Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File:                     5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier:          lChrCWsdMk+UCE5z6bHkIQhj8a2eIXstZCRQyND/Pog=
Subject key identifier:   C8:41:38:36:8C:BC:5F:A1:1D:88:83:CA:4D:9C:A4:E9:6E:C8:D9:52
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer:       /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial:       019D2B4E693005C01E9EEC2373B867B2988C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number:          A1
Signing time:             Thu 26 Mar 2026 18:00:52 +0000
Manifest this update:     Thu 26 Mar 2026 18:00:52 +0000
Manifest next update:     Fri 27 Mar 2026 18:00:52 +0000
Files and hashes:         1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: kOzI1QnWheYL26XyWBe7DmAFD2embiPX3wCsizkdCBc=)
                          2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2b:4e:69:30:05:c0:1e:9e:ec:23:73:b8:67:b2:98:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
        Validity
            Not Before: Mar 26 18:00:52 2026 GMT
            Not After : Mar 27 18:00:52 2026 GMT
        Subject: CN=c84138368cbc5fa11d8883ca4d9ca4e96ec8d952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:0c:63:bf:6b:c0:16:6f:a8:9d:03:12:39:
                    05:4e:3a:c8:a8:2c:72:45:b0:14:ee:66:2f:03:c4:
                    04:d7:cc:a1:72:e3:11:5a:0e:35:7c:94:1a:1a:50:
                    16:db:16:da:da:44:4a:9f:66:90:cf:84:41:e3:16:
                    7f:c4:b0:57:2e:34:91:8b:88:12:3a:b1:a8:d5:a2:
                    35:39:5d:07:e5:d0:fd:cc:a1:84:48:11:f2:28:56:
                    3f:92:1c:82:f9:33:dc:76:96:f2:a7:79:ab:d0:5e:
                    94:28:71:1f:b1:7c:25:d2:70:4a:b5:21:ce:79:f2:
                    a4:6f:4d:ad:a6:27:24:8c:cf:16:03:71:bc:09:2f:
                    02:1a:23:5c:e3:c4:68:0e:b2:e4:d5:c8:88:76:4c:
                    02:fa:78:85:c7:4a:8c:a6:1b:3d:50:63:3e:30:d7:
                    15:90:eb:b1:98:bc:09:be:76:df:f3:0d:ea:49:c9:
                    19:40:fd:10:5f:af:9e:1d:93:d5:13:3c:71:e5:3f:
                    b3:db:c5:43:0d:a7:ee:3d:73:4e:2e:5c:32:81:d9:
                    10:90:f5:a6:96:0e:0a:e5:79:ba:47:82:78:f0:bd:
                    69:c7:98:76:c9:5f:bd:e0:a5:8e:04:db:dc:98:42:
                    09:d7:64:ec:1f:5a:cf:8d:8b:ad:3d:50:b6:20:76:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:41:38:36:8C:BC:5F:A1:1D:88:83:CA:4D:9C:A4:E9:6E:C8:D9:52
            X509v3 Authority Key Identifier:
                keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:7a:51:4e:f1:f1:ae:89:fd:1c:8f:4e:b0:4c:1f:5e:11:f2:
         3d:c1:ce:70:1a:ea:1d:81:98:4a:8b:ff:40:cb:4d:c8:0d:24:
         ac:48:3e:16:cb:7f:09:d9:8e:c8:a6:99:fd:c1:04:e8:1f:9b:
         ca:0d:d2:00:a4:3c:c9:86:75:83:2f:03:03:4d:3a:8c:8e:ea:
         d9:40:94:bf:ed:08:13:2a:61:a1:ad:1e:4c:07:3f:75:26:54:
         45:a0:b7:e5:d2:76:e5:61:7e:5f:ec:b5:ea:f8:1f:9c:59:90:
         1e:72:0f:20:fb:d5:b9:91:c5:78:72:e3:ac:d0:d7:a7:0c:df:
         0e:03:1b:64:21:fb:35:b1:eb:91:5d:de:64:de:58:dc:3d:5c:
         c6:86:99:fd:bc:d3:ac:d5:24:3d:6d:07:71:df:26:6d:9b:c8:
         db:3c:48:ea:05:7c:cc:21:39:c7:4f:97:71:aa:a8:1b:a0:c1:
         5e:1f:cd:1e:82:06:ca:85:fe:80:43:9f:b6:cd:12:ba:3c:0b:
         da:e0:0f:31:8b:1e:da:22:10:5b:5c:a1:cd:57:64:96:2e:47:
         b8:f6:e3:92:27:fb:df:0f:f6:90:8c:ea:86:e7:90:49:a5:1f:
         7c:91:07:38:6e:52:46:d9:ae:ad:ad:e9:3d:7b:7e:84:5e:d8:
         9f:8f:7f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:51:44 2026 by rpki-client