Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier:          KWEm1VM3Qd+fxU9L0gykomSO2jNck/LZy6ynFlY5QDo=
Subject key identifier:   02:BA:BE:20:FE:2A:91:6A:DF:CB:68:72:16:16:BE:B9:79:52:5F:F0
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       019D2704A05669775B02CDC078F109EE8EF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number:          1804
Signing time:             Wed 25 Mar 2026 22:01:47 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:47 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:47 +0000
Files and hashes:         1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: Rgez9oBu6br5L+vOy+06IqLG5ePLrPi24wUMjCCCai4=)
                          2: _xb7dLIH6IMlpZq1SYlWl6nvqS4.roa (hash: oZ1UVmQ5z1c0zOrIXMtPyJxvit0yakzMpq+pTeT+fvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:a0:56:69:77:5b:02:cd:c0:78:f1:09:ee:8e:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: Mar 25 22:01:47 2026 GMT
            Not After : Mar 26 22:01:47 2026 GMT
        Subject: CN=02babe20fe2a916adfcb68721616beb979525ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:d6:07:7d:b9:24:8a:9c:f3:0d:0e:26:c2:
                    5d:95:04:65:b3:61:ed:5c:8b:bb:d5:0e:a1:99:a7:
                    45:1e:07:e8:41:15:b5:ec:3c:bb:02:14:48:5d:7e:
                    1f:b2:d3:d0:28:2e:27:19:96:aa:d5:00:94:42:10:
                    41:50:c5:76:df:4e:bc:1b:65:10:ef:ee:c8:a5:1c:
                    f0:bb:2b:1b:68:a8:7f:b9:28:bd:0c:40:3c:2d:fb:
                    d9:1b:c8:1e:ea:19:87:92:60:cb:47:8b:cc:d6:59:
                    07:76:52:2f:90:e0:fc:79:6e:e8:ad:59:79:7b:f5:
                    c7:d2:d5:df:cd:0f:a1:a4:a2:ae:ce:b4:9c:6f:44:
                    48:82:5f:dc:53:b9:c6:c1:7a:b8:3f:71:71:41:f8:
                    77:ec:fb:e8:e1:6a:30:5e:18:51:67:f9:97:c5:2d:
                    34:87:2f:c0:10:09:63:59:25:c1:5e:ac:aa:48:e2:
                    ce:59:fb:a5:fd:32:4f:0a:9a:b8:6d:d4:6d:61:b0:
                    23:b1:6a:d5:6e:41:65:62:10:2d:b9:93:16:7c:ed:
                    f1:2b:f0:50:3f:86:7b:e7:e8:1e:ac:9a:76:f0:12:
                    b0:c0:97:03:83:38:54:32:da:60:e2:6f:69:c6:f1:
                    b1:07:ac:fe:11:e0:73:42:44:45:22:60:e4:40:ff:
                    56:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:BA:BE:20:FE:2A:91:6A:DF:CB:68:72:16:16:BE:B9:79:52:5F:F0
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:87:fe:2e:b4:7b:03:87:a2:6e:3b:40:e7:f8:c1:44:56:a8:
         66:aa:58:2c:1f:cb:27:82:61:82:fd:71:9c:be:da:77:3a:cf:
         29:d1:a5:2b:f3:cb:fa:2b:97:47:01:07:aa:67:f0:e6:98:34:
         3d:dd:df:d1:9d:2c:f2:12:db:59:be:b0:64:7d:8b:c7:18:d3:
         c4:10:d3:bd:9d:43:6d:a2:3f:a2:16:99:fa:21:7d:7d:82:dd:
         61:b4:41:5c:77:05:19:07:fb:eb:31:1d:3e:97:0a:e5:78:16:
         91:81:74:cb:52:79:b9:90:13:a7:e3:5b:10:cf:44:3e:3c:23:
         33:9e:db:55:f9:a2:52:e7:63:9e:df:49:d9:47:b1:42:53:3b:
         b9:70:90:64:ef:67:1c:87:a3:35:5f:b2:21:a1:44:b6:34:b2:
         ba:a5:9a:80:61:be:86:f3:d8:28:e2:d1:14:b8:87:90:49:26:
         b9:4e:ca:dc:f0:f1:76:c6:54:79:a8:f6:f1:99:7e:74:43:74:
         4b:98:9a:e2:03:31:db:2e:37:15:d8:49:ff:06:a1:10:90:5c:
         d0:b7:19:4d:d1:02:ed:c1:66:06:9d:2c:5e:33:40:e1:9f:a1:
         e8:5f:55:28:ed:2f:96:96:b0:60:b4:4c:0e:b3:0c:dd:45:4a:
         3c:82:a5:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBKBWaXdbAs3AePEJ7o7zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NmNkNTc4ZjQyZjhkZTA2NzIzNjc2N2M2Y2ZjMmJhY2Jj
MTZlMDUwHhcNMjYwMzI1MjIwMTQ3WhcNMjYwMzI2MjIwMTQ3WjAzMTEwLwYDVQQD
EygwMmJhYmUyMGZlMmE5MTZhZGZjYjY4NzIxNjE2YmViOTc5NTI1ZmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLzWB325JIqc8w0OJsJdlQRls2Ht
XIu71Q6hmadFHgfoQRW17Dy7AhRIXX4fstPQKC4nGZaq1QCUQhBBUMV23068G2UQ
7+7IpRzwuysbaKh/uSi9DEA8LfvZG8ge6hmHkmDLR4vM1lkHdlIvkOD8eW7orVl5
e/XH0tXfzQ+hpKKuzrScb0RIgl/cU7nGwXq4P3FxQfh37Pvo4WowXhhRZ/mXxS00
hy/AEAljWSXBXqyqSOLOWful/TJPCpq4bdRtYbAjsWrVbkFlYhAtuZMWfO3xK/BQ
P4Z75+gerJp28BKwwJcDgzhUMtpg4m9pxvGxB6z+EeBzQkRFImDkQP9WkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAK6viD+KpFq38tochYWvrl5Ul/wMB8GA1UdIwQY
MBaAFOVs1Xj0L43gZyNnZ8bPwrrLwW4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQt
YjdhNTY0YWZiMDRiLzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8yOWRlNDYtYzJlOS00OGZiLTkyZDQtYjdhNTY0YWZiMDRi
LzEvNVd6VmVQUXZqZUJuSTJkbnhzX0N1c3ZCYmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfof+LrR7
A4eibjtA5/jBRFaoZqpYLB/LJ4Jhgv1xnL7adzrPKdGlK/PL+iuXRwEHqmfw5pg0
Pd3f0Z0s8hLbWb6wZH2LxxjTxBDTvZ1DbaI/ohaZ+iF9fYLdYbRBXHcFGQf76zEd
PpcK5XgWkYF0y1J5uZATp+NbEM9EPjwjM57bVfmiUudjnt9J2UexQlM7uXCQZO9n
HIejNV+yIaFEtjSyuqWagGG+hvPYKOLRFLiHkEkmuU7K3PDxdsZUeaj28Zl+dEN0
S5ia4gMx2y43FdhJ/wahEJBc0LcZTdEC7cFmBp0sXjNA4Z+h6F9VKO0vlpawYLRM
DrMM3UVKPIKl+w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:28 2026 by rpki-client