Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
File:                     5_moojloMmPnVeEsl9LXpDLQs3c.mft (raw, json)
Hash identifier:          ltAQFz6yKKduIlgkYB9Zrn33c1POOX3OJ5hQBAzXB58=
Subject key identifier:   0E:0B:1E:DD:5E:CC:F4:F2:D7:6C:D7:F6:A1:29:0B:FB:7F:4D:AF:75
Authority key identifier: E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77
Certificate issuer:       /CN=e7f9a8a239683263e755e12c97d2d7a432d0b377
Certificate serial:       019D25F104BCFFF4CBCF304DBE25081533A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
Manifest number:          1886
Signing time:             Wed 25 Mar 2026 17:00:45 +0000
Manifest this update:     Wed 25 Mar 2026 17:00:45 +0000
Manifest next update:     Thu 26 Mar 2026 17:00:45 +0000
Files and hashes:         1: 5_moojloMmPnVeEsl9LXpDLQs3c.crl (hash: HMb2zBzINU/ItrLQFd9pAKyskk0X7tsu+fAypjYV5Yk=)
                          2: cRkpuRyG0zhhGQbjsE_A8YfRNQ0.roa (hash: 4rEqZhA0GfuCAYMPrptrHJxFbCbgz4cowu0vbJKFg/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:04:bc:ff:f4:cb:cf:30:4d:be:25:08:15:33:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f9a8a239683263e755e12c97d2d7a432d0b377
        Validity
            Not Before: Mar 25 17:00:45 2026 GMT
            Not After : Mar 26 17:00:45 2026 GMT
        Subject: CN=0e0b1edd5eccf4f2d76cd7f6a1290bfb7f4daf75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a5:e8:5c:af:b7:21:5f:56:2a:33:a2:2f:ef:
                    6e:c9:46:ab:21:91:6d:6c:25:eb:fe:2a:a5:98:1b:
                    4b:4e:d0:d7:a4:47:12:95:5c:fd:ef:c3:08:0a:d0:
                    b3:a1:20:d9:e6:6c:e1:0c:b7:0e:e9:b9:f9:61:a4:
                    5d:e2:f6:ae:7e:70:25:60:da:51:55:a5:9d:51:65:
                    c9:e5:17:df:03:fa:0d:13:45:ab:cf:2b:d9:cd:33:
                    c9:6d:c7:14:bb:10:05:e1:bf:4a:eb:31:29:5e:78:
                    66:a6:9e:88:5b:81:32:36:0a:b2:38:d5:f5:2b:31:
                    a5:d4:86:2b:28:b4:25:8a:39:8d:6b:d7:bc:79:ba:
                    16:25:95:b5:10:3d:86:7b:0f:90:0d:a6:da:f2:80:
                    94:65:2b:6f:70:45:3a:98:3d:5f:bc:61:08:07:6c:
                    c5:50:9a:05:e6:a5:27:09:70:ac:c6:c0:d8:ab:c7:
                    39:c5:d7:7b:f3:60:1d:d5:e9:93:9b:d5:02:b6:36:
                    96:8e:62:88:76:8a:71:5f:28:7d:c1:d9:9f:0f:4b:
                    fb:07:b3:32:01:19:5d:ed:21:23:75:3b:db:c6:f9:
                    af:ae:5d:f3:2c:70:3c:ac:f8:be:b1:0e:74:e9:b2:
                    82:05:e4:a7:8e:cb:88:14:93:bc:cb:ea:37:04:84:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0B:1E:DD:5E:CC:F4:F2:D7:6C:D7:F6:A1:29:0B:FB:7F:4D:AF:75
            X509v3 Authority Key Identifier:
