Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
File:                     5dbG6LztQL0DLRdxjBseOa6EGug.mft (raw, json)
Hash identifier:          6TAkEs6fwPHCVBTubtgPsb+72WTkmyAKkGh9Rwkv+VM=
Subject key identifier:   39:4A:D7:28:DC:FF:3A:4C:58:47:B3:E4:83:26:81:1B:11:71:7D:36
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Certificate issuer:       /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial:       019D2703B8726F39732C3B88BBE91E664DBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
Manifest number:          18A0
Signing time:             Wed 25 Mar 2026 22:00:48 +0000
Manifest this update:     Wed 25 Mar 2026 22:00:48 +0000
Manifest next update:     Thu 26 Mar 2026 22:00:48 +0000
Files and hashes:         1: 5-klHAcjuib2_FofmnEGi_QZtBo.roa (hash: MgJJh9H/jXeBJcDEupeJ7ZVHU2fjFH9Kd5p1q+gOEoI=)
                          2: 5T6muliVBW8fS-8i29q4TfjPKww.roa (hash: tQ3qJO54TZ3cHoxqFq0bCzVKBXdLkF5Xol5mChz7hcM=)
                          3: 5dbG6LztQL0DLRdxjBseOa6EGug.crl (hash: xEHi0jqPFAhbkVJQKBd5tuWKHfFgJ2O7XbhmYpO8IdM=)
                          4: 97PhypZv2zu5_OJfA9RRiy48R8g.roa (hash: nIzEQ3BbMqorKqduXDknSy/VPwO4KFszJMOCHH7kKrc=)
                          5: BPQtimnpXi0to5PJq-7OXT1p6Kg.roa (hash: PekLxUPS5x993K7hJZTV/uCUzvBB2o6IwRQlq0KNRsM=)
                          6: CEZhxXddcJSu8GtDeoUO1Fq3l8g.roa (hash: moNzp9N4VIrR1YCZjmlUZKwlRY+vy/jtfRsH+cwJ3Is=)
                          7: CNXwsSf4_4ESwE7Z2tHMnF1t0fI.roa (hash: 6TNmvaRAq+/xsichI9upjJiUhRz6TxFS4gf++ifnQHM=)
                          8: IvxIJlsusGINjyd7ChcDCT4l6As.roa (hash: zyUdft6I0UPWxcrLYXWhMDg+rjyI8hIE2YfsToF0boc=)
                          9: L6vphMwfNSBNvr8n1Lq9ZQF5mHU.roa (hash: oMpak7/xlmg2k0Kw2nNqPLD2SFclHDjV9oFak9G23Tk=)
                          10: Q-M_plqHvIQQ4Omd0fzKbn8MMIE.roa (hash: 9RcrwO2pLiY7IHYvOtx1yuwN7Rb/p8KIBf/Lu5xB6g4=)
                          11: QdwEGDEr6Ax0sFIqcVK01z0gwFc.roa (hash: KB/jxrFMK5gxklmy0S1tcQXJ7NAaIcgucGRfgVGUTL0=)
                          12: R0firsytRcLjGnGFeTReX_mJsTo.roa (hash: ZELUdwpvqbd6r7PVB+5YZQ5dM2v9c5GEjwWTQyZ4GD8=)
                          13: RxxmdBVq18xBTu5txmqjYwtEcpU.roa (hash: 0qKhOj0Lxs9GMhc9/OQQ5tOrCNAxGZ18Ve40BFZyMVU=)
                          14: SLxM4-QYW5vdBWKJN_1LSVWNQI8.roa (hash: 8/pZhmkiqWxucVdJO5fLGO+U3cowY5Hypcm03HRtJoA=)
                          15: TxxrVfz2u2F0xUEANYlHvUuyeVI.roa (hash: 0f/+WR0UOyysTWAKgWWvmTz3+3MFbGsdfLPYHRKrVL8=)
                          16: WoXz8LEgluCQDtouES2_1t3quKQ.roa (hash: NFO0YmWMko3tEX8tTvzsRFbcyphfVpUnLsRfBg6EMBw=)
                          17: X3CxDxdArCain-hHzMiYZG7wqTY.roa (hash: VGIBYhWyA0ZSidIn3eUOjZGeUibcoLiE0Nr0g0fgtac=)
                          18: aTXtQ3Z2K6TSE6KNWgBdEr8tXhg.roa (hash: ayQ15/oxxjtoAl0GHDbaT1Ld3ENYq1g1s6ZPtUrE0LE=)
                          19: gkqFAdULp-MSlNo8ljKdmzxNnW8.roa (hash: MUtCuN0kNobHKk0C/st+dCMUhmlNlDPz4Sloa+o6ysc=)
