Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File:                     V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier:          XTu6LamWLHzNSNJmzghMmtWcNUqRGfHfbf2hV0NQqgU=
Subject key identifier:   EF:F9:8B:58:F4:53:D3:57:F3:2B:F0:DF:75:7D:97:BE:C8:2C:9B:83
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer:       /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial:       019D329AB82FC9AA4C1CD11EC0BB74FEB315
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number:          1577
Signing time:             Sat 28 Mar 2026 04:01:33 +0000
Manifest this update:     Sat 28 Mar 2026 04:01:33 +0000
Manifest next update:     Sun 29 Mar 2026 04:01:33 +0000
Files and hashes:         1: S-Zk0ObYtJMIz656nLDAOtkUtx8.roa (hash: +uIO+SHw3q58WAdHwKwHZ+9+iLe/2WT3m6O2zlQ0zeI=)
                          2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: qMUgJabuSSv9qxO24x8B1dB5D2pBoX9gTmUaZjgAIkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Mar 2026 00:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:32:9a:b8:2f:c9:aa:4c:1c:d1:1e:c0:bb:74:fe:b3:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
        Validity
            Not Before: Mar 28 04:01:33 2026 GMT
            Not After : Mar 29 04:01:33 2026 GMT
        Subject: CN=eff98b58f453d357f32bf0df757d97bec82c9b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:67:e4:78:0a:64:27:42:18:8e:9b:94:74:ea:
                    d6:76:53:87:14:d4:3c:87:4d:ef:8b:0c:8d:b4:e1:
                    0b:0e:26:81:69:e7:47:7f:4d:7f:09:12:0b:6e:f6:
                    cb:f0:0f:8b:ee:4c:a4:ca:76:9c:b0:a1:b7:f3:36:
                    91:88:3f:e6:59:e2:92:e3:76:60:b4:7c:20:d5:d7:
                    86:ad:39:5d:25:d1:2e:87:63:5e:11:eb:89:9e:43:
                    32:f8:ec:05:8a:62:83:8a:26:7d:68:5d:cb:a8:06:
                    9a:2e:73:a6:d2:ec:93:c9:ec:d8:02:c8:47:2b:9a:
                    49:05:77:18:06:fe:57:5a:a3:79:94:bc:b3:52:20:
                    8f:ab:94:1b:50:a3:a1:4b:c3:99:ac:62:8a:45:48:
                    db:d6:9d:c1:5b:4d:37:82:fa:52:54:0c:11:6d:72:
                    19:bb:79:bb:37:c1:4d:69:7b:a2:31:66:a4:20:a4:
                    90:3b:b8:0c:86:98:a6:22:e7:c5:30:18:9e:e8:7f:
                    7e:c3:dd:44:f5:62:53:c4:56:c9:82:95:f1:c7:1f:
                    01:27:3f:15:58:84:3b:27:1d:6b:88:24:7f:c6:26:
                    f3:29:8b:fd:a2:a1:2d:73:04:42:85:f4:86:9f:4e:
                    a3:06:11:f8:28:0d:46:a3:69:a6:eb:41:95:ad:eb:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F9:8B:58:F4:53:D3:57:F3:2B:F0:DF:75:7D:97:BE:C8:2C:9B:83
            X509v3 Authority Key Identifier:
                keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:70:63:da:12:96:6f:d9:5e:aa:1e:fb:bd:ca:2b:f5:07:e5:
         be:b8:9b:b7:8a:0c:9f:8a:85:43:cd:50:e3:c7:46:04:c5:b1:
         cb:85:f3:db:e2:03:85:3e:ff:23:2d:2b:54:f9:e0:64:be:cf:
         22:e9:fd:7e:e2:d0:fd:c0:3d:8b:c6:d3:79:6f:16:2e:11:0c:
         ae:ed:ac:71:57:b7:ac:c4:8a:0f:32:1b:de:ec:a4:7e:bf:ee:
         62:57:76:9b:0a:95:c0:9b:22:fa:fa:99:a2:88:5c:41:a0:85:
         a0:69:bd:93:11:82:d8:51:09:12:3d:d3:fc:2e:2b:3f:bd:9a:
         e4:f5:82:58:3a:a9:e5:57:3e:f3:7f:78:4c:2e:24:9e:08:23:
         d1:f9:8d:f6:a0:9e:ce:91:44:53:73:c0:6e:bc:1d:22:79:85:
         94:6c:72:92:13:ca:07:4f:54:e4:02:ad:ac:dc:53:45:16:2e:
         d9:cd:1c:0e:3a:42:4e:62:a6:59:fb:2e:88:83:53:d5:a5:df:
         fe:67:3f:fe:19:53:25:b4:f4:3b:41:5a:06:5b:11:fe:4d:8a:
         d0:54:50:88:a6:1f:12:65:8d:01:11:ea:48:11:9b:08:c5:d0:
         54:77:52:53:62:75:9d:10:a6:74:13:f1:bd:ed:0d:0b:73:4a:
         47:34:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:57 2026 by rpki-client