Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
File:                     5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json)
Hash identifier:          3o5CQIaeVI8UHMLScgNp1bXbba8GMF3enPokorSXUUI=
Subject key identifier:   24:07:9D:3D:A5:CC:F4:39:EE:DC:12:8E:2C:9A:13:75:64:62:47:33
Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5
Certificate issuer:       /CN=e62ee82422b7849912296361404649a7ffec98e5
Certificate serial:       019D329AFA3F6150AB5DB7683B5A12CA9F3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
Manifest number:          0F4C
Signing time:             Sat 28 Mar 2026 04:01:50 +0000
Manifest this update:     Sat 28 Mar 2026 04:01:50 +0000
Manifest next update:     Sun 29 Mar 2026 04:01:50 +0000
Files and hashes:         1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: rCYnPxyG0oUvmvLgUwqMkczX5RhPAOxY4IOD+JqMDbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:9a:fa:3f:61:50:ab:5d:b7:68:3b:5a:12:ca:9f:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5
        Validity
            Not Before: Mar 28 04:01:50 2026 GMT
            Not After : Mar 29 04:01:50 2026 GMT
        Subject: CN=24079d3da5ccf439eedc128e2c9a137564624733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:6c:13:0c:e5:0b:1c:3c:7b:61:b6:50:74:
                    c2:5b:e0:40:85:00:eb:10:d8:07:a9:26:ae:ea:2d:
                    a3:cf:31:6c:ea:d5:44:18:19:4d:bc:c7:ed:e8:f3:
                    31:f4:70:61:6a:15:cc:0f:56:1c:92:ec:0a:0e:9a:
                    1e:e2:1a:84:d6:8f:1e:b9:5d:e4:3a:3f:f6:bd:e1:
                    20:a5:39:07:97:03:9c:e1:45:fb:90:7f:d9:3c:85:
                    d2:3e:72:e8:f8:36:31:37:b9:97:db:63:4b:2f:f7:
                    0b:df:56:9f:9c:22:b8:11:04:61:08:6e:cc:4a:a0:
                    f6:14:d0:c1:39:6e:7b:07:94:f0:c5:3e:1a:ca:47:
                    a6:65:e1:5b:a8:63:30:8f:c2:8a:d3:3c:06:74:61:
                    58:91:54:03:50:82:e8:00:94:37:a2:05:32:1b:f9:
                    63:f5:04:58:46:7a:3c:78:e5:cc:c0:31:32:f9:bc:
                    e0:cd:b6:6f:1c:fa:05:99:cc:dd:31:8e:e0:57:2b:
                    fe:b1:0b:ad:8b:9e:1a:30:bd:7f:05:66:e4:12:91:
                    c3:6d:3a:2f:d1:8d:e1:45:c4:86:37:aa:fc:cf:ba:
                    e3:15:0a:e3:b0:c7:ed:2d:8f:00:21:c2:ae:f3:ff:
                    bf:d6:cb:ef:3d:56:17:db:a4:6b:a9:ec:2f:b6:93:
                    5b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:07:9D:3D:A5:CC:F4:39:EE:DC:12:8E:2C:9A:13:75:64:62:47:33
            X509v3 Authority Key Identifier:
                keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c0:af:db:e1:f2:05:b7:5b:c2:55:96:60:c8:14:e3:79:6c:
         30:23:86:a3:85:ea:10:ad:60:25:4e:9b:1d:70:1f:06:c5:f5:
         e3:b9:74:d7:e4:18:a0:6a:9e:00:71:96:82:fa:c1:8f:e4:5a:
         c2:0c:5f:8a:88:ba:bc:b0:1c:f1:47:09:9c:c7:a1:cb:89:dc:
         be:60:14:bd:96:5e:0d:d2:01:59:03:16:75:0a:a4:4d:5b:d0:
         3f:75:39:f4:0e:e8:e0:1a:2f:6d:6b:86:68:09:5b:07:ee:bd:
         03:0c:75:63:61:de:d5:4d:07:6a:02:ea:43:68:c7:c0:a1:78:
         83:92:a7:95:1f:1d:49:07:48:22:71:c9:4a:a4:e0:fb:75:c9:
         7a:0d:71:1b:5d:28:97:c1:a0:35:a5:62:94:e0:a3:4a:d5:ae:
         a9:7d:d1:2c:41:c1:73:da:d4:5a:af:19:d6:92:5d:76:b6:f7:
         c1:80:7b:f0:23:ac:bf:6d:6a:cc:c8:4a:32:7a:d8:1a:43:8e:
         a6:d9:8a:25:f9:3a:67:64:aa:65:7c:a3:1f:a8:73:e2:96:ab:
         8b:5e:54:5b:76:4c:2b:17:0a:82:78:be:ed:86:83:f4:b6:e1:
         b8:c0:75:a1:8f:9b:90:b9:bd:19:fd:42:53:7e:78:0a:33:37:
         ad:4a:ae:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:17 2026 by rpki-client