Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
File:                     5snUihjDwNLk5jp7g4haeWd1WCY.mft (raw, json)
Hash identifier:          BQohfnzbIoBmf7ET/Z6EL56aLlTYQ6hx69S5TRnI2js=
Subject key identifier:   C6:D9:22:A8:72:17:89:49:60:4C:90:41:5A:26:42:B5:91:26:37:BD
Authority key identifier: E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26
Certificate issuer:       /CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
Certificate serial:       019D27A912C410C222287D92135BB8F18268
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
Manifest number:          1887
Signing time:             Thu 26 Mar 2026 01:01:24 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:24 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:24 +0000
Files and hashes:         1: 5snUihjDwNLk5jp7g4haeWd1WCY.crl (hash: 6blcNUSBVVwKYbhtvKsA5VoGXu13jEgle7Rroj/lYZU=)
                          2: xTcMswF38ZE38tgLMYO-vbYGTRk.roa (hash: PD9c4dxb1fJ5/IhIPAC6oOP7byhN52l5phW+HJUN+kg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:12:c4:10:c2:22:28:7d:92:13:5b:b8:f1:82:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c9d48a18c3c0d2e4e63a7b83885a7967755826
        Validity
            Not Before: Mar 26 01:01:24 2026 GMT
            Not After : Mar 27 01:01:24 2026 GMT
        Subject: CN=c6d922a872178949604c90415a2642b5912637bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:af:98:15:76:fd:f2:f8:7c:79:d8:2a:88:da:
                    76:54:2a:02:0e:1f:6f:6e:a9:cb:66:89:a4:62:a0:
                    85:66:40:4b:ce:65:28:a3:5b:a7:8e:8e:20:1b:0a:
                    e8:ad:ab:46:ec:85:03:79:1d:3f:77:ce:f1:2f:d7:
                    ea:68:85:be:33:ad:c4:e5:73:8e:d8:62:a7:04:cc:
                    c7:e2:94:20:c0:ba:ac:65:a9:3d:e5:aa:15:e4:3e:
                    c7:af:a1:80:e8:91:d0:1b:3b:7b:79:67:2c:4e:c3:
                    1c:01:81:61:69:ce:93:bc:cc:9e:5d:db:c2:7f:ed:
                    a7:58:b9:0e:ef:21:a2:34:dc:04:4b:27:ec:c9:41:
                    07:57:86:4b:51:f5:a9:da:e4:e5:bd:ae:e2:ff:06:
                    20:42:d4:34:41:30:30:74:2f:1c:7f:7c:2e:48:95:
                    e5:e8:39:4a:f1:7f:e3:ba:aa:8f:7b:bd:03:19:07:
                    a5:06:fe:d5:8c:ae:8d:ae:7d:fc:ff:62:6b:d0:d9:
                    4a:af:30:95:be:13:56:24:36:da:6e:5e:d7:3c:82:
                    90:85:7a:be:6c:27:bb:83:3c:37:80:83:81:8f:71:
                    79:a2:db:32:ed:de:c0:29:07:15:c9:26:79:b7:31:
                    4d:4a:3e:39:a6:7c:07:c3:d7:62:8d:1c:ce:4e:34:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D9:22:A8:72:17:89:49:60:4C:90:41:5A:26:42:B5:91:26:37:BD
            X509v3 Authority Key Identifier:
                keyid:E6:C9:D4:8A:18:C3:C0:D2:E4:E6:3A:7B:83:88:5A:79:67:75:58:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5snUihjDwNLk5jp7g4haeWd1WCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d25e14-625d-47b5-a0ec-848f73df8b20/1/5snUihjDwNLk5jp7g4haeWd1WCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:41:ba:32:cf:9a:46:0b:58:18:c1:9e:57:a8:fd:eb:70:ea:
         a5:f7:3a:7e:bc:06:69:bf:0a:af:a0:21:d7:6b:1c:ea:a2:0a:
         9c:12:1b:eb:a9:94:aa:4c:49:10:1c:41:33:08:9b:72:c6:d7:
         14:11:14:80:1a:ab:81:c8:f0:91:b5:45:5f:c4:63:df:ba:5a:
         a6:54:76:31:13:05:7a:3b:2c:db:04:9f:35:d5:8f:39:58:30:
         28:3a:7f:7b:4e:b3:40:da:90:43:31:70:39:08:e7:89:21:41:
         4f:ea:91:87:7b:fc:2b:0f:8c:b0:a3:c2:22:3e:36:02:22:d8:
         be:a9:5e:58:b7:a8:1f:16:16:ec:01:37:6a:52:93:b0:d7:8d:
         3e:08:5b:09:fa:0b:ab:0b:92:98:f1:18:e1:af:7d:65:10:40:
         53:17:67:3d:40:be:e9:d5:71:85:b5:03:88:e4:b6:76:f8:cf:
         b1:18:ac:db:37:13:8f:25:30:3d:e7:e1:ef:f5:b0:a0:e9:18:
         ff:e6:45:59:66:69:ae:cf:ea:75:67:99:0c:58:4f:30:a2:78:
         1d:cf:f0:97:f3:c7:ec:c3:74:d3:cc:31:cd:68:71:9b:34:95:
         55:20:58:d4:25:d9:4f:d1:c5:86:af:9a:53:90:72:5e:c2:78:
         3c:f2:a4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:06:36 2026 by rpki-client