Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
File:                     9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json)
Hash identifier:          J5N6YNc5B8XI3rO8X8p1SjbbYhev7hADPhlzZqFd7Bo=
Subject key identifier:   0C:DE:0C:A6:88:2D:FE:E2:48:66:90:7B:28:56:3B:22:56:FC:61:F4
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Certificate issuer:       /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial:       019D2A726823E92F7772E4A4CE305AFBFD5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
Manifest number:          18CA
Signing time:             Thu 26 Mar 2026 14:00:33 +0000
Manifest this update:     Thu 26 Mar 2026 14:00:33 +0000
Manifest next update:     Fri 27 Mar 2026 14:00:33 +0000
Files and hashes:         1: 02rcOu2oVgYvFKogVTUuhoAU_Z8.roa (hash: t1BzKV6mreRxe6P7rrGXRTjA+HpmupGRMNWHhpbny/Y=)
                          2: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: GXCb5s/e0a/5OfliswL/DI/xfHXkcSniPBu7hewhFZU=)
                          3: Ja_i6Nl_QEf84Cv0hTASmUfByDk.roa (hash: PR6zLbEuwP/MFZVDvzI0MjSOqX30Bqi1dOI8MRuCOng=)
                          4: Sgl0Z64OhrO11r88F-vekHDTFUg.roa (hash: wpZ6eRiAcwvnj+jMwp2huDtJevtVDAQPpwMPlgkG8Ek=)
                          5: VN6p_bTihNH_MdXcvCva6umc71w.roa (hash: hHXGikrxhpHM6seBQ0Nc82OHE5FrPo4aFTc47ssGOfQ=)
                          6: q0a8yaRXZHqDgW6t40wuVuwZGqY.roa (hash: yQdCTPHRdYGgRQtv3qZWl01v8W1TNo2W0QOatwpBfUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 09:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:2a:72:68:23:e9:2f:77:72:e4:a4:ce:30:5a:fb:fd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
        Validity
            Not Before: Mar 26 14:00:33 2026 GMT
            Not After : Mar 27 14:00:33 2026 GMT
        Subject: CN=0cde0ca6882dfee24866907b28563b2256fc61f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:01:4d:f8:36:2a:bd:59:c2:a9:3e:ad:7e:
                    10:27:af:fa:d1:0a:de:f1:9c:84:5e:ce:4b:a4:7c:
                    6a:28:ac:a9:e8:5b:a5:7d:61:34:f3:fd:c8:8e:41:
                    21:16:71:68:a7:fa:50:ca:b8:08:aa:8c:95:84:c6:
                    dd:09:94:5a:ac:2e:14:9d:a4:89:d8:a9:c6:d1:26:
                    f3:ae:80:ed:d2:27:81:3e:dc:37:64:dd:0b:3e:20:
                    24:36:96:99:ec:3e:40:a8:8f:42:7a:11:c1:65:62:
                    f1:f8:70:4b:bc:1c:55:12:78:c9:10:a9:07:f3:cd:
                    d6:b5:b4:90:ee:ad:88:24:d7:76:31:83:e3:8d:93:
                    37:2e:be:a8:ad:3e:0a:a2:76:2d:16:11:54:48:d8:
                    45:02:55:bd:23:dc:38:0f:17:ca:63:ce:67:88:46:
                    01:1f:d2:c1:b7:39:9b:88:0c:cf:49:05:80:2b:4b:
                    bf:4d:9c:dc:65:4f:3e:40:51:dd:f6:b0:6a:11:86:
                    38:5e:57:62:52:ef:17:06:31:3e:ae:d6:ef:de:dc:
                    cd:45:88:ac:da:2e:95:88:dd:56:91:27:78:e3:f8:
                    a2:d1:56:f7:db:d8:60:c4:ad:95:13:0e:e3:3c:2f:
                    09:9c:77:1e:21:03:dc:a2:b5:00:db:01:f5:70:ec:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DE:0C:A6:88:2D:FE:E2:48:66:90:7B:28:56:3B:22:56:FC:61:F4
            X509v3 Authority Key Identifier:
                keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:77:1f:93:35:68:c1:aa:cf:bc:82:90:b3:d0:0f:2d:77:ac:
         b7:54:01:0f:0e:d1:4c:3f:e6:e3:f3:4c:81:b0:0d:a8:00:7a:
         e1:7c:26:f0:42:ec:a9:02:25:c6:b7:29:73:cc:a3:be:4b:37:
         96:fb:d0:f8:15:2c:5b:ac:fa:f0:b2:99:9b:37:de:fd:5a:1a:
         52:b8:9b:8e:a8:11:b4:8e:61:d1:08:21:d7:93:d8:62:01:8e:
         15:5c:14:59:3b:8e:b6:5f:01:c8:82:45:6b:be:32:7d:b7:a8:
         f4:4c:7c:5f:19:26:45:29:39:32:02:42:a9:5b:b5:ee:ed:88:
         11:66:1a:05:fe:0f:7b:ba:b8:c2:a6:3a:ac:8b:42:87:34:98:
         52:46:28:ec:5a:fa:b8:a9:17:47:cc:87:cf:d5:e4:fe:4d:6f:
         cf:25:f6:73:e2:96:84:8d:84:4c:8c:16:4c:5c:71:86:83:96:
         74:7f:e5:c1:de:fe:b5:d2:51:e4:43:95:63:7a:55:df:b5:4d:
         20:d9:6a:2e:23:fe:3b:b4:00:34:33:d1:e4:06:1d:0b:e0:91:
         a8:c0:8c:82:b7:ad:49:6c:a6:e1:c2:61:10:75:71:07:a5:6a:
         d3:5c:be:a7:b0:f1:b5:ee:c0:95:01:dd:22:99:26:c4:54:3b:
         7a:39:c3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:35:25 2026 by rpki-client