Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
File:                     5I2jNbByU21Y5rfN9M2xZEW8vDM.mft (raw, json)
Hash identifier:          JVZIYwEE6x0SfJvQlCTAATd3uLDGFwNRF7m2e/ZhZmc=
Subject key identifier:   25:74:FB:45:95:0F:7A:B3:A9:77:72:83:B3:33:01:7D:AA:79:FE:9D
Authority key identifier: E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33
Certificate issuer:       /CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
Certificate serial:       019D2772546ED4B646367F129F6CB808E10A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
Manifest number:          0947
Signing time:             Thu 26 Mar 2026 00:01:37 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:37 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:37 +0000
Files and hashes:         1: 5I2jNbByU21Y5rfN9M2xZEW8vDM.crl (hash: ScnW+yd3/+w6UnS8MbEZ61/ljSCgVuHQwM/Y/UDGd94=)
                          2: Kk4LDgdB-B800f9u3tWCJ7yc42M.roa (hash: NS3W/PHz2/PR1iY3gv8q+ys5JQiUE/3iGtRiW45w9jQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:54:6e:d4:b6:46:36:7f:12:9f:6c:b8:08:e1:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e48da335b072536d58e6b7cdf4cdb16445bcbc33
        Validity
            Not Before: Mar 26 00:01:37 2026 GMT
            Not After : Mar 27 00:01:37 2026 GMT
        Subject: CN=2574fb45950f7ab3a9777283b333017daa79fe9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:88:61:b1:14:6f:fc:72:76:0d:42:f5:db:
                    7b:3b:2b:93:87:65:b7:20:65:a9:e6:af:2e:a5:58:
                    37:34:38:1a:d4:10:18:17:a6:88:21:48:a5:6b:24:
                    ae:72:91:55:d4:21:dc:cf:51:71:26:fa:14:e3:94:
                    63:31:eb:73:61:a2:3e:79:75:84:09:58:b4:69:e8:
                    37:6a:e0:0f:1f:64:1f:8b:ba:a7:ec:a5:65:56:8a:
                    9e:5b:bb:cd:c1:91:25:d0:99:19:bd:14:34:38:5a:
                    91:20:22:fd:d2:6f:cc:06:9d:24:68:b7:c9:b6:29:
                    46:99:36:e7:fd:15:78:63:24:1c:1f:e3:f0:f5:8f:
                    16:06:ed:b4:18:75:57:2c:45:4d:ba:e0:79:41:1d:
                    b0:f2:5f:67:5e:11:9e:e0:98:f6:6c:3c:0e:53:80:
                    22:30:23:e7:98:0a:ec:1f:8d:82:b9:d2:e7:c7:79:
                    c5:15:10:3f:92:f9:71:63:41:30:34:06:32:46:9a:
                    10:a7:1b:24:c2:5f:e2:30:0b:a9:9e:6a:4a:80:d1:
                    9b:26:a1:0d:df:f4:97:79:00:52:6d:e3:e3:1a:fc:
                    65:5b:58:c7:bc:9d:0d:6a:50:11:01:c7:30:0e:8d:
                    8d:83:7d:43:94:1a:74:bb:69:1d:2a:11:60:a2:34:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:74:FB:45:95:0F:7A:B3:A9:77:72:83:B3:33:01:7D:AA:79:FE:9D
            X509v3 Authority Key Identifier:
                keyid:E4:8D:A3:35:B0:72:53:6D:58:E6:B7:CD:F4:CD:B1:64:45:BC:BC:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5I2jNbByU21Y5rfN9M2xZEW8vDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/795098-a2f0-4733-9709-e6eb919d7a02/1/5I2jNbByU21Y5rfN9M2xZEW8vDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:eb:61:ef:2d:61:c8:43:e4:87:85:f3:b4:88:c1:b3:23:53:
         66:21:e5:23:f8:5e:5c:d5:18:c1:f8:5e:ab:c2:b3:bf:69:79:
         02:d6:1c:0f:0b:36:b8:ab:55:9a:d7:96:4e:90:01:f3:9d:11:
         13:cb:34:5d:5f:be:0c:c2:a7:29:58:1f:8f:59:72:99:d6:7d:
         a4:76:2d:95:a2:2d:3f:73:e9:77:6c:ee:12:d5:c6:5e:67:91:
         e5:24:80:f3:95:1e:b4:4d:3a:c2:1a:f8:15:f6:73:fa:10:91:
         9e:ba:c1:ab:fa:a3:88:8b:e6:f4:80:17:0e:25:8e:43:34:a4:
         2b:43:a1:eb:a8:65:45:45:f0:2e:48:be:06:9c:cb:c0:ed:c3:
         53:f2:61:87:d8:8d:03:fb:84:af:4e:b9:e7:4d:1a:64:40:1d:
         07:e8:10:7a:a7:b5:ca:58:a0:39:36:77:cd:fb:45:ba:b4:27:
         01:b4:07:a1:6a:c3:0d:f1:69:08:c2:08:da:0a:04:d0:ba:c9:
         75:6e:a6:a2:b7:d9:7d:10:1a:e2:7a:3f:3c:65:88:ff:96:48:
         84:d3:0a:55:7f:19:10:0d:39:cb:02:9f:48:ae:97:c0:1f:45:
         76:a1:83:ab:28:ba:dd:9f:37:2e:ec:33:fe:0d:ea:72:93:9f:
         f2:8e:6b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:11 2026 by rpki-client