Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
File:                     ePsJmqQwgayDle4LkMzxqIRPjWQ.mft (raw, json)
Hash identifier:          jRezVz0SK7KYkgDS26cTcgDFzyooRw541S2KJ1ltlE0=
Subject key identifier:   92:A7:00:C2:B1:C1:84:8D:9C:91:61:EE:E9:1B:22:21:77:C3:B0:2A
Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64
Certificate issuer:       /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
Certificate serial:       019D28842257FDEF60ABC9F203B6FAFDE21D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
Manifest number:          0FE5
Signing time:             Thu 26 Mar 2026 05:00:41 +0000
Manifest this update:     Thu 26 Mar 2026 05:00:41 +0000
Manifest next update:     Fri 27 Mar 2026 05:00:41 +0000
Files and hashes:         1: QbuCVG1sfh_qrKSvUTqqkkFtShU.roa (hash: vVlbCWR3CeEofOXACZ7iuxfcagqufnEEze+JXa0aiW8=)
                          2: UaN_1fjhpEGb9PtMuS2VXdx_MDY.roa (hash: Iztx2alVydZOs1RecbqbrO4/NgXon+AnLrachil2CRY=)
                          3: WrADKUB6oNgRudH0eNNDASCTWGs.roa (hash: 6wA2NVUu2434Y8q07bK3lOi84PICECNqgtQRT6NlYII=)
                          4: ePsJmqQwgayDle4LkMzxqIRPjWQ.crl (hash: 5F390ccxLepTB1VPK1/ORnx4ge2F4dOSiMf4sGzNOUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:28:84:22:57:fd:ef:60:ab:c9:f2:03:b6:fa:fd:e2:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64
        Validity
            Not Before: Mar 26 05:00:41 2026 GMT
            Not After : Mar 27 05:00:41 2026 GMT
        Subject: CN=92a700c2b1c1848d9c9161eee91b222177c3b02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f5:17:e4:88:01:92:98:03:88:6d:36:fe:c0:
                    a0:d7:77:49:ce:ed:13:db:c1:c9:66:cb:0e:41:33:
                    99:a2:b5:bf:d3:4d:15:44:7b:ab:3f:2c:c8:c0:09:
                    8c:4f:e5:a9:a1:63:91:a8:39:45:af:54:a1:cd:39:
                    a3:5b:83:75:a7:14:85:24:4d:12:e3:58:a7:06:18:
                    fe:05:0f:b1:1c:9b:dc:8b:98:05:b6:29:e2:e8:2b:
                    a6:37:73:f0:a8:4f:9a:f6:06:12:06:a2:33:21:14:
                    63:99:02:df:99:24:2a:a3:83:70:15:d3:06:d3:72:
                    33:bc:27:1c:b4:02:7a:c2:e2:47:29:0a:6e:74:de:
                    e1:33:78:96:fb:94:f7:47:d1:ff:2d:fd:ee:2a:44:
                    c3:8a:11:7c:cf:28:89:03:d5:1c:8e:36:6f:ac:d0:
                    e6:6c:3b:11:38:8a:36:c3:cb:bf:ed:5a:02:6e:02:
                    59:69:4b:35:4e:b5:24:42:66:ad:3b:ca:94:14:17:
                    8e:ee:2d:90:9b:c4:6d:a5:cb:f2:54:0a:3a:af:5d:
                    aa:b7:28:46:85:34:a4:35:ff:45:46:bf:81:18:bc:
                    a3:c7:d0:8e:4a:db:34:60:26:64:7b:e3:b8:d8:ee:
                    18:01:c1:70:80:43:ca:9c:46:f4:45:db:bb:15:aa:
                    fa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A7:00:C2:B1:C1:84:8D:9C:91:61:EE:E9:1B:22:21:77:C3:B0:2A
            X509v3 Authority Key Identifier:
                keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:dc:82:09:4d:4e:2c:8c:c4:50:11:ab:b1:d5:62:6e:a2:3f:
         84:2b:75:c5:64:11:d0:bc:41:e8:cd:d1:58:ea:46:91:83:f4:
         29:c6:37:78:c7:76:9c:6f:56:64:40:07:bb:5c:2a:66:4c:6c:
         6b:6f:39:c8:bf:0a:d3:c1:86:df:cb:be:be:59:d8:fe:c8:34:
         b5:2d:fc:e5:b5:ff:b6:26:b2:e7:56:eb:4d:6a:53:48:ef:2c:
         7d:f8:55:11:e8:33:ed:32:93:8d:6d:de:df:6b:0b:8e:2f:fd:
         da:fd:1a:6d:52:17:a9:12:29:31:e3:68:da:d6:c3:d2:43:8e:
         00:b9:ff:0c:68:94:f7:c8:da:3d:ff:db:41:42:b9:f0:0b:74:
         7d:ac:ad:c7:a6:03:dd:0b:7b:8b:16:b0:11:37:37:81:0f:0a:
         be:7c:c9:94:ff:c5:a3:0b:94:ae:85:9e:bb:cd:97:49:4e:67:
         9b:1f:d6:31:24:39:fe:37:60:80:ed:ae:89:86:c3:c3:d9:36:
         1c:f2:7d:a6:dc:b7:25:c1:08:6f:35:7d:0d:b0:34:41:16:35:
         e5:2f:aa:b4:88:5b:b3:e4:e9:d9:30:38:d1:a5:76:c3:16:97:
         fd:4b:00:fe:0e:78:1f:ca:93:a1:67:99:f9:4f:7b:dd:45:bc:
         a9:da:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:52:27 2026 by rpki-client