Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File:                     5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier:          ojwWAa5xb8AHAhlOG6qwkYWGvb8A/eTtOT3UGZTwU/c=
Subject key identifier:   4F:D0:74:A3:4D:A2:D3:B6:5A:94:A4:75:7B:DC:01:0D:0D:20:95:8B
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer:       /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial:       019D27043059B8C98477EE37B0B5C32B9323
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 22:01:18 +0000
Manifest this update:     Wed 25 Mar 2026 22:01:18 +0000
Manifest next update:     Thu 26 Mar 2026 22:01:18 +0000
Files and hashes:         1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: fHgCTwDSQNV66RxgoLINk9ZjF4zke9vE66SvaeBEzfQ=)
                          2: zK7MrHgxjsLskIcafxYh3JdxNEE.roa (hash: JFbMIHqLCbVbpI4VRFmIo8CC2nBPdhcZqjjlHz94hCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:04:30:59:b8:c9:84:77:ee:37:b0:b5:c3:2b:93:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
        Validity
            Not Before: Mar 25 22:01:18 2026 GMT
            Not After : Mar 26 22:01:18 2026 GMT
        Subject: CN=4fd074a34da2d3b65a94a4757bdc010d0d20958b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f1:c1:5b:4b:00:29:d8:0d:7d:45:cf:db:48:
                    c7:5f:96:38:94:0c:61:02:2f:10:6f:e1:a3:64:8d:
                    92:76:ff:35:1f:4f:ec:ac:cc:04:8f:56:91:20:be:
                    a2:18:11:e7:51:b7:e3:97:91:31:cc:a9:a1:27:7a:
                    4d:92:27:12:09:75:6d:4f:44:1f:93:0a:cb:66:f0:
                    e5:17:d7:64:70:54:b9:41:9e:d5:0d:63:fa:2f:6f:
                    cf:2b:41:ca:8f:d1:a5:fe:58:12:28:d8:ca:26:12:
                    92:83:75:8b:4b:f2:6c:37:91:64:bf:43:c2:99:7c:
                    c2:7c:d8:52:b4:f7:85:67:eb:20:e8:1e:7f:28:6c:
                    2e:45:e9:6e:e6:ae:9e:4a:20:3e:72:17:ee:fd:24:
                    78:c5:d7:e9:9c:6c:ef:65:84:d1:5a:98:4b:63:32:
                    6b:ca:c5:78:be:2d:87:94:74:74:dc:0c:94:55:d6:
                    0b:40:ad:ef:1b:3e:80:d3:32:9a:b1:db:d1:86:e4:
                    1a:f8:d5:82:ca:4f:50:14:37:f3:b4:1a:06:5f:c4:
                    d9:33:e6:6a:9a:ad:80:61:3f:10:92:c9:4b:d2:15:
                    76:8e:7e:09:57:0c:48:b1:87:0f:fb:7c:5b:cf:5b:
                    59:99:3e:bf:59:65:79:77:38:a1:be:f7:61:54:f7:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D0:74:A3:4D:A2:D3:B6:5A:94:A4:75:7B:DC:01:0D:0D:20:95:8B
            X509v3 Authority Key Identifier:
                keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:78:f9:c2:4f:a2:74:e2:72:b5:7d:db:98:1e:c3:19:00:93:
         5c:66:ff:62:b0:56:c9:13:38:fb:61:fb:66:7d:89:dd:77:23:
         ea:a2:43:fd:9a:c5:d1:a8:57:94:8b:d9:ff:8b:2b:91:a7:a9:
         07:c0:d1:34:78:1b:2c:d5:17:93:55:fe:57:34:14:24:95:4c:
         96:8d:2a:73:d1:f7:86:4f:02:dd:8a:09:0b:9e:91:dc:60:c6:
         18:b1:7d:e8:6b:a5:a6:ec:f7:0d:69:f0:fd:d9:ef:75:08:b7:
         fe:d1:4c:09:f4:cc:3d:67:05:80:6e:d2:d1:4e:ea:d2:4c:20:
         53:9f:b7:16:d4:28:1c:0a:92:f0:18:5e:9b:01:07:0d:fb:04:
         18:8a:0e:95:2d:95:4e:07:91:77:0e:bd:fd:77:36:6f:0d:b5:
         64:7d:cc:ad:69:68:57:30:dc:d7:a6:a2:4f:9f:39:06:fe:6a:
         8a:81:65:c9:bf:cb:80:bb:39:ca:d0:7c:7d:54:38:1d:86:4d:
         2c:e1:f9:86:1f:2a:6c:60:07:3f:ab:72:a0:c5:97:b3:6f:86:
         9a:27:90:6c:9b:75:a9:84:6e:dc:66:fd:07:c4:70:ef:b1:6c:
         26:e7:e7:89:e6:f9:5f:e9:6b:63:77:2d:b1:1b:b4:77:9d:42:
         e9:8b:af:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:16:32 2026 by rpki-client