Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          W0A8c0wbdj6GlvSL5Q7CPdegWFcF6QXip0Bj0EwRrP0=
Subject key identifier:   AB:DF:8D:8D:0F:A2:19:32:62:CE:8C:D9:B8:F1:56:3B:8C:A6:A7:80
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       019D2771E7BDFD4A3ECFE785F80275B26FD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          18D5
Signing time:             Thu 26 Mar 2026 00:01:09 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:09 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:09 +0000
Files and hashes:         1: 5Sb_HPOKAsSdsUjzw140834viv8.roa (hash: dbP1i30GcVhpjOAzB6T5uPHGgdW2XcNsW1MsPzGhr80=)
                          2: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: OX4OWh+aYum6piPPe0BqRNnaOalC22CC9MHvud0DBc0=)
                          3: 8BqmL7UcN2qfYbL66pHli8JsIzY.roa (hash: pCciA+077UGjAkiMs81qTKCGq54F1nIKWaxa6mwVk+s=)
                          4: TxQ0636d2LwXH2VImycVLeg_GD4.roa (hash: Cd3bRS1ODPCLQTHK/bSamcQr7JmtV/0UDeqKAMmW1WI=)
                          5: a2XY2UXf90IY1VBTinejxs4Lai4.roa (hash: gW9fcMOQIykl/4g6Q5f2diEfBFcQxaR7rcpmHjIDqIU=)
                          6: qpt6rELOqILrMa-U9LKJZe1lehw.roa (hash: Zh56xuzvTVZWBswVFYzzozNyIH682QfIGGdlCZsISrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:e7:bd:fd:4a:3e:cf:e7:85:f8:02:75:b2:6f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Mar 26 00:01:09 2026 GMT
            Not After : Mar 27 00:01:09 2026 GMT
        Subject: CN=abdf8d8d0fa2193262ce8cd9b8f1563b8ca6a780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:b7:de:d9:40:6a:ab:66:c1:ee:dc:7c:78:
                    e9:ea:34:a2:24:ca:75:6d:14:c3:9b:93:16:b4:06:
                    76:b1:03:fb:dc:6a:b9:56:e9:d0:85:f2:77:e5:a5:
                    0b:55:f5:b9:29:79:34:39:62:fc:19:bd:dd:20:46:
                    bf:15:13:44:01:26:e8:55:b1:6f:fb:81:63:0e:22:
                    35:94:8e:d5:be:89:86:7b:ba:e7:4a:3e:ee:8f:9a:
                    84:76:eb:9a:2b:85:1a:24:29:5b:cb:11:a7:f4:95:
                    2a:35:dd:39:10:76:bb:2a:21:b7:ac:64:89:bb:a8:
                    f2:b9:92:04:73:74:61:5e:25:e3:e6:49:3b:c0:5c:
                    c7:60:56:5a:03:71:d8:e3:77:bb:72:fd:7f:4c:ee:
                    30:a7:2f:a4:72:f9:bd:d1:b3:66:ae:0f:70:e2:bc:
                    fe:8e:07:8a:95:65:45:83:df:22:87:29:74:d9:c7:
                    3e:39:f5:5f:ba:73:c5:9a:a9:96:eb:9d:96:f9:aa:
                    0d:ca:ca:a4:4c:0f:60:4e:4b:6b:f4:4c:1c:40:67:
                    8a:0b:44:d8:47:0b:1c:f8:02:36:5f:82:9b:3f:50:
                    19:19:74:91:a1:8c:f5:1f:8b:b1:7b:dc:47:44:41:
                    5a:06:86:9a:b6:15:a7:c4:89:01:bf:e7:1b:0b:18:
                    bd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DF:8D:8D:0F:A2:19:32:62:CE:8C:D9:B8:F1:56:3B:8C:A6:A7:80
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d7:96:d5:f8:ef:df:e9:66:50:0d:97:ed:66:dd:79:95:cc:
         a7:fc:5a:3b:b2:b3:f4:fc:18:a1:80:56:46:f6:65:7b:f8:29:
         97:6b:bc:2d:e8:30:ec:09:53:fd:74:4a:32:6b:1a:ab:27:70:
         0d:20:b7:08:26:a1:03:fe:ab:e1:26:81:58:51:2c:2a:8a:f1:
         69:66:ad:c9:da:0f:e7:44:09:56:19:df:1d:a6:0f:98:13:16:
         53:67:30:e2:d1:ca:a2:60:99:89:35:3e:1d:d0:02:e3:b7:6a:
         47:80:f2:3c:32:9c:83:32:ab:de:1a:b8:c4:23:40:92:3d:6b:
         d5:8e:56:a4:fb:c7:74:79:3e:e1:ef:26:6c:85:36:40:fd:9a:
         ef:05:00:2b:f6:09:37:1c:6d:d4:cf:e4:10:9f:27:1f:63:49:
         c0:3b:6f:c5:ba:f0:cc:4b:92:13:ff:e0:76:70:04:3f:65:df:
         d7:8e:b1:5b:31:3d:92:68:42:7d:1d:3f:ca:c0:6a:a0:7b:78:
         14:ab:24:8c:ac:d0:22:f8:36:d3:76:a7:6b:58:e2:ad:c3:0f:
         06:0b:2f:16:d3:3b:91:40:07:a2:8f:41:c0:c1:1d:9b:b4:13:
         e7:73:4c:1c:e6:bf:03:dc:83:9b:3b:99:0d:21:ab:a3:17:a4:
         39:8f:6b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:08 2026 by rpki-client