Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
File:                     x5p8pEAn0uWtOJ8WntFZNteFEWY.mft (raw, json)
Hash identifier:          neVSHjw96Kpf/xAd9OIk/YQ8pou0JG7kcHwVLxSUwZc=
Subject key identifier:   E4:0C:C6:B2:A4:12:12:34:8C:C1:6D:A3:EE:49:9E:A7:00:38:F0:30
Authority key identifier: C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66
Certificate issuer:       /CN=c79a7ca44027d2e5ad389f169ed15936d7851166
Certificate serial:       019D2696308469BB24C002D3C95B2222DFBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
Manifest number:          0EAE
Signing time:             Wed 25 Mar 2026 20:01:10 +0000
Manifest this update:     Wed 25 Mar 2026 20:01:10 +0000
Manifest next update:     Thu 26 Mar 2026 20:01:10 +0000
Files and hashes:         1: qzSmIaL5OGBdTdVlMvJi_bUV2t4.roa (hash: G/QX/MIiigz0ShuLcId897JAOScEU/rXCaDf81F1fIY=)
                          2: x5p8pEAn0uWtOJ8WntFZNteFEWY.crl (hash: GOT0zON6WXmlQbPHv3N8wK5XjaBVd3/2tdXBY5LruEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:96:30:84:69:bb:24:c0:02:d3:c9:5b:22:22:df:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c79a7ca44027d2e5ad389f169ed15936d7851166
        Validity
            Not Before: Mar 25 20:01:10 2026 GMT
            Not After : Mar 26 20:01:10 2026 GMT
        Subject: CN=e40cc6b2a41212348cc16da3ee499ea70038f030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:d0:0e:cd:f5:f5:f9:25:58:22:c2:a0:7d:
                    da:21:ef:2e:96:93:14:5b:e5:08:db:ea:1b:5b:e2:
                    10:c7:0a:e2:8a:63:9c:34:fb:e9:27:70:b6:e3:61:
                    7a:3a:48:ed:1b:2a:05:ad:78:37:57:63:b9:18:1f:
                    e5:13:cf:88:f7:58:7b:f2:4f:1f:51:eb:de:3a:28:
                    0a:9c:64:fb:06:5c:65:0f:99:f1:98:07:0e:75:4e:
                    00:cc:0d:73:75:b1:c6:fa:67:fe:10:31:c2:18:98:
                    42:0d:24:73:7e:39:ed:61:0d:bc:fb:3f:a8:07:71:
                    da:a5:61:ad:c1:b7:54:07:6a:86:dc:ac:77:d5:d4:
                    a7:53:c9:35:8f:c9:04:2b:91:5a:54:a5:47:f1:c1:
                    3e:6d:ef:74:c0:9c:b4:db:55:88:8e:a6:26:95:50:
                    85:f4:2d:cb:54:96:5a:d0:ba:34:c4:4c:3d:14:22:
                    35:aa:99:02:35:71:50:e9:89:0d:90:f0:c6:50:f8:
                    15:cc:29:fa:27:bf:1f:a8:f9:fa:d3:b5:45:85:fd:
                    d5:93:5c:7b:34:09:f0:a1:02:41:b8:a2:c6:3b:db:
                    fc:c5:0a:61:d0:00:ba:aa:0c:4f:f5:43:4e:c6:dc:
                    7c:88:a6:ae:7e:e3:3e:43:7b:b7:17:b6:bf:02:78:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0C:C6:B2:A4:12:12:34:8C:C1:6D:A3:EE:49:9E:A7:00:38:F0:30
            X509v3 Authority Key Identifier:
                keyid:C7:9A:7C:A4:40:27:D2:E5:AD:38:9F:16:9E:D1:59:36:D7:85:11:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5p8pEAn0uWtOJ8WntFZNteFEWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/e53313-ba6a-4e81-ba7b-6715f58ceebf/1/x5p8pEAn0uWtOJ8WntFZNteFEWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cd:aa:5a:b7:69:81:86:21:5d:e6:1a:5f:c1:b5:45:7a:12:
         9c:c8:11:00:6d:75:c5:ca:b0:03:77:0e:61:ce:0c:9f:8d:4b:
         f8:62:ee:7b:5e:75:d2:b3:81:e1:3f:27:f3:e6:07:49:c0:c4:
         51:6d:55:31:db:fa:8e:af:a3:62:10:e2:7f:07:cb:c1:2f:48:
         c0:28:c3:e9:db:1d:33:5d:b8:6b:eb:cc:62:82:e1:21:9a:b1:
         4d:ea:15:b0:9b:c0:82:f8:4d:9a:e8:47:4a:5b:0c:ff:d8:29:
         0a:df:14:07:19:08:fc:5a:c2:89:e5:78:35:94:d4:7d:83:83:
         ae:14:6f:59:59:35:c2:5d:4d:60:7b:d4:83:e9:a4:9e:08:52:
         5f:42:a4:4b:5d:eb:ec:62:58:8b:e2:a5:68:9a:63:0e:ec:fc:
         0c:43:2b:4a:45:dc:b7:e0:06:d8:47:5a:e3:a6:98:c2:7d:59:
         47:aa:22:fe:c8:08:84:a2:d5:02:ab:17:c8:aa:81:f1:72:49:
         d8:52:bb:f0:e1:37:44:98:0e:d8:be:f9:a7:66:dd:53:24:62:
         ff:8b:3a:5c:65:22:61:bd:29:0b:8a:cc:d2:ff:aa:a5:58:cc:
         b8:ab:73:ee:8e:4d:83:ca:e9:91:6d:b0:a3:c2:ad:6e:cf:a9:
         a8:66:43:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:43 2026 by rpki-client