Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
File:                     5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json)
Hash identifier:          EMs07umsQJMZ0/uHHhstfZ7q76+Ocqg/iWGG+oPbmlI=
Subject key identifier:   ED:94:FF:C8:27:22:41:A4:09:58:9D:EC:FD:3B:7D:9A:9E:9B:E0:68
Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Certificate issuer:       /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Certificate serial:       019D2771CBEEB2CA48CE706D6F4023E3FDF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
Manifest number:          0874
Signing time:             Thu 26 Mar 2026 00:01:02 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:02 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:02 +0000
Files and hashes:         1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: MAnLfEOPSLcn8OUIX7ufuLaCc8hjKrH3xCjr6z462WM=)
                          2: FImc6744QQwEQQovKDqizeaFC7c.roa (hash: sUbtOcLGidbBgbl2zkqKhUn8p3q1zKed/eARiNS1qdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:71:cb:ee:b2:ca:48:ce:70:6d:6f:40:23:e3:fd:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
        Validity
            Not Before: Mar 26 00:01:02 2026 GMT
            Not After : Mar 27 00:01:02 2026 GMT
        Subject: CN=ed94ffc8272241a409589decfd3b7d9a9e9be068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:45:2d:48:12:46:0d:5d:1c:7f:ba:0b:64:23:
                    61:df:23:62:8d:22:04:34:a7:39:b1:ef:11:30:5c:
                    67:27:53:a8:54:a9:57:d0:26:12:2c:0f:b0:29:ea:
                    1d:fd:93:d6:0d:08:a8:62:5c:31:61:cc:50:9f:dd:
                    0e:de:3e:6e:42:f7:cd:82:25:75:5d:de:68:9c:33:
                    95:2e:9a:68:fd:1f:94:49:bb:f7:1a:18:82:ed:07:
                    2c:c1:03:7b:82:0d:8d:e3:53:83:be:c7:d0:c2:da:
                    7b:d6:77:cf:f0:81:c2:98:2f:ed:f7:fe:f1:d6:e6:
                    67:c7:54:7d:d8:09:ce:47:f6:c7:87:eb:ca:be:3e:
                    2a:bb:22:0e:b5:bb:e4:7f:a8:e4:e3:cb:a9:53:ea:
                    8f:b1:b6:bd:aa:d9:4f:27:f8:ec:4d:52:b2:f4:9b:
                    bc:58:24:40:c0:ce:3f:11:6d:7a:2f:9d:f9:e0:63:
                    d4:07:a0:65:44:7e:26:62:e9:09:18:e5:2b:b9:e7:
                    8b:9a:da:1e:c9:4e:90:ad:a1:1b:2d:29:56:bb:75:
                    89:ae:4a:1a:e8:e2:4c:c0:93:df:03:11:1c:10:29:
                    3b:0d:1a:7f:21:57:e7:84:d5:5e:1e:40:9e:bc:1a:
                    38:e2:fc:af:f7:3f:e7:e0:73:6e:77:03:d8:a5:09:
                    81:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:94:FF:C8:27:22:41:A4:09:58:9D:EC:FD:3B:7D:9A:9E:9B:E0:68
            X509v3 Authority Key Identifier:
                keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:9e:a5:0f:04:80:63:64:5e:87:f9:b2:1f:1f:77:b6:ca:9d:
         3f:82:9a:cc:5a:5c:90:1b:99:a6:ab:73:c8:cb:f9:a3:40:12:
         0a:af:46:4c:06:d7:84:fb:b2:b2:5e:56:c0:08:45:aa:d4:6d:
         54:7f:d7:f8:34:d2:a9:77:ea:47:6f:b0:66:8f:32:f8:27:a9:
         e1:07:e5:06:f4:b9:51:a3:f8:13:63:9d:d5:c1:cc:47:fe:78:
         d1:3c:74:a5:5d:2b:e9:dc:ae:24:89:a8:4e:49:86:2f:9f:42:
         2a:75:94:4f:43:81:b0:a8:f1:c5:02:f7:cb:29:4b:a4:1e:fd:
         eb:36:f4:22:67:92:0d:d2:47:36:99:ba:ea:c5:62:9e:d9:1a:
         e3:ca:6b:11:07:89:a0:1f:11:46:02:0e:54:3f:2d:8a:38:c6:
         f9:7b:90:6b:72:51:21:d2:03:b6:1f:1c:61:2f:32:9c:72:d1:
         69:e6:7c:e7:96:cd:6f:58:85:fc:ad:b7:12:c3:1c:98:a2:71:
         ba:92:49:ae:3d:83:4a:b5:b0:71:5c:28:8f:98:9c:1f:f2:64:
         6c:4f:01:f3:13:14:77:b4:0e:e5:24:25:39:cb:92:7b:e7:6a:
         df:ce:8b:2a:39:3b:2d:4d:be:ff:4e:80:d2:6a:ef:c7:73:f8:
         f0:6c:63:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:50 2026 by rpki-client