Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
File:                     5AsW02mtJ87YVJlGUyjwlbFV9DE.mft (raw, json)
Hash identifier:          oejiqj2wyGp80PreITVBj1NJ4iN2V/QaAYw+qpjL7F0=
Subject key identifier:   AB:4E:E0:95:99:1C:9B:C1:AD:BA:6D:7D:55:2A:FE:E1:FA:B8:0A:7A
Authority key identifier: E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31
Certificate issuer:       /CN=e40b16d369ad27ced85499465328f095b155f431
Certificate serial:       019D28F211E93301200AEB10F01C78B37E23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
Manifest number:          CF
Signing time:             Thu 26 Mar 2026 07:00:46 +0000
Manifest this update:     Thu 26 Mar 2026 07:00:46 +0000
Manifest next update:     Fri 27 Mar 2026 07:00:46 +0000
Files and hashes:         1: 5AsW02mtJ87YVJlGUyjwlbFV9DE.crl (hash: 4C4kLqdaZ2Wc2MjfpZUvg0X2X1tLGqYT2qWdWWJZw60=)
                          2: XIHqllXiQ75dwiTpm0BLVs13ydc.roa (hash: rq4fzIyxgD0rSmb8ZDZH7Qipo9yBXOQk9IG67zBkkr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:f2:11:e9:33:01:20:0a:eb:10:f0:1c:78:b3:7e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e40b16d369ad27ced85499465328f095b155f431
        Validity
            Not Before: Mar 26 07:00:46 2026 GMT
            Not After : Mar 27 07:00:46 2026 GMT
        Subject: CN=ab4ee095991c9bc1adba6d7d552afee1fab80a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:47:47:ed:f5:07:39:94:83:58:c1:19:8e:
                    49:10:31:2d:52:6e:bb:69:ec:ee:7d:ee:be:7d:35:
                    49:fd:dc:da:76:49:f1:26:a5:06:ff:05:c6:2a:34:
                    c0:8c:15:72:cc:30:ba:7e:10:b0:71:49:6f:2c:ab:
                    5c:39:ae:ac:db:ed:c9:92:da:ce:cb:34:ec:19:29:
                    94:07:b5:79:18:ef:fa:c6:5a:7b:c5:97:1a:71:26:
                    65:be:ce:ee:16:65:13:bf:7b:8c:c9:2b:ea:cb:7c:
                    78:a3:62:9c:44:08:3a:8c:c2:ca:21:8a:bc:1b:4b:
                    24:6c:68:15:32:18:e3:90:fa:2b:03:92:44:a8:36:
                    96:a8:b2:27:6c:1b:b6:da:88:e8:b7:d8:7e:34:50:
                    ba:38:a2:0a:df:81:b7:94:57:69:b9:19:9a:79:3f:
                    a9:d1:66:8f:0b:41:ef:7b:89:c2:38:4a:29:73:34:
                    59:05:f7:6b:bf:5a:37:63:e4:8f:17:68:1c:7f:1b:
                    ec:14:de:7b:1c:62:75:ee:7f:69:f3:f0:3e:19:2c:
                    18:43:5f:db:3d:51:b0:6d:bf:df:ab:9f:ef:8f:40:
                    10:45:6e:fe:5c:79:f9:47:cc:11:40:c1:12:58:be:
                    83:b4:04:87:4c:f3:84:9b:94:45:6e:c2:33:16:2e:
                    cd:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:4E:E0:95:99:1C:9B:C1:AD:BA:6D:7D:55:2A:FE:E1:FA:B8:0A:7A
            X509v3 Authority Key Identifier:
                keyid:E4:0B:16:D3:69:AD:27:CE:D8:54:99:46:53:28:F0:95:B1:55:F4:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AsW02mtJ87YVJlGUyjwlbFV9DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/15cb51-4cea-45e3-a760-0371d4b4547a/1/5AsW02mtJ87YVJlGUyjwlbFV9DE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:9f:e9:b5:11:94:11:d8:79:6e:ea:6a:1f:8a:c0:09:cf:7c:
         fd:d9:2f:27:a9:8b:14:b6:a0:f0:c2:a5:73:34:ee:a1:41:88:
         a5:31:57:2f:fa:d1:16:85:38:b5:f8:55:75:99:55:9d:b1:e4:
         61:f1:b5:69:4e:d7:0c:d9:7e:64:12:dc:6c:36:52:2e:97:1b:
         7f:3b:8e:42:ff:28:8a:77:ef:c7:97:65:d1:58:54:ed:d6:1f:
         02:85:61:66:51:90:a5:71:c7:c8:e8:64:1d:5e:80:f5:05:de:
         a1:b8:8f:c3:6f:ba:dd:63:cf:c9:6c:5c:a9:29:83:f0:59:40:
         bf:7b:2f:c9:5e:2b:9a:ca:ea:d6:fe:1e:bf:2b:a0:2d:64:b1:
         7d:ce:fa:1d:38:cc:3e:d1:74:40:7b:61:79:bc:46:c0:8a:09:
         f6:d0:a9:66:1b:6d:e3:ee:46:10:e6:3a:98:0c:23:07:d6:9a:
         f3:3d:8e:73:6c:fd:0c:68:b7:07:71:36:2e:2c:02:a5:88:fa:
         cc:87:53:63:f3:ad:9b:0d:e9:9e:9c:05:11:c7:ae:6d:5c:66:
         3f:eb:a3:15:21:2f:d3:7d:77:84:cc:49:ac:4a:8e:f1:d8:a9:
         f8:e8:47:cd:11:e4:0f:85:19:5b:14:3b:66:97:c1:d3:07:08:
         87:e7:f8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:25:42 2026 by rpki-client