Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File:                     5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier:          VP07K2CURypF/WdWqrLCUfqILf/SdN1vj/phYi1Xvv4=
Subject key identifier:   E4:8A:3D:0D:EA:49:48:C7:DC:95:AC:1B:40:D2:AE:B6:5C:46:B8:CD
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer:       /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial:       019D25F1EA56A0650CA04E94FCC42EFDD264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number:          049B
Signing time:             Wed 25 Mar 2026 17:01:44 +0000
Manifest this update:     Wed 25 Mar 2026 17:01:44 +0000
Manifest next update:     Thu 26 Mar 2026 17:01:44 +0000
Files and hashes:         1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: aC7mhbV0/nDAjXlkEXDnbJ+r3udIuRdRWZOiBIYCpfc=)
                          2: EYjq5PTntQ_pzWKcs1u7ceeGxQY.roa (hash: V6IVhgWxUM0HbEed6VcScjqL3JGVYEaJss+a2Pf1dk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:25:f1:ea:56:a0:65:0c:a0:4e:94:fc:c4:2e:fd:d2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
        Validity
            Not Before: Mar 25 17:01:44 2026 GMT
            Not After : Mar 26 17:01:44 2026 GMT
        Subject: CN=e48a3d0dea4948c7dc95ac1b40d2aeb65c46b8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:14:07:92:b5:5e:fa:00:27:6b:78:a7:d3:
                    c2:a8:a6:e0:76:33:d1:b6:80:81:eb:c5:74:99:d2:
                    94:eb:5c:5d:37:73:56:f2:a6:ca:b5:16:15:dc:48:
                    e5:6e:6c:fa:89:03:7d:20:b0:d5:f2:0c:79:de:38:
                    65:76:ed:2f:2c:3b:5b:53:8d:03:4d:e1:61:35:4c:
                    42:08:0e:dc:07:36:81:c8:44:88:2b:04:77:55:10:
                    ab:e9:83:b9:60:5a:96:cc:f1:2e:cb:d6:fd:d8:69:
                    1b:b2:0f:b3:b7:bb:11:79:0f:db:83:40:bc:de:cd:
                    1d:6e:2d:f9:75:d9:ee:72:ef:3c:56:1b:28:f3:02:
                    5e:4a:f9:13:05:30:2e:55:d3:86:3d:6f:c2:31:4e:
                    26:36:cf:56:99:b6:df:ca:91:d9:c5:67:27:00:84:
                    17:15:2b:7a:9a:2b:63:f6:62:91:a2:43:19:63:ef:
                    e2:4e:3a:0b:e9:c0:fa:e9:7d:d3:7f:d8:51:95:38:
                    e8:af:45:e1:41:a5:b3:84:50:78:d6:1f:2d:9f:96:
                    74:b8:3f:56:8d:80:89:b9:f6:76:11:6a:b8:50:ed:
                    22:8a:33:3b:18:8c:43:4e:5e:cb:5b:f6:21:99:7c:
                    26:d7:c9:6e:20:cc:8e:e2:94:0b:9a:1c:84:71:1f:
                    13:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8A:3D:0D:EA:49:48:C7:DC:95:AC:1B:40:D2:AE:B6:5C:46:B8:CD
            X509v3 Authority Key Identifier:
                keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:3b:00:7a:4e:92:4b:2e:2e:a8:2b:be:a6:52:fd:29:4c:93:
         ae:7d:04:31:2a:eb:0f:5e:ac:f0:53:fe:de:14:59:4c:d0:42:
         2b:0f:dc:f4:7f:8c:b8:58:43:24:64:64:36:6a:84:3a:1c:12:
         d7:02:77:f2:ed:0c:a8:57:54:31:8b:b2:b0:d4:56:1d:ce:e1:
         b5:20:d0:dd:ad:40:6d:b0:58:f2:e2:f7:a3:5a:44:68:9d:fc:
         3e:bf:75:0f:c6:06:cc:28:90:a2:29:b3:44:f3:58:fb:89:36:
         07:53:cc:5b:5f:c3:86:77:5e:31:99:19:20:18:41:1f:0f:62:
         f3:03:ec:38:0a:21:2a:98:a6:1d:dc:21:a7:a9:9d:a7:51:e7:
         3a:58:eb:0d:f6:7f:90:f8:55:3e:29:72:e1:98:88:4a:65:a9:
         bb:a9:57:0f:fd:5b:bc:7b:fb:2c:91:f7:a2:71:df:77:75:4d:
         0b:29:ca:3f:81:a4:44:45:2f:68:68:09:b8:ca:35:1e:0c:e5:
         fa:d4:b8:d6:52:24:79:e0:d1:a2:64:cc:54:41:21:a2:0e:09:
         d3:cf:61:fd:6a:04:4b:2e:43:24:03:cc:59:78:52:9b:52:a6:
         70:50:ef:5c:17:c3:0b:c1:92:a8:b5:40:ac:25:80:53:96:11:
         22:24:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:07 2026 by rpki-client