                keyid:E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:16:d0:9e:c2:50:81:d1:5e:18:3f:48:e1:13:e5:50:c0:d2:
         4a:19:34:1e:09:d3:e1:4b:93:7d:3e:76:77:f1:0d:34:98:11:
         0e:69:07:9c:1b:e1:f0:fb:a6:46:67:5b:78:b8:2a:94:31:b5:
         49:7e:d5:39:fc:dd:47:f3:1d:c9:40:04:29:8e:0d:95:f1:57:
         27:22:75:d5:be:4e:2c:ba:7f:9b:17:00:8a:c8:ce:84:03:a1:
         a7:e7:db:99:01:56:d6:fd:22:d7:47:96:b0:a5:1b:ff:bd:8b:
         a0:8b:73:f4:72:ea:34:01:f3:46:75:7e:80:a2:06:d9:d4:b2:
         d7:40:66:31:90:76:04:88:61:0f:9f:93:31:a8:6e:cd:15:74:
         f8:8a:09:11:ca:c5:61:89:b4:25:b2:64:eb:2b:06:a7:5b:07:
         7b:0b:4d:aa:a8:f7:80:e1:88:73:92:9e:d3:df:4a:6a:b9:08:
         02:4b:1f:92:0c:d2:40:47:73:94:0f:82:ac:c0:ff:af:ef:c9:
         5a:17:dd:61:cd:ba:1a:bb:e3:c9:e6:b8:56:5c:d4:6f:97:6d:
         a9:c7:32:54:29:f8:81:15:63:12:90:68:78:4e:98:65:ca:38:
         c3:fe:3d:2f:bc:27:c9:40:73:bc:97:14:89:8d:fa:8a:5d:2d:
         dc:be:9c:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8QS8//TLzzBNviUIFTOmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ZjlhOGEyMzk2ODMyNjNlNzU1ZTEyYzk3ZDJkN2E0MzJk
MGIzNzcwHhcNMjYwMzI1MTcwMDQ1WhcNMjYwMzI2MTcwMDQ1WjAzMTEwLwYDVQQD
EygwZTBiMWVkZDVlY2NmNGYyZDc2Y2Q3ZjZhMTI5MGJmYjdmNGRhZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qXoXK+3IV9WKjOiL+9uyUarIZFt
bCXr/iqlmBtLTtDXpEcSlVz978MICtCzoSDZ5mzhDLcO6bn5YaRd4vaufnAlYNpR
VaWdUWXJ5RffA/oNE0WrzyvZzTPJbccUuxAF4b9K6zEpXnhmpp6IW4EyNgqyONX1
KzGl1IYrKLQlijmNa9e8eboWJZW1ED2Gew+QDaba8oCUZStvcEU6mD1fvGEIB2zF
UJoF5qUnCXCsxsDYq8c5xdd782Ad1emTm9UCtjaWjmKIdopxXyh9wdmfD0v7B7My
ARld7SEjdTvbxvmvrl3zLHA8rPi+sQ506bKCBeSnjsuIFJO8y+o3BIThIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA4LHt1ezPTy12zX9qEpC/t/Ta91MB8GA1UdIwQY
MBaAFOf5qKI5aDJj51XhLJfS16Qy0LN3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNV9tb29qbG9NbVBuVmVFc2w5TFhwRExRczNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNTQ4YTQtNzcxNS00MTM0LTgxMzIt
MmJmMGEzYmNjNGYxLzEvNV9tb29qbG9NbVBuVmVFc2w5TFhwRExRczNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNTQ4YTQtNzcxNS00MTM0LTgxMzItMmJmMGEzYmNjNGYx
LzEvNV9tb29qbG9NbVBuVmVFc2w5TFhwRExRczNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApxbQnsJQ
gdFeGD9I4RPlUMDSShk0HgnT4UuTfT52d/ENNJgRDmkHnBvh8PumRmdbeLgqlDG1
SX7VOfzdR/MdyUAEKY4NlfFXJyJ11b5OLLp/mxcAisjOhAOhp+fbmQFW1v0i10eW
sKUb/72LoItz9HLqNAHzRnV+gKIG2dSy10BmMZB2BIhhD5+TMahuzRV0+IoJEcrF
YYm0JbJk6ysGp1sHewtNqqj3gOGIc5Ke099KarkIAksfkgzSQEdzlA+CrMD/r+/J
WhfdYc26Grvjyea4VlzUb5dtqccyVCn4gRVjEpBoeE6YZco4w/49L7wnyUBzvJcU
iY36il0t3L6cKg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:12 2026 by rpki-client