Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
File:                     53e8jj7CUM6F-5CRPCxJBRBD68U.mft (raw, json)
Hash identifier:          n5pjNIMn2n/xAuDaJ2nVsXo8BOAXATT2lQwnvb50QP4=
Subject key identifier:   E3:39:69:6E:7E:DC:DA:3D:13:1F:79:CA:E6:92:3F:05:FC:43:2B:98
Authority key identifier: E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5
Certificate issuer:       /CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
Certificate serial:       019D27E005125311202BA31456CF8FEC0E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
Manifest number:          0F62
Signing time:             Thu 26 Mar 2026 02:01:25 +0000
Manifest this update:     Thu 26 Mar 2026 02:01:25 +0000
Manifest next update:     Fri 27 Mar 2026 02:01:25 +0000
Files and hashes:         1: 53e8jj7CUM6F-5CRPCxJBRBD68U.crl (hash: jff/yAB4H/2osoezV/uPE2XnMdlWF1DduhU4lfPIXrQ=)
                          2: I8DLFrJ2msVqUEuzFno0D_irlA8.roa (hash: 1h2HkVpROX6HNV7YxSDEIynkaKQ12aPkXI4aYGmsPhM=)
                          3: RvyFZGbQbeijXMu4H6shnCgImmo.roa (hash: DYIYWvmC8bzZdyJiE46TNQl9vdrwG3VWwrzYZPcGmag=)
                          4: ozaWo0KwzXlTDDMNGIN9Oh6_1G8.roa (hash: KZJSx3qW0uUiecQVsBeBVEHaMiHc39LHJYCjD72U8wU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:e0:05:12:53:11:20:2b:a3:14:56:cf:8f:ec:0e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e777bc8e3ec250ce85fb90913c2c49051043ebc5
        Validity
            Not Before: Mar 26 02:01:25 2026 GMT
            Not After : Mar 27 02:01:25 2026 GMT
        Subject: CN=e339696e7edcda3d131f79cae6923f05fc432b98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:73:a0:24:c3:5c:46:40:0f:9d:e8:8d:5d:
                    c3:fa:7a:9e:3d:fd:b5:92:8e:89:a0:2a:19:bb:b6:
                    bd:68:07:db:44:c5:c1:00:2b:5b:34:3a:ee:75:56:
                    72:66:8d:fb:01:0f:22:42:2f:78:77:4d:e1:ad:cc:
                    ca:35:8f:3b:5a:71:f2:15:7f:f5:96:98:35:d0:c6:
                    1f:96:bc:ae:a6:3b:b9:97:6f:bb:25:01:a0:4e:29:
                    19:ce:99:2f:d3:af:7e:d8:a8:f8:49:89:9c:04:a6:
                    1c:55:a5:ef:88:f2:2a:cf:3f:1b:92:ac:80:4b:e7:
                    5b:73:1e:9a:de:48:74:35:6c:8b:20:cc:93:c7:97:
                    f5:1d:db:b0:86:44:93:47:7b:39:5d:2e:f1:24:5c:
                    d0:af:68:ae:5b:3d:0b:9c:0a:65:c1:cf:be:91:50:
                    e4:46:6a:b9:28:aa:31:07:e2:c7:7a:5c:47:01:f9:
                    7f:26:2a:c7:2f:68:8a:86:e2:ac:ac:06:cc:c7:7e:
                    46:1f:7d:94:28:c8:30:76:49:eb:78:62:fd:bd:4d:
                    2b:e6:79:8a:2a:08:29:73:f7:55:dd:d4:47:e5:22:
                    55:7c:65:47:2d:e1:29:8f:41:03:97:8c:4f:eb:3d:
                    b1:3e:95:96:7a:67:4e:21:e3:55:4b:e7:41:d9:bf:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:39:69:6E:7E:DC:DA:3D:13:1F:79:CA:E6:92:3F:05:FC:43:2B:98
