Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          YRsid18IdWYIl4ywoE3NxJ0z5I0ezoAJDpbC6G+udPo=
Subject key identifier:   23:0A:8F:BB:BE:7A:3F:25:94:B1:45:7B:9D:CD:9F:1B:96:AE:6A:28
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       019D2960A8DCE78010DE1FE8690DBAE41318
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          18D6
Signing time:             Thu 26 Mar 2026 09:01:33 +0000
Manifest this update:     Thu 26 Mar 2026 09:01:33 +0000
Manifest next update:     Fri 27 Mar 2026 09:01:33 +0000
Files and hashes:         1: 5Sb_HPOKAsSdsUjzw140834viv8.roa (hash: dbP1i30GcVhpjOAzB6T5uPHGgdW2XcNsW1MsPzGhr80=)
                          2: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: RsaVVNp+ZaHfydHcY/bBwmGwSGptcaATjW/suXlSYn4=)
                          3: 8BqmL7UcN2qfYbL66pHli8JsIzY.roa (hash: pCciA+077UGjAkiMs81qTKCGq54F1nIKWaxa6mwVk+s=)
                          4: TxQ0636d2LwXH2VImycVLeg_GD4.roa (hash: Cd3bRS1ODPCLQTHK/bSamcQr7JmtV/0UDeqKAMmW1WI=)
                          5: a2XY2UXf90IY1VBTinejxs4Lai4.roa (hash: gW9fcMOQIykl/4g6Q5f2diEfBFcQxaR7rcpmHjIDqIU=)
                          6: qpt6rELOqILrMa-U9LKJZe1lehw.roa (hash: Zh56xuzvTVZWBswVFYzzozNyIH682QfIGGdlCZsISrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:29:60:a8:dc:e7:80:10:de:1f:e8:69:0d:ba:e4:13:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Mar 26 09:01:33 2026 GMT
            Not After : Mar 27 09:01:33 2026 GMT
        Subject: CN=230a8fbbbe7a3f2594b1457b9dcd9f1b96ae6a28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8c:aa:94:5d:77:71:53:b5:7c:c3:03:be:71:
                    0d:0b:57:81:f6:ee:fa:8e:3a:84:fe:06:3f:9a:9f:
                    15:36:e3:c8:cd:0f:70:99:99:c7:58:2d:50:2e:01:
                    36:f9:b1:ce:dd:57:f1:3d:38:f9:e5:4d:71:07:8c:
                    97:f8:54:e0:8b:9c:3f:c7:b5:91:74:27:88:7b:e1:
                    6a:f0:dd:8c:9c:85:9c:1a:d6:46:55:35:1d:51:72:
                    1d:9f:25:09:53:52:eb:43:b1:f0:39:fb:e5:be:66:
                    16:ad:cf:18:2a:59:cb:f4:76:ce:e4:63:df:8b:a2:
                    c7:2f:1c:f4:a2:b6:c8:e6:89:d8:4c:f5:28:21:6c:
                    8f:cc:12:33:3f:1c:3e:5b:49:dd:25:1b:20:91:f1:
                    2b:45:d1:dc:74:df:b3:26:92:d0:6d:11:8b:b4:e5:
                    c8:7f:2d:f9:e7:03:ec:c0:3a:e0:d1:87:ab:55:5c:
                    0f:0e:01:15:8b:d2:7f:d9:17:f2:33:e9:ca:a7:9e:
                    67:63:bd:48:f1:16:cd:ed:c8:61:30:54:37:c1:32:
                    ba:5c:86:77:a2:74:44:96:43:5a:20:d4:08:36:05:
                    c7:44:b7:1f:3d:c0:38:c0:9c:36:e4:43:99:25:8e:
                    5a:07:7f:e9:8b:31:fb:0b:d5:e7:36:4b:ae:b2:2b:
                    ec:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0A:8F:BB:BE:7A:3F:25:94:B1:45:7B:9D:CD:9F:1B:96:AE:6A:28
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:0f:6e:05:c4:d6:d8:d4:6e:2d:ca:e3:fb:4b:e9:e0:ed:c4:
         9b:bc:9e:c9:59:45:fa:88:f1:41:cf:44:76:a7:51:4a:39:9d:
         72:6d:75:e4:61:b0:b5:47:64:72:c4:8b:35:bc:80:80:ff:09:
         7e:6f:7c:30:bf:9f:ba:c0:e9:90:68:d4:14:d2:38:05:4a:79:
         74:de:9a:d3:af:d2:a7:99:66:cc:00:83:9b:72:82:af:68:68:
         a4:89:d9:38:75:1b:2a:a0:9b:94:2e:1d:7f:c8:a5:81:dc:0e:
         bd:cb:25:03:fc:36:a6:60:29:1f:f5:f6:cc:f2:53:c2:ba:ed:
         5d:c4:ab:c4:46:21:13:07:78:9e:29:98:ce:07:1c:23:e2:10:
         d7:08:ee:0a:bb:7d:0e:d8:dd:9f:ef:50:71:98:f7:f6:66:dd:
         5e:51:1d:e8:38:25:33:49:01:d8:1c:fa:ef:22:02:ca:5d:2f:
         08:01:1e:67:d5:9d:18:50:d4:b7:29:9d:dc:83:ff:6d:0b:9b:
         9d:24:fe:7d:67:67:83:ff:67:d5:e2:2f:89:13:eb:8c:c0:07:
         2f:8e:97:ad:d7:cc:cb:94:54:03:89:29:9a:55:ab:0e:44:a4:
         40:61:c1:33:cd:ff:c7:b4:08:4c:ac:d9:2d:21:59:80:d8:b8:
         4b:c4:1c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:39 2026 by rpki-client