Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
File:                     5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft (raw, json)
Hash identifier:          tYPoN7Nw8CZyUL4VdfEPl4YiUgXzET89JxtD1eTjylc=
Subject key identifier:   33:F3:4C:40:A0:B8:75:4D:3C:23:F7:5E:2D:1B:26:A6:EE:0D:BD:E3
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Certificate issuer:       /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial:       019D26CCD81AC51067771C39707937D75C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
Manifest number:          188C
Signing time:             Wed 25 Mar 2026 21:00:51 +0000
Manifest this update:     Wed 25 Mar 2026 21:00:51 +0000
Manifest next update:     Thu 26 Mar 2026 21:00:51 +0000
Files and hashes:         1: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl (hash: SNpIhpT8CVrrAiDxrBVC8MffXsoW/rJMO1PxtyMPy8U=)
                          2: pGPIjgXbqa3E4qtB9K-nnRy5nwE.roa (hash: r9BkXCN77JVUwf1Rk1CC7NUcp98tk3M5Xo6C9+zBv3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:cc:d8:1a:c5:10:67:77:1c:39:70:79:37:d7:5c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
        Validity
            Not Before: Mar 25 21:00:51 2026 GMT
            Not After : Mar 26 21:00:51 2026 GMT
        Subject: CN=33f34c40a0b8754d3c23f75e2d1b26a6ee0dbde3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:71:81:2b:c9:49:af:78:8c:e3:3e:61:98:
                    44:af:32:76:b3:d0:12:59:24:f8:77:64:c0:10:ac:
                    af:69:39:92:d8:db:50:16:9e:a4:7e:47:6f:16:55:
                    30:98:67:b1:e8:9c:f8:84:30:1d:9e:ec:76:5a:fc:
                    77:a4:ea:01:30:23:4f:25:70:f6:75:ec:e4:e4:b6:
                    70:a6:b6:94:8d:ba:bb:d1:48:08:00:dc:8c:7d:c3:
                    68:78:3f:35:86:da:b0:3f:50:62:7e:ab:be:38:c7:
                    f8:98:d0:94:67:bb:a1:fa:cf:dd:c2:2b:62:95:17:
                    7b:6f:c9:47:c4:ca:0f:1f:84:22:35:b2:13:29:df:
                    5a:4a:00:0d:f2:af:dd:44:6e:84:97:d7:85:4b:9a:
                    7f:df:03:d1:f8:7d:02:b1:61:a9:ff:a4:a0:3f:ec:
                    c7:44:62:d4:9c:60:b7:92:98:f7:d7:83:5f:7b:4b:
                    a9:26:f8:bb:51:7a:04:fa:8d:9e:8d:a5:dc:12:de:
                    78:d3:19:84:e9:f5:97:f0:7a:73:c7:ff:8c:82:6b:
                    1a:fe:9b:61:88:0d:5c:9f:1a:82:26:82:09:68:ad:
                    a7:be:01:62:77:95:54:41:8c:38:12:54:c7:9e:e3:
                    79:bd:42:8d:d7:6b:b3:58:50:f6:01:dc:e2:f5:62:
                    29:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F3:4C:40:A0:B8:75:4D:3C:23:F7:5E:2D:1B:26:A6:EE:0D:BD:E3
            X509v3 Authority Key Identifier:
                keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:64:cf:9a:3f:64:2f:d8:e9:28:e3:85:cb:07:1b:cd:07:c6:
         10:eb:60:47:cc:71:e1:66:1f:8a:b0:12:e7:f1:39:9b:c3:77:
         44:2f:d2:13:c0:3e:31:09:6c:34:a7:e6:10:88:73:e0:1f:7f:
         9b:e5:7a:5e:4e:a7:ef:69:09:22:a6:dd:41:6c:29:04:61:7e:
         ed:fb:8a:62:d4:8b:18:5f:f1:5e:74:92:38:95:f6:a6:1f:50:
         2b:5c:ba:84:83:43:e7:5d:b6:98:b4:1e:5d:87:2c:24:53:54:
         c6:dc:99:85:6d:1b:11:6a:b1:0c:2d:47:05:a5:48:b4:82:53:
         91:98:15:a6:27:53:22:5b:0d:e2:00:ed:d1:bf:c2:f1:6b:42:
         8f:27:cc:f3:87:8f:1d:8f:75:52:03:8c:b4:37:8c:a7:f4:5f:
         92:f3:4c:cb:68:ca:55:8a:76:73:78:d6:bb:26:d2:f4:ec:0a:
         dd:f6:b3:a0:f4:78:ea:f5:ed:b5:46:35:f5:05:29:b1:b2:72:
         57:fa:cf:17:40:19:45:f6:03:96:a9:2e:e5:7f:43:b1:db:ef:
         6c:0b:67:bc:79:a4:d5:1f:a7:9f:75:79:02:d0:bf:c3:9a:63:
         0a:d5:9d:77:83:aa:46:91:5a:8c:9d:b9:cb:00:17:ec:4e:3f:
         d4:4e:d7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:31 2026 by rpki-client