Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
File:                     5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json)
Hash identifier:          NOoxUCrl8GYWqS7C3rgMHG9WY2pGE9suViqsTVEyd0U=
Subject key identifier:   C4:C8:57:2A:71:CE:0C:52:69:E8:75:17:2C:C7:DC:1C:72:AF:82:77
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Certificate issuer:       /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial:       019D284DEA7C61F9E5846E325179408DBC7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
Manifest number:          118A
Signing time:             Thu 26 Mar 2026 04:01:27 +0000
Manifest this update:     Thu 26 Mar 2026 04:01:27 +0000
Manifest next update:     Fri 27 Mar 2026 04:01:27 +0000
Files and hashes:         1: 10snHBnMf0Kuhe7miu2KWZf7QKU.roa (hash: cMY4zBuFGSixWKDTcCmGLnVnrvMgI5u/opvWitB7358=)
                          2: 2pf-zTxW5BjaAWCTFG2DLvsJI6Y.roa (hash: 00cQ7niNdYupTzs8uevKOCewXa1tnY8zfKm3DEiLyz0=)
                          3: 4u_bkbKJNZM1KdwioLGPBiO50Ls.roa (hash: SjbryZU9niHHVvzZ1rzi0/PNl7uGm6ThQXUhvtkEr+g=)
                          4: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: 5UX+DmGXNZ6c9slHzZKl+U+pesQX/IQ9oL9eJ2wnUHs=)
                          5: 84fcfSOjnphSDe7dtZLQTGLV-OA.roa (hash: BdXfRqL149FaK3puBgQg9gvPoKtCvZPATYjPW+Iahhc=)
                          6: CZHwjRKRoezncj5wC2tcP7BId0k.roa (hash: NtnGWR67eyLICzLT2JOCuoqA4A2EyKFmQWPiA8KDgfI=)
                          7: I5Ro8QNM5FUk2LngF_2Kul4LuDI.roa (hash: 8512clIrIw3oxakt+AB8Wo3TQyURs+7mVgdMvgrfnqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:4d:ea:7c:61:f9:e5:84:6e:32:51:79:40:8d:bc:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
        Validity
            Not Before: Mar 26 04:01:27 2026 GMT
            Not After : Mar 27 04:01:27 2026 GMT
        Subject: CN=c4c8572a71ce0c5269e875172cc7dc1c72af8277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:2f:02:c6:0e:87:a4:b9:a6:f2:7b:fb:11:
                    4d:0d:7e:ec:b0:52:86:b6:b5:52:bc:36:24:4c:70:
                    d6:90:78:5b:30:2f:2f:cd:f0:de:c3:86:b5:fc:ed:
                    b0:8d:b4:7a:ff:9c:fa:39:3d:1a:8e:49:19:57:49:
                    a2:84:50:f8:ee:83:ca:d3:a6:30:29:83:4e:c1:0b:
                    f8:16:95:86:97:11:de:bb:15:2c:ef:d5:8d:4e:2c:
                    77:a8:67:66:26:8c:25:51:8a:85:0b:93:10:1a:fb:
                    c7:95:2f:73:90:3a:53:a0:0c:ac:6f:30:bb:88:c4:
                    7f:97:fc:2c:56:c3:d1:d3:6a:57:6d:98:8e:52:46:
                    51:f4:c5:36:93:94:41:bf:39:db:61:53:a0:73:f7:
                    1c:50:e1:49:1e:56:64:80:7c:c5:be:d1:1c:dc:d0:
                    b9:72:e8:00:73:7b:30:49:e8:27:bd:dc:d9:da:69:
                    46:81:22:68:78:59:8a:e4:0c:13:71:3f:b9:5e:29:
                    36:69:4f:3e:d9:16:8d:38:34:f2:59:b1:ca:77:bb:
                    4e:ea:46:fd:e2:20:07:2e:03:b4:61:ea:bc:e7:59:
                    74:03:4e:ca:95:d2:28:59:d0:17:fe:76:64:ec:57:
                    1a:c8:ed:ca:1d:c9:51:33:d0:82:b1:2f:9b:89:c7:
                    11:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C8:57:2A:71:CE:0C:52:69:E8:75:17:2C:C7:DC:1C:72:AF:82:77
            X509v3 Authority Key Identifier:
                keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:98:7c:c8:59:f7:23:13:12:ca:dc:ad:3c:39:16:df:a8:2b:
         8c:35:cc:06:35:7e:71:3f:32:58:72:aa:e9:7a:8c:fb:dd:98:
         4f:4e:ea:3b:36:67:ad:7e:04:84:4b:f5:a7:2b:10:38:bf:8d:
         f1:53:20:a2:a3:3e:31:76:f5:a9:c9:c3:73:ca:73:2b:4a:0b:
         c1:f1:f1:5f:08:16:7b:91:24:d7:11:f4:85:5f:f1:3b:83:61:
         ae:3a:9d:49:e0:31:0b:99:77:73:cf:ee:e3:64:82:a7:20:03:
         e3:50:7f:e1:1f:43:dd:02:f4:9d:d3:dc:63:df:aa:13:bc:d2:
         9c:45:cf:51:84:68:70:30:ea:c9:4a:de:04:5a:a9:70:2c:95:
         ad:f1:0f:2c:bb:30:bd:49:82:31:97:57:4d:69:ba:75:ad:ee:
         b7:be:49:fd:61:98:27:6e:d8:0a:06:be:6f:c6:be:04:66:91:
         8a:c8:ea:82:29:a8:cc:f6:a0:05:90:5e:f5:e0:a8:76:89:7c:
         ee:0f:ff:33:45:92:af:fc:13:f1:a4:a8:95:a8:9d:60:a0:eb:
         bc:12:8a:20:79:d7:46:18:ad:56:44:c2:93:0d:a0:f6:5b:e2:
         63:e4:02:82:a2:94:c1:9d:9a:4a:dd:12:a2:e1:7a:8a:b9:99:
         8d:da:35:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:13 2026 by rpki-client