            X509v3 Authority Key Identifier:
                keyid:E7:77:BC:8E:3E:C2:50:CE:85:FB:90:91:3C:2C:49:05:10:43:EB:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/53e8jj7CUM6F-5CRPCxJBRBD68U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/319c7b-28c6-49a3-ac1b-fae0e5d2eebf/1/53e8jj7CUM6F-5CRPCxJBRBD68U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ee:ed:51:17:00:e9:fb:0e:76:e5:33:d8:83:7d:70:de:e8:
         4a:b7:e8:76:3d:16:59:0b:02:0d:b6:f3:66:8f:32:a6:c3:40:
         29:11:86:b6:20:d7:26:13:03:3c:fd:a4:12:da:4c:d1:95:f0:
         6a:4c:ed:cb:18:aa:d9:da:1b:3c:22:be:25:fb:84:95:45:c1:
         6a:ed:cb:fd:32:fd:1f:de:95:00:48:ca:89:ef:5d:8c:ae:f0:
         0c:88:65:66:2a:99:df:b7:5c:82:f0:57:94:1e:79:2a:57:98:
         a5:87:a0:9d:03:8c:68:27:83:30:60:18:8c:1e:7b:56:c1:1d:
         1e:72:71:43:88:21:1f:54:d7:43:d6:cd:6d:22:d2:ad:66:3b:
         82:0c:57:cf:c4:8b:13:21:44:e8:3a:bf:5d:14:e9:d9:23:b5:
         53:88:9c:94:6b:41:b7:f4:37:db:c1:76:66:8d:1d:f0:0c:62:
         1d:d4:cc:a0:a8:0a:5a:04:a3:fd:9c:4c:17:e9:1f:dd:64:06:
         56:04:01:03:56:a3:4c:4c:b9:01:d7:eb:90:4a:48:e6:81:f9:
         c3:d1:90:b5:49:9e:fc:cd:b6:ef:a0:5a:ea:81:76:e7:19:ab:
         e0:e2:63:42:fa:f9:49:4a:7b:a1:28:d2:ea:09:1f:4a:81:60:
         92:41:c1:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4AUSUxEgK6MUVs+P7A52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NzdiYzhlM2VjMjUwY2U4NWZiOTA5MTNjMmM0OTA1MTA0
M2ViYzUwHhcNMjYwMzI2MDIwMTI1WhcNMjYwMzI3MDIwMTI1WjAzMTEwLwYDVQQD
EyhlMzM5Njk2ZTdlZGNkYTNkMTMxZjc5Y2FlNjkyM2YwNWZjNDMyYjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc9zoCTDXEZAD53ojV3D+nqePf21
ko6JoCoZu7a9aAfbRMXBACtbNDrudVZyZo37AQ8iQi94d03hrczKNY87WnHyFX/1
lpg10MYflryupju5l2+7JQGgTikZzpkv069+2Kj4SYmcBKYcVaXviPIqzz8bkqyA
S+dbcx6a3kh0NWyLIMyTx5f1HduwhkSTR3s5XS7xJFzQr2iuWz0LnAplwc++kVDk
Rmq5KKoxB+LHelxHAfl/JirHL2iKhuKsrAbMx35GH32UKMgwdknreGL9vU0r5nmK
Kggpc/dV3dRH5SJVfGVHLeEpj0EDl4xP6z2xPpWWemdOIeNVS+dB2b++4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOM5aW5+3No9Ex95yuaSPwX8QyuYMB8GA1UdIwQY
MBaAFOd3vI4+wlDOhfuQkTwsSQUQQ+vFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWIt
ZmFlMGU1ZDJlZWJmLzEvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zMTljN2ItMjhjNi00OWEzLWFjMWItZmFlMGU1ZDJlZWJm
LzEvNTNlOGpqN0NVTTZGLTVDUlBDeEpCUkJENjhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAme7tURcA
6fsOduUz2IN9cN7oSrfodj0WWQsCDbbzZo8ypsNAKRGGtiDXJhMDPP2kEtpM0ZXw
akztyxiq2dobPCK+JfuElUXBau3L/TL9H96VAEjKie9djK7wDIhlZiqZ37dcgvBX
lB55KleYpYegnQOMaCeDMGAYjB57VsEdHnJxQ4ghH1TXQ9bNbSLSrWY7ggxXz8SL
EyFE6Dq/XRTp2SO1U4iclGtBt/Q328F2Zo0d8AxiHdTMoKgKWgSj/ZxMF+kf3WQG
VgQBA1ajTEy5AdfrkEpI5oH5w9GQtUme/M2276Ba6oF25xmr4OJjQvr5SUp7oSjS
6gkfSoFgkkHBog==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:38 2026 by rpki-client