Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
File:                     5vgk5Lxc2BiG7CS14VJm6V-N35M.mft (raw, json)
Hash identifier:          xRexlZX5+Cl1QLR4dL6AsuAgcrPTzhEEmhoOwLeD6Nw=
Subject key identifier:   12:CC:42:DE:CA:0B:89:E7:7E:26:EF:20:D9:2F:44:31:84:44:43:27
Authority key identifier: E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93
Certificate issuer:       /CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
Certificate serial:       019D26CD050F53F6343F474DC54621177FEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
Manifest number:          0DFB
Signing time:             Wed 25 Mar 2026 21:01:03 +0000
Manifest this update:     Wed 25 Mar 2026 21:01:03 +0000
Manifest next update:     Thu 26 Mar 2026 21:01:03 +0000
Files and hashes:         1: 5vgk5Lxc2BiG7CS14VJm6V-N35M.crl (hash: aauZrpQ9M8juq+ENsiyN+r+/M178+qw0jZcHqmm0+D4=)
                          2: X5xasRCAPW_8AqrOyyfOnavLV3w.roa (hash: MKvIXTaUYcBmqhG/1QMaETUtrI13kI75foPOMSHT8WU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cd:05:0f:53:f6:34:3f:47:4d:c5:46:21:17:7f:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f824e4bc5cd81886ec24b5e15266e95f8ddf93
        Validity
            Not Before: Mar 25 21:01:03 2026 GMT
            Not After : Mar 26 21:01:03 2026 GMT
        Subject: CN=12cc42deca0b89e77e26ef20d92f443184444327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:47:7b:96:ef:f7:14:31:1f:c2:aa:b4:38:
                    05:e6:0f:06:2f:aa:a7:90:37:8d:99:2c:ff:ed:0d:
                    18:01:4e:fb:29:8a:f6:9e:d3:75:bd:11:23:8c:da:
                    a4:67:7a:87:da:39:b7:9f:f8:65:7e:77:50:4e:77:
                    3a:32:e7:5f:53:bb:01:35:ba:5b:ea:3f:e8:ee:7b:
                    a1:1e:72:e0:24:42:b0:95:3f:d8:1d:47:1c:5c:8c:
                    76:e4:10:12:73:b9:61:6d:66:5b:65:0e:67:ef:41:
                    f6:e2:fc:7f:39:3e:05:8d:dd:07:3f:81:ef:85:21:
                    d9:06:42:69:68:b7:9d:bb:65:89:56:5b:31:cc:78:
                    27:23:f7:e5:a4:c4:92:63:28:59:89:90:f7:18:6a:
                    ce:7c:fb:08:1b:ef:f3:1c:3d:0f:5a:57:0a:5e:55:
                    05:61:19:49:33:9e:4e:dd:7e:7c:69:80:d0:5b:a6:
                    5b:1a:f6:66:25:15:0a:2b:0f:24:5d:95:1f:5f:7d:
                    b8:04:d9:5c:96:92:2b:9b:dc:c5:5e:26:c5:bf:ba:
                    eb:97:6f:5b:6b:23:f8:72:51:46:07:fe:57:47:02:
                    ea:d4:d0:2d:80:d1:5a:a6:0e:64:25:c9:dc:9d:d0:
                    ad:ea:96:fd:ec:bf:9f:ec:46:66:fd:ca:36:b5:f9:
                    d4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CC:42:DE:CA:0B:89:E7:7E:26:EF:20:D9:2F:44:31:84:44:43:27
            X509v3 Authority Key Identifier:
                keyid:E6:F8:24:E4:BC:5C:D8:18:86:EC:24:B5:E1:52:66:E9:5F:8D:DF:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vgk5Lxc2BiG7CS14VJm6V-N35M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ad3797-3346-478f-9e9d-a89f959be204/1/5vgk5Lxc2BiG7CS14VJm6V-N35M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:43:64:12:f7:05:40:66:46:d0:c2:e8:52:c4:4c:33:83:16:
         8b:80:54:d9:ec:d2:bd:1b:bc:ad:4c:41:8c:4d:a0:d9:7f:09:
         4d:1e:d6:30:a3:95:4e:40:d7:25:22:3b:74:6a:ec:e1:78:7b:
         f3:94:28:4e:6d:99:21:bc:82:ec:aa:d2:fd:2b:7c:52:cc:1e:
         0d:0e:64:63:a7:97:d9:6b:3a:e7:51:24:b0:23:63:5c:86:cb:
         66:6e:4e:01:3b:04:d0:d4:25:8f:46:57:17:2a:a9:c0:51:99:
         4b:27:55:bc:7b:f0:82:b0:d3:1a:55:64:5a:66:fc:01:95:9c:
         e7:b1:c2:63:93:c5:83:c8:ee:62:f0:af:33:c2:34:2d:63:cf:
         a1:f5:f1:87:c1:a8:8b:07:a5:68:9f:c5:00:fd:20:97:77:98:
         71:b1:2d:9f:fc:9a:d2:65:6e:4c:07:74:ba:a2:b8:6c:b1:d1:
         ec:0c:ae:66:2c:84:70:74:ab:b7:14:57:4d:5b:84:83:78:29:
         12:46:c3:f3:a1:a0:ef:25:0e:79:be:19:62:10:ce:96:a9:50:
         a0:a6:77:d3:5e:3c:e8:6f:8b:a7:42:7e:45:ae:25:23:c0:32:
         3d:cc:3d:52:84:cb:f7:29:a0:9e:40:92:7c:0c:19:7b:9d:1e:
         4f:a8:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:18 2026 by rpki-client