                          20: p0LQmmHi2QvQtDWz-XJ05OkVyok.roa (hash: jYOqdXjJ1djt3waBPEAnIDBEUk//W+EO/dGl6v18IuQ=)
                          21: wPrOTLIMFBa9xSPd967CbqnruOM.roa (hash: V3ywu5M8hUS56cV276Qc7nvD0rqUdNAgudSMZjJuzUc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 22:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:03:b8:72:6f:39:73:2c:3b:88:bb:e9:1e:66:4d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
        Validity
            Not Before: Mar 25 22:00:48 2026 GMT
            Not After : Mar 26 22:00:48 2026 GMT
        Subject: CN=394ad728dcff3a4c5847b3e48326811b11717d36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:b4:60:2c:37:d7:d1:0a:4b:ed:a8:99:79:
                    3f:d0:af:18:7d:f1:52:72:cb:17:14:1f:53:1b:12:
                    19:5e:bf:01:18:81:6c:7b:18:15:50:1f:39:f2:6a:
                    05:19:02:7b:ae:21:e2:47:c6:33:5a:4a:1f:e9:2b:
                    87:7b:72:af:f6:5e:56:7a:d4:d1:a0:9d:db:d1:b1:
                    48:29:58:e7:01:c2:75:dc:b1:2a:b6:9e:bc:37:18:
                    ce:3e:15:1f:1e:ca:c6:a2:a1:01:68:e6:87:c5:47:
                    e7:4a:ed:dc:4a:8a:6f:c8:17:eb:c6:9f:58:1f:d1:
                    4f:b2:18:04:3c:6a:53:2a:7c:94:26:9a:7b:f0:67:
                    9b:03:26:64:35:69:25:b1:6a:19:aa:a4:ea:57:c6:
                    68:e4:20:e1:3f:49:77:c1:98:93:e7:57:df:3f:e2:
                    6d:c0:87:45:72:06:60:4f:da:96:a3:aa:9d:c7:89:
                    b3:c0:2e:70:4e:e7:3b:51:8b:b8:59:02:57:ff:01:
                    13:5a:10:81:d0:03:81:85:9f:68:c3:c3:00:ad:14:
                    48:eb:a2:26:95:af:fc:d5:dc:f4:7e:a1:f3:c0:4b:
                    a4:96:d8:fc:a4:e6:56:34:36:cd:f5:4c:aa:9d:1a:
                    fa:ca:bd:d4:45:17:15:10:e4:a0:ac:31:1b:2e:a7:
                    0e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:4A:D7:28:DC:FF:3A:4C:58:47:B3:E4:83:26:81:1B:11:71:7D:36
            X509v3 Authority Key Identifier:
                keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:49:eb:78:98:0a:89:a4:57:6a:56:80:6c:ec:4e:8a:16:16:
         ad:cf:72:f3:05:59:47:35:4b:4d:a3:72:4b:a5:f5:28:d2:45:
         dc:4b:4c:1b:76:c4:47:3e:39:56:e3:15:15:31:db:0c:8a:c3:
         d8:52:4f:5a:28:be:23:c1:33:a4:a3:44:e7:59:ea:29:ec:ec:
         21:c1:fb:18:b2:7f:5c:6b:4c:e9:82:a8:89:04:f0:32:4a:fd:
         09:a6:96:05:59:c8:4b:37:86:7e:4d:a9:1a:c8:5a:34:1d:60:
         4e:2e:e1:8e:bb:7a:76:6e:97:6d:f5:e7:39:8e:d4:46:a1:95:
         1f:5c:1c:fc:42:81:da:20:7d:89:2f:ad:9d:0b:78:b7:60:50:
         aa:cd:a9:4a:81:88:b9:3c:3b:6f:1a:d8:d9:db:1e:8e:a4:40:
         6c:f3:06:0c:de:91:d0:d8:6a:ca:1c:d0:24:f5:89:c2:64:39:
         99:08:8b:ea:a6:5a:03:72:6d:9b:d7:60:22:82:29:d9:cc:b7:
         fa:2e:da:63:87:1f:2b:20:2e:8e:03:12:43:6a:22:af:0f:3c:
         7a:04:82:45:34:a5:43:78:b1:5f:cb:ba:b6:e3:62:6b:ef:49:
         7b:96:c1:ab:53:31:07:a4:41:08:b7:ff:88:e6:9f:8a:fa:10:
         09:55:89:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:33 2026 by rpki-client