98:69:f7:e2:06:74:da:e3:08:74:ba:45:a6:78:4f:9a:cb:03:
         4e:aa:a8:70:29:0d:02:29:5d:ff:5b:46:6e:7e:04:b7:9c:14:
         b0:74:ef:4c:71:c8:14:95:be:c2:b7:1c:b8:bd:b2:a6:8d:e9:
         ba:1f:48:f9:ef:e2:e0:62:8c:dc:fe:7d:d6:47:3a:63:3a:f8:
         f5:0c:96:38:4b:3d:24:05:b4:ee:cd:66:82:00:37:53:6e:4a:
         d8:ef:30:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:38:42 2026 by rpki-client