Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File:                     5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier:          GSHenNHb0q4pByfpe6eGBDU4x94F/veRaVolPEkBZNk=
Subject key identifier:   DF:8B:EB:96:FC:44:CD:AA:19:9E:8D:5B:BC:24:21:AC:DB:4E:7A:60
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer:       /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial:       019D2772150FA19888BD1251F6E101D95B5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number:          136C
Signing time:             Thu 26 Mar 2026 00:01:21 +0000
Manifest this update:     Thu 26 Mar 2026 00:01:21 +0000
Manifest next update:     Fri 27 Mar 2026 00:01:21 +0000
Files and hashes:         1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: NE1OxKWOPOCNhIAueuvVgbxyTsTY5MSfSh7Vxe7264c=)
                          2: 9wxon_jSPGs29d0oz5cGIJC4nyg.roa (hash: Xz4cE3NQ80mMRNxOjLbkBn+IL5J1nET+/jUfxtIVjP8=)
                          3: GR0moaidu9mIStt-zm-cvuX-WDg.roa (hash: RV/X/dbPCJTmst6CLCu9ZvlvMnLGaT8HGpULXJtWGI0=)
                          4: KbTR7aHwwLpZYX34f5JnyinWFjs.roa (hash: SB5fokkBufwe+kAeEHnmUVt4YkIfxrCsr/69Y8UsTR8=)
                          5: mO6Fb7S41xAj_RDQIm69ljJKwSs.roa (hash: mzwHry2L+FiTcVlvwHZhbyETQYyjQEIEkkpwQQwfOpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:72:15:0f:a1:98:88:bd:12:51:f6:e1:01:d9:5b:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
        Validity
            Not Before: Mar 26 00:01:21 2026 GMT
            Not After : Mar 27 00:01:21 2026 GMT
        Subject: CN=df8beb96fc44cdaa199e8d5bbc2421acdb4e7a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:18:39:89:28:51:d1:d0:e7:25:6b:fd:9a:1a:
                    ec:01:f3:a3:4f:d6:e9:d1:d2:e0:7d:6b:42:d8:7d:
                    92:16:71:c6:9a:0d:84:b5:e8:df:e0:77:20:32:4d:
                    77:3a:df:df:28:36:57:38:b6:62:7f:33:36:49:2a:
                    56:a3:31:a6:76:56:68:5f:fe:7f:11:17:da:e2:bb:
                    3b:86:91:98:4a:63:37:7f:fb:3d:62:2d:17:e9:70:
                    a2:d1:04:0d:d0:26:a7:22:c9:2a:d9:0f:2e:16:f3:
                    db:3c:31:27:99:2a:84:d6:bc:55:fa:8f:0f:f6:0e:
                    bf:20:f5:9f:70:4b:19:bb:84:32:a9:5c:ec:97:fe:
                    aa:48:0e:f6:6e:e7:93:a3:10:1c:8b:66:7d:a3:53:
                    94:24:c3:6b:46:85:9a:09:2c:dc:30:4f:24:70:42:
                    9b:b9:01:e2:55:45:3c:b3:00:b9:2e:d5:68:d4:16:
                    d0:b7:42:56:5f:ad:c6:90:12:d4:69:12:c0:27:65:
                    cc:ef:62:ac:a8:06:34:f9:22:b7:59:8b:ae:98:08:
                    45:a6:e2:66:18:3f:0a:ce:19:fa:28:7f:81:05:13:
                    aa:14:0a:fc:da:cb:2c:76:69:72:92:88:d2:e9:74:
                    6e:9f:48:5e:1c:d9:7b:66:89:75:08:fc:06:64:9e:
                    e5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:8B:EB:96:FC:44:CD:AA:19:9E:8D:5B:BC:24:21:AC:DB:4E:7A:60
            X509v3 Authority Key Identifier:
                keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:72:87:fa:36:e8:e9:36:2f:f4:10:4d:c0:27:7f:ef:9d:15:
         9c:59:64:ae:d1:9a:5d:78:99:79:43:ea:2a:4c:48:8d:aa:31:
         86:ad:2f:27:6e:dc:7c:75:2b:19:c5:fe:55:06:3f:31:70:77:
         86:b6:ce:3a:d8:c9:9a:8d:a9:c3:e4:0d:03:23:eb:ca:1a:a8:
         d8:f1:1a:df:4f:4b:c9:6a:79:1d:cc:87:65:85:a6:4d:cf:07:
         4e:fa:c9:10:57:fc:67:f9:c4:50:0f:dc:76:44:ee:01:80:c4:
         cc:c2:81:06:6c:0d:b0:4c:4c:75:38:76:a8:fe:81:b9:b3:fc:
         c7:16:c4:b8:78:4e:86:51:37:95:b8:5d:b0:7b:41:5c:29:82:
         46:a0:18:ae:d7:f5:29:2e:1b:56:b6:bd:42:ea:48:f7:4a:63:
         b9:0f:b8:e6:69:c9:9f:ac:51:ff:da:e3:a8:7c:b3:cf:47:e7:
         a0:76:64:fb:6e:4c:69:40:2a:32:cb:e1:a4:fe:e7:d7:bb:cf:
         53:24:a0:e5:b7:43:de:ae:48:02:bb:d2:64:e8:77:e2:a0:3d:
         fa:c4:16:bc:39:f1:61:68:80:a3:a9:4c:51:4d:37:6c:eb:e5:
         ad:48:76:3c:7c:c9:7b:fd:8b:3e:1a:51:5a:4a:17:29:6b:4f:
         f1:e6:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:50 2026 by rpki-client