Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File:                     5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier:          59216im4m5I02zMTz+SjMIe9MCSX9XiucIhqDCnHiQg=
Subject key identifier:   D9:26:DD:1C:EC:B2:F9:62:AF:33:ED:F4:E3:BC:AA:AB:BA:08:34:E8
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       019D284D94F9435A2C25890FBA8E62CD1D8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number:          0A55
Signing time:             Thu 26 Mar 2026 04:01:06 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:06 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:06 +0000
Files and hashes:         1: 3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa (hash: hXLyK65nAY5+Ut+o0gb/BjxofeYx4PkadbFG04BKn8s=)
                          2: 4RhMZahyPAwo146TEpPKu9ePT2I.roa (hash: tBGvizwGCjR2IcH4F8OLjMl+yMIqhcGRdbR2C5pIbnk=)
                          3: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: y58lnN2amOYpHGS2pxWQfMpAEYqvIyiBvmaLGi2y6NM=)
                          4: H4QLFR4-VWtTH3wvuaow12NPB4c.roa (hash: bdQlsc3BPSHO6Zn9QaadsNsV4OnEPV5+i5GaKzval08=)
                          5: VqQ8LXtIPe1fQZeq9wCKCKkt2vk.roa (hash: ZjsRHcqnbmBi1pKtOmtj/GMa3B6D/+8G+2zRtMncp6A=)
                          6: p3_p0oefeCWIGWl--B6scwMOl68.roa (hash: TzUMNS4PCBQmbQd3CE8J49kK3X/KRKK4UzkYkcKRrPc=)
                          7: x1IDat6YDBdzEhpue2RnoEodHRk.roa (hash: GNbqBnSl6BYmQm/dEuII/J8pPs8l3TWXFnBRJpdqWP0=)
                          8: zPofNoaI2RS9IpHftjHCFMeYgVg.roa (hash: GrlWnZ81qO00EP6m7P5v1VXEnw8zBrYaQ+SSPFWD5L0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:94:f9:43:5a:2c:25:89:0f:ba:8e:62:cd:1d:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Mar 26 04:01:06 2026 GMT
            Not After : Mar 27 04:01:06 2026 GMT
        Subject: CN=d926dd1cecb2f962af33edf4e3bcaaabba0834e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4d:54:0a:ac:9a:3f:6e:ab:08:f7:49:a0:e9:
                    e7:61:b6:2a:f7:c5:cd:ba:bf:dc:72:49:34:89:6a:
                    21:a9:8b:91:40:05:b4:77:c2:cc:88:97:c0:5b:f6:
                    17:0d:67:e2:65:b4:d1:d0:de:3c:16:0f:19:9c:a9:
                    5a:a9:e8:fb:9c:e0:6f:9e:17:99:9d:04:66:27:d4:
                    46:08:e6:3d:61:fe:10:39:46:81:2e:de:a0:bb:09:
                    ff:d5:d0:57:5f:05:37:2e:3d:d9:6c:14:2a:d0:10:
                    70:19:65:6f:4e:23:2c:70:80:d4:af:2f:2a:bf:81:
                    8d:8e:c1:86:a0:d8:06:70:28:69:e1:40:0c:69:d2:
                    4d:33:18:a4:00:8a:ad:c1:c2:7e:5c:39:db:57:cd:
                    1e:b3:64:8e:e1:a3:57:ca:30:a6:24:83:1d:63:50:
                    ee:55:a6:88:fd:7c:fe:09:6e:10:40:32:8c:9c:b9:
                    79:20:bd:f3:0b:b5:57:c4:19:0d:24:43:ad:70:f8:
                    f1:e9:52:66:c7:17:ee:ef:53:55:04:5d:4a:cc:0b:
                    e7:ae:a6:ef:c3:eb:33:63:ac:86:25:45:fa:67:26:
                    56:fc:4b:18:d6:f2:0b:66:c4:dd:1d:b5:45:37:c0:
                    81:e5:76:72:b3:fb:20:92:36:d8:b2:6e:0b:47:27:
                    23:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:26:DD:1C:EC:B2:F9:62:AF:33:ED:F4:E3:BC:AA:AB:BA:08:34:E8
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:66:d5:06:f2:db:b8:f8:30:a4:2f:ac:93:55:d1:f6:0d:fd:
         b3:33:84:37:d4:e9:e1:b5:db:33:b2:1f:10:cc:2c:45:59:04:
         7e:c1:dd:c3:e9:b3:19:00:64:6c:59:b5:73:1f:32:77:08:98:
         db:ea:88:c6:4b:69:0b:4c:59:a3:f3:ba:47:9d:2d:e7:4c:50:
         d0:7e:f0:6b:05:d1:98:bb:93:7c:ee:4c:17:b7:4d:ee:c7:48:
         3c:37:ff:df:56:60:94:c9:d5:e8:2b:56:2d:d3:6c:7b:42:a9:
         8e:d5:28:b5:5f:01:b3:7f:fb:c9:a5:80:d5:b1:30:1f:58:3d:
         58:ea:c2:57:9b:ce:8f:5a:54:a5:e6:b8:e2:49:35:e7:5c:7f:
         e7:cf:ea:74:64:46:97:52:59:25:34:d1:67:56:67:b0:d0:3a:
         5d:4b:83:4d:2d:23:8d:37:f5:ab:3e:b6:92:61:2f:1f:b2:80:
         c2:f0:70:e7:72:28:da:fd:d0:77:6b:6b:a1:14:5a:fb:87:69:
         85:5c:9f:f1:aa:d9:29:92:10:73:b3:4b:40:0f:b3:bb:61:3b:
         ec:92:2e:de:a3:46:14:dd:4c:5d:14:3a:93:0c:38:09:17:dc:
         44:fd:fb:f2:38:44:b1:95:09:12:18:77:2b:79:30:4c:0f:f6:
         9d:fe:67:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:46 2026 by rpki-client