Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File:                     5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier:          Lk/DWTV837dUegTYmfH+sk5+ZGPyxNDlUZ6NLqrtKkQ=
Subject key identifier:   5B:7B:CE:06:34:A5:B6:FB:F6:C3:93:FD:F0:FE:85:AB:F8:4D:30:0A
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       019E1D906DAD6AD05E338C757337864E9DC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number:          0AD4
Signing time:             Tue 12 May 2026 19:01:04 +0000
Manifest this update:     Tue 12 May 2026 19:01:04 +0000
Manifest next update:     Wed 13 May 2026 19:01:04 +0000
Files and hashes:         1: 3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa (hash: hXLyK65nAY5+Ut+o0gb/BjxofeYx4PkadbFG04BKn8s=)
                          2: 4RhMZahyPAwo146TEpPKu9ePT2I.roa (hash: tBGvizwGCjR2IcH4F8OLjMl+yMIqhcGRdbR2C5pIbnk=)
                          3: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: wMP0usR1iUJ+R8Bu+dySyEqMBYnE7wLDFOUg4gxmFCA=)
                          4: H4QLFR4-VWtTH3wvuaow12NPB4c.roa (hash: bdQlsc3BPSHO6Zn9QaadsNsV4OnEPV5+i5GaKzval08=)
                          5: VqQ8LXtIPe1fQZeq9wCKCKkt2vk.roa (hash: ZjsRHcqnbmBi1pKtOmtj/GMa3B6D/+8G+2zRtMncp6A=)
                          6: p3_p0oefeCWIGWl--B6scwMOl68.roa (hash: TzUMNS4PCBQmbQd3CE8J49kK3X/KRKK4UzkYkcKRrPc=)
                          7: x1IDat6YDBdzEhpue2RnoEodHRk.roa (hash: GNbqBnSl6BYmQm/dEuII/J8pPs8l3TWXFnBRJpdqWP0=)
                          8: zPofNoaI2RS9IpHftjHCFMeYgVg.roa (hash: GrlWnZ81qO00EP6m7P5v1VXEnw8zBrYaQ+SSPFWD5L0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:6d:ad:6a:d0:5e:33:8c:75:73:37:86:4e:9d:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: May 12 19:01:04 2026 GMT
            Not After : May 13 19:01:04 2026 GMT
        Subject: CN=5b7bce0634a5b6fbf6c393fdf0fe85abf84d300a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:2f:3d:15:d8:87:ab:4e:1e:bf:79:78:93:
                    63:c4:52:b6:b5:85:77:a3:6d:2e:ef:52:90:e5:5a:
                    f3:05:c3:d3:41:76:c9:6c:d1:a9:75:e0:2a:97:81:
                    0e:0f:0c:11:e6:25:91:3b:55:59:66:b8:2a:47:11:
                    16:c8:9a:cf:96:1f:b2:f7:a0:33:09:77:e8:d7:6e:
                    59:97:1a:c3:93:10:af:73:65:0b:e7:9a:f0:f0:c7:
                    5b:05:d3:1c:71:ce:b9:dc:c6:db:a6:0a:15:3b:b9:
                    2e:a3:23:e8:45:43:29:d4:a8:5f:7f:63:6d:91:8f:
                    aa:a1:88:dc:1a:2b:13:15:3c:d9:3c:94:5e:f7:46:
                    97:0f:75:25:c9:8a:4d:92:30:3a:14:eb:67:60:03:
                    da:31:76:35:49:65:96:6d:eb:55:8c:27:9e:ec:b5:
                    a2:42:b3:f8:4d:65:5b:64:49:f7:ee:b6:27:fd:40:
                    55:1c:02:bc:e3:16:3e:60:cf:21:c3:7d:d0:61:2f:
                    ed:4c:a6:a3:6b:69:80:c9:4c:48:1e:9c:fd:bd:2f:
                    3e:5a:e7:c9:44:80:c1:b4:2a:56:b7:e2:54:77:82:
                    d7:1d:89:7e:36:1a:e3:ce:b2:68:cb:3a:da:ab:b2:
                    3b:11:46:7d:75:4e:69:af:4b:1c:21:42:88:74:88:
                    3f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7B:CE:06:34:A5:B6:FB:F6:C3:93:FD:F0:FE:85:AB:F8:4D:30:0A
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:58:ce:f7:7d:04:5e:6a:e0:9d:95:b6:f2:6f:08:58:50:
         c5:fb:a7:b7:70:d1:7f:55:54:99:ea:d5:85:be:6a:48:d6:50:
         39:f5:ec:b0:a6:5e:87:8e:42:b4:0a:aa:7e:45:ef:47:ea:7b:
         43:8d:6c:91:f2:30:c7:7f:f0:75:56:67:c8:0a:59:28:6d:79:
         1e:f5:34:bb:6f:c4:9c:70:bf:61:9c:c8:98:29:ad:51:59:1e:
         c6:2e:0e:b5:e8:93:89:df:f4:de:0b:b0:1b:f6:68:27:ea:75:
         22:17:c8:0c:d5:39:4e:a7:ed:95:70:cf:68:8f:e9:2a:cf:5c:
         f8:58:ba:07:e9:16:4a:2f:15:fb:b7:46:0a:23:df:3c:28:fa:
         41:42:90:4d:c7:11:dc:f1:6a:5f:61:63:3f:b7:be:a0:42:46:
         5b:76:b1:9f:1c:af:78:b7:ae:c0:70:57:cf:3e:3c:55:95:b4:
         51:f0:7c:6f:a2:75:0d:89:81:f1:26:3e:7f:d3:17:d1:c1:87:
         2b:0d:ad:d8:1a:27:f7:a9:c0:c9:2d:7e:83:eb:e6:29:d1:95:
         89:73:63:37:35:67:e9:53:a9:cf:54:b6:6d:df:8f:65:b0:18:
         1e:3b:6b:ef:07:e4:5c:01:39:d0:f4:a7:2c:80:15:9b:b4:2c:
         d7:4d:6c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:49 2026 by rpki-client