Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
File:                     5Lqtn19putkQB1-OHYBetB0N98s.mft (raw, json)
Hash identifier:          zarXS/OUanpoRYRcuiD7CPjUpCjhniAyOUd6lZvK/Ts=
Subject key identifier:   29:13:EB:DE:41:93:63:DD:57:F4:76:5C:3B:36:B7:87:D3:EC:50:E9
Authority key identifier: E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB
Certificate issuer:       /CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
Certificate serial:       019D284E3079D383624098FB6DE0FCA87E1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
Manifest number:          1170
Signing time:             Thu 26 Mar 2026 04:01:45 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:45 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:45 +0000
Files and hashes:         1: 5Lqtn19putkQB1-OHYBetB0N98s.crl (hash: Waeogx/FOFBBOtzWX8d+T1kr7ihaiRM9Gi8Nj1Lqd6Y=)
                          2: V0hqPIINhp_WNvjzrr7PJydJ3zE.roa (hash: 201DsxPOm6cpm2Im3U0XIX6Q6+lglCsbvOqe62R0Yfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4e:30:79:d3:83:62:40:98:fb:6d:e0:fc:a8:7e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4baad9f5f69bad910075f8e1d805eb41d0df7cb
        Validity
            Not Before: Mar 26 04:01:45 2026 GMT
            Not After : Mar 27 04:01:45 2026 GMT
        Subject: CN=2913ebde419363dd57f4765c3b36b787d3ec50e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:63:ab:7f:89:a6:0d:00:f2:f1:42:ef:a9:
                    8c:8b:75:5d:0b:83:d6:8e:b2:70:ea:90:8a:a4:ef:
                    ee:c5:d3:56:0a:12:5e:5e:c9:49:ad:ca:c5:b3:00:
                    5c:36:f3:93:f7:8e:32:b8:ec:77:5c:ee:f8:9b:16:
                    6d:fd:71:d5:50:80:51:db:a1:ec:56:5d:c9:36:19:
                    af:9f:0d:0c:ad:f6:3d:61:b1:40:6a:fe:dd:c1:38:
                    03:73:2c:07:f7:58:d3:ce:6d:2f:f4:aa:15:a8:2a:
                    0f:4f:94:5b:e3:ac:db:15:fb:2f:88:4a:4c:3e:db:
                    b1:1c:83:31:98:5b:3c:80:7c:8e:bd:7d:78:2e:6e:
                    2b:a9:f7:0c:4e:fb:3a:22:34:64:04:c6:cd:84:d8:
                    07:23:70:f8:b1:57:45:50:bb:bc:b9:54:87:0a:f7:
                    22:fa:2f:b8:0d:28:eb:70:d7:79:aa:ce:cf:e6:57:
                    61:16:0c:19:5e:7f:da:2b:c7:68:43:fc:8c:f7:b2:
                    26:80:6d:d4:2c:60:3d:f7:2d:36:3c:a9:b6:ff:ae:
                    8f:91:12:f1:0d:cd:8a:32:12:1d:84:24:92:85:b7:
                    e2:18:c2:8f:41:bf:a9:01:80:65:eb:6e:8d:91:3e:
                    97:8b:8a:a3:b7:ac:56:cc:ea:e3:94:db:85:f7:f7:
                    dd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:13:EB:DE:41:93:63:DD:57:F4:76:5C:3B:36:B7:87:D3:EC:50:E9
            X509v3 Authority Key Identifier:
                keyid:E4:BA:AD:9F:5F:69:BA:D9:10:07:5F:8E:1D:80:5E:B4:1D:0D:F7:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Lqtn19putkQB1-OHYBetB0N98s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/ebdca6-2588-40a0-a19e-6d0cbd8bd492/1/5Lqtn19putkQB1-OHYBetB0N98s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7b:84:a1:56:ce:b9:f4:7e:9b:9a:f0:58:b2:fc:76:42:7c:
         b9:44:cf:c9:13:2f:87:e3:f0:8b:4b:74:59:2b:61:b6:af:21:
         15:5a:fa:e4:2a:77:9a:b2:df:bb:89:64:f2:35:2f:6a:36:b6:
         1c:b2:20:65:ef:9a:ec:53:ac:33:99:ff:98:8f:b2:97:82:13:
         17:46:72:f6:dd:1e:2d:b6:04:14:d5:53:f2:41:7a:3c:b1:13:
         83:c7:fb:12:a6:d1:6a:92:ea:96:18:0e:91:bb:d5:db:46:25:
         e6:ba:ee:73:23:74:49:09:be:1b:ab:a2:cb:a5:d6:31:94:77:
         a2:f8:69:f7:76:4a:9d:4c:08:27:08:a2:c8:cc:a8:a6:fa:4a:
         ea:b8:87:41:63:88:4b:81:e3:5e:6e:cb:8b:f8:b5:ae:1b:8a:
         d6:a0:82:bc:32:b5:ad:0a:54:46:d0:85:f1:0a:8a:3f:14:f5:
         6d:49:7a:2d:2e:b9:05:a9:ae:c5:e4:5c:2f:f5:01:8f:5f:4a:
         b9:ce:55:42:d2:6c:08:6f:e0:c1:52:ab:a8:93:04:cd:60:b7:
         f5:14:ac:70:7c:a0:f9:89:96:5f:44:18:53:4d:17:0c:9e:c5:
         b0:cf:d2:ae:8f:aa:1a:40:16:be:2b:7e:aa:27:03:13:e3:04:
         34:40:ea:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:59 2026 by rpki-client