Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
File:                     5zkzwIr5wC27DT6X8fkJM_U1b8E.mft (raw, json)
Hash identifier:          kWP1ERYb7zDXqy8da4VvOK55cTvNGF2Kt9JcDPMA1kw=
Subject key identifier:   20:86:E1:22:55:9E:DD:74:41:42:B7:6A:61:1D:71:13:AC:A1:5D:D5
Authority key identifier: E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1
Certificate issuer:       /CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
Certificate serial:       019D27A93B5334EE4C23664094ECB9223C6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
Manifest number:          1024
Signing time:             Thu 26 Mar 2026 01:01:35 +0000
Manifest this update:     Thu 26 Mar 2026 01:01:35 +0000
Manifest next update:     Fri 27 Mar 2026 01:01:35 +0000
Files and hashes:         1: 5zkzwIr5wC27DT6X8fkJM_U1b8E.crl (hash: +M3mWZCSIaOuigE9tM6a5QZfQaEJkH9DU74yHVeAfWI=)
                          2: uFf4NNFgYfbPreMK1NPSq7P_y9s.roa (hash: aCoqG0RsQJOyf3YmgdPoSCd4+nQQ0ofT4kMRhG0IKVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a9:3b:53:34:ee:4c:23:66:40:94:ec:b9:22:3c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73933c08af9c02dbb0d3e97f1f90933f5356fc1
        Validity
            Not Before: Mar 26 01:01:35 2026 GMT
            Not After : Mar 27 01:01:35 2026 GMT
        Subject: CN=2086e122559edd744142b76a611d7113aca15dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0b:74:0b:cc:2a:d8:4f:fd:e8:ec:7d:5c:c9:
                    df:8b:af:76:6f:c6:d3:c9:d3:4b:7c:13:50:ea:88:
                    3f:e3:8e:c9:ca:f2:19:01:da:e4:f2:08:2a:ee:67:
                    cc:d7:1b:92:fc:c4:ab:0b:b2:3f:1b:ba:ab:b4:73:
                    bb:ff:80:fa:74:c8:43:8b:22:91:61:c7:23:d6:41:
                    1e:55:9d:f4:ac:25:42:e3:23:49:96:1c:2d:e4:bb:
                    07:b2:96:d8:c3:e9:3b:62:34:5f:9b:d7:65:37:63:
                    43:39:24:1e:06:04:4a:ce:04:8b:f5:8f:d7:66:fa:
                    a6:8d:a6:a3:c7:33:72:50:89:4c:6d:44:89:8d:0f:
                    fa:f1:04:ad:c0:e4:7f:e1:22:01:3f:cc:a1:2a:0e:
                    c7:f6:33:50:31:92:da:53:1e:e6:b1:3c:78:27:98:
                    4b:42:47:8c:9c:5c:24:3d:d2:29:af:d9:59:7d:9b:
                    af:5a:b5:f3:d7:cb:39:94:0a:de:46:64:fe:ad:33:
                    ca:64:53:25:39:95:02:0f:66:52:56:4b:6d:5e:c7:
                    c8:82:f1:7d:57:2c:b5:b5:3d:0f:b0:ed:04:98:ea:
                    cc:8f:98:15:30:ae:2a:33:73:54:82:be:37:89:53:
                    b6:39:6b:e2:76:69:07:b1:84:3f:7b:14:0e:52:9a:
                    04:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:86:E1:22:55:9E:DD:74:41:42:B7:6A:61:1D:71:13:AC:A1:5D:D5
            X509v3 Authority Key Identifier:
                keyid:E7:39:33:C0:8A:F9:C0:2D:BB:0D:3E:97:F1:F9:09:33:F5:35:6F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zkzwIr5wC27DT6X8fkJM_U1b8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a95c14-2010-43f6-abc8-cba79af5006a/1/5zkzwIr5wC27DT6X8fkJM_U1b8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:f2:00:07:a1:ff:97:8b:e0:f3:fc:45:34:b2:76:45:62:
         d1:3b:89:99:e7:69:e0:c5:7c:1e:51:6a:4d:16:46:51:95:fa:
         fd:c7:47:16:f7:26:54:cb:c9:5e:2e:d4:45:c8:31:40:be:d9:
         bb:5b:b2:58:78:3a:e4:48:50:d8:7b:ef:49:b8:b4:8d:e7:54:
         c6:bf:d2:7d:26:a6:b4:5b:0e:13:e6:18:d3:5e:bc:20:a6:61:
         8c:04:4c:e5:d8:ec:83:79:9a:d6:04:94:03:01:f6:91:04:50:
         e5:04:97:80:18:61:6e:29:fa:47:59:9f:11:39:3b:ce:3b:bb:
         39:1f:45:52:df:20:7b:a8:56:44:0b:e0:ae:2a:54:0b:6b:40:
         af:b2:94:ea:30:66:bb:14:41:06:14:90:3a:85:b8:b8:1a:74:
         00:ba:0f:9b:6f:17:17:74:df:13:3b:44:0e:1b:ad:81:f1:fd:
         4b:45:4b:a1:d9:a5:31:54:e0:8d:55:0a:35:f9:28:f4:95:06:
         eb:03:c8:ae:fe:05:d6:f9:54:2f:7a:7e:a6:a9:98:44:75:37:
         3e:31:83:6b:1f:22:0e:61:e9:da:61:6d:a6:7b:01:6f:de:74:
         9f:1c:4b:82:2c:67:ec:de:d5:d0:29:a9:b0:24:d7:fa:0a:48:
         8a:ca:d7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:20 2026 by rpki-client