Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
File:                     5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft (raw, json)
Hash identifier:          gZtg48Oon16uOTNdtGRwXm9tzjUii2b8w7Gkwjizoow=
Subject key identifier:   CE:F9:73:BD:FD:FA:EA:35:D9:D1:5C:63:89:9A:6B:DB:5A:71:5B:D0
Authority key identifier: E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9
Certificate issuer:       /CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
Certificate serial:       019D265F5674F63EB021BDE9EBFA8E8C72B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 19:01:15 +0000
Manifest this update:     Wed 25 Mar 2026 19:01:15 +0000
Manifest next update:     Thu 26 Mar 2026 19:01:15 +0000
Files and hashes:         1: 5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl (hash: bpkYXkS0gjGijhMkbcTq5V+sA12ljl053fsVaLa5hEE=)
                          2: IEPEUKY4ypkI5czUw-7D3lVNpYU.roa (hash: UT1ZxTsCU7M0PXyb6IAXHjMFZ0pzwPHMcsChBp8nX6M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:26:5f:56:74:f6:3e:b0:21:bd:e9:eb:fa:8e:8c:72:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4de19fcee29f7f12ef06c60f8660ed700fe90b9
        Validity
            Not Before: Mar 25 19:01:15 2026 GMT
            Not After : Mar 26 19:01:15 2026 GMT
        Subject: CN=cef973bdfdfaea35d9d15c63899a6bdb5a715bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7c:a8:ab:72:39:dc:55:b3:35:4c:bc:52:68:
                    3d:2f:8a:fc:6c:f3:13:a8:7f:69:d7:b3:5a:83:db:
                    47:a3:1e:b1:4e:17:38:84:0d:a5:ac:dd:a2:19:12:
                    d8:f8:55:f6:5f:18:47:51:d3:8e:83:85:aa:31:08:
                    04:7a:83:99:9c:e9:e3:7d:6a:46:20:13:9f:97:c2:
                    5a:26:7d:f3:9f:eb:8f:b8:d6:59:b8:4a:a4:aa:4f:
                    f3:a0:15:61:39:8d:98:bb:ce:72:87:cd:d0:3a:3b:
                    05:16:11:0b:60:af:97:7e:d1:13:33:92:3f:a2:56:
                    68:c0:46:46:8f:bf:8d:a6:7e:64:81:e7:5f:24:8e:
                    00:21:9a:d9:ce:94:8c:f1:7c:f0:8e:1d:a9:4f:ea:
                    5a:a2:90:40:1b:8b:f3:17:55:d9:d8:ec:01:25:3a:
                    76:bb:70:d6:4e:a9:77:43:87:fb:c5:f5:c7:50:0e:
                    29:9e:cb:d8:33:62:07:8c:17:4b:7d:77:ee:ea:f0:
                    13:44:b2:cd:39:ef:30:66:03:3c:69:3c:71:23:cb:
                    e1:84:2a:26:bd:52:00:1c:c1:72:a6:de:8d:01:cd:
                    53:41:15:83:a3:34:31:e5:53:61:c3:4b:53:9d:6d:
                    d1:12:95:c6:d0:35:64:1f:c6:63:6a:29:9b:ed:bd:
                    b7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F9:73:BD:FD:FA:EA:35:D9:D1:5C:63:89:9A:6B:DB:5A:71:5B:D0
            X509v3 Authority Key Identifier:
                keyid:E4:DE:19:FC:EE:29:F7:F1:2E:F0:6C:60:F8:66:0E:D7:00:FE:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/5N4Z_O4p9_Eu8Gxg-GYO1wD-kLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:79:38:08:50:02:23:65:38:96:ba:99:86:2b:fa:e4:1d:39:
         07:a7:72:a4:e8:4d:89:e6:67:ae:42:16:b0:10:e4:fe:62:43:
         7e:8b:94:7f:fa:ae:f1:d3:09:28:91:6f:e5:5b:da:98:95:ed:
         76:46:a3:e0:c9:22:c4:a4:d5:a1:13:a2:9a:b7:89:be:9e:1d:
         14:3f:93:84:e9:a1:88:7c:b5:d7:b7:0a:2e:b4:36:56:98:9f:
         49:ef:35:1d:ea:44:ba:80:de:cf:4c:14:6c:2d:5b:4d:78:70:
         a1:84:3b:60:0c:73:b6:c8:4f:b8:5b:58:85:59:6b:b2:c0:4e:
         b5:6d:81:0f:4a:66:22:3a:ae:07:dc:61:f6:69:f5:2a:6a:5b:
         cb:b6:53:d1:bf:a1:09:8d:76:c8:d0:2d:e4:9b:e9:9e:63:4a:
         e7:fe:c9:7a:2c:6c:00:f6:55:66:d1:03:23:ac:b6:83:02:45:
         c6:94:9a:0c:e9:ed:07:4b:c2:dc:51:44:a1:ef:ac:d0:87:7e:
         21:35:e1:2f:2b:49:37:fd:4c:9b:1d:59:bb:bf:79:2f:61:d3:
         fb:d8:52:24:b4:91:37:c0:02:b0:83:e2:02:f2:79:2e:84:d0:
         11:c4:17:0e:30:9a:a3:c0:2a:5a:86:a1:bf:8b:da:84:be:e4:
         f4:be:c6:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:19 2026 by rpki-client