Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
File:                     5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft (raw, json)
Hash identifier:          U/LBrc9KJQw9kwtgJ8dN1b90t01IzoE+812cBLrwJpk=
Subject key identifier:   29:58:2F:0F:57:42:16:D5:2B:22:5C:93:A4:B0:BC:AB:11:33:46:92
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Certificate issuer:       /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial:       019D6687A630FA325CB47BF43B56B03C4032
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
Manifest number:          18F7
Signing time:             Tue 07 Apr 2026 06:00:59 +0000
Manifest this update:     Tue 07 Apr 2026 06:00:59 +0000
Manifest next update:     Wed 08 Apr 2026 06:00:59 +0000
Files and hashes:         1: 5Sb_HPOKAsSdsUjzw140834viv8.roa (hash: dbP1i30GcVhpjOAzB6T5uPHGgdW2XcNsW1MsPzGhr80=)
                          2: 5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl (hash: GViDtULg4XAzeueg8Q80PVP3354s9jemU72n2SsBKTI=)
                          3: 8BqmL7UcN2qfYbL66pHli8JsIzY.roa (hash: pCciA+077UGjAkiMs81qTKCGq54F1nIKWaxa6mwVk+s=)
                          4: TxQ0636d2LwXH2VImycVLeg_GD4.roa (hash: Cd3bRS1ODPCLQTHK/bSamcQr7JmtV/0UDeqKAMmW1WI=)
                          5: a2XY2UXf90IY1VBTinejxs4Lai4.roa (hash: gW9fcMOQIykl/4g6Q5f2diEfBFcQxaR7rcpmHjIDqIU=)
                          6: fKlMKjuEFgs30dy4x--DqMmPkOw.roa (hash: ibkXLWEt1XwmhtSJLQYrk378Stu7/wySqCYAmgW8PM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 04:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:66:87:a6:30:fa:32:5c:b4:7b:f4:3b:56:b0:3c:40:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
        Validity
            Not Before: Apr  7 06:00:59 2026 GMT
            Not After : Apr  8 06:00:59 2026 GMT
        Subject: CN=29582f0f574216d52b225c93a4b0bcab11334692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:77:2b:09:71:b7:25:80:24:69:f5:c4:bd:60:
                    b8:26:0e:df:a4:0e:17:81:1f:c7:58:a7:ed:bf:7e:
                    6b:5d:4e:eb:f6:cd:de:99:19:98:1e:c0:e5:2d:e6:
                    b1:22:62:ce:7f:75:80:01:37:c7:e2:20:85:86:6e:
                    64:73:d9:e8:48:d2:e0:91:3c:40:41:3a:f8:34:fd:
                    c5:0c:6c:30:5f:e1:29:e8:11:3e:4d:cc:69:af:24:
                    09:51:10:6f:b5:5a:69:4c:3a:5e:e7:ff:c6:65:12:
                    1e:d9:7f:b8:52:f3:5b:d9:88:15:9f:dd:56:8d:4f:
                    b8:10:f8:8f:9e:6f:cf:c7:e9:c0:e8:b9:e5:b7:43:
                    5b:dc:ac:93:09:05:d4:41:9b:20:07:a1:04:15:8b:
                    ed:c7:2c:c3:f3:85:84:9a:25:00:22:68:d3:52:4d:
                    99:ef:c2:23:da:55:28:67:1c:3d:5c:b0:20:a9:4c:
                    1e:4a:eb:86:b3:2d:80:d7:0f:4f:82:9b:5d:47:1e:
                    75:2e:05:13:f8:b4:70:d5:c5:16:83:87:5e:af:ee:
                    1c:77:94:bc:02:7c:98:2d:f1:cd:ec:68:b9:34:e9:
                    c5:85:da:e4:f2:e5:e6:14:1b:89:2c:46:5a:db:1f:
                    c1:89:24:6c:e4:b0:71:66:c0:78:35:4c:4e:28:5a:
                    05:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:58:2F:0F:57:42:16:D5:2B:22:5C:93:A4:B0:BC:AB:11:33:46:92
            X509v3 Authority Key Identifier:
                keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:48:7c:6e:17:b5:7c:e9:db:c7:54:40:0e:a5:6c:a8:3d:65:
         89:7d:11:0e:bf:a8:2f:f1:55:c3:61:91:aa:f6:54:fb:20:2c:
         0a:13:a8:e0:0b:e7:0e:3e:87:63:e3:cf:70:a0:8a:20:21:ed:
         56:e4:cc:8b:69:91:af:48:9c:a1:7b:89:e7:e8:d1:30:47:8b:
         97:bc:a7:a8:22:37:bb:cc:44:9c:57:1e:63:8f:4a:1b:82:19:
         23:e5:f6:50:d2:88:d3:be:1e:b2:18:1b:14:70:93:9b:54:50:
         2b:b1:1a:5d:62:f3:9e:4b:40:22:0a:7e:63:fb:a3:12:d5:42:
         00:df:9a:48:9c:6f:fd:c7:16:9a:52:5a:98:18:0a:3b:fe:a3:
         d0:ac:93:d7:c4:88:03:52:8e:19:d2:87:f6:96:af:16:e2:61:
         95:fa:d3:58:be:ca:b7:62:3f:77:bb:35:33:56:19:99:31:c3:
         1e:52:40:03:d5:93:0f:09:55:b2:d4:14:17:38:bd:d1:65:49:
         68:88:aa:05:75:56:ae:94:7a:04:49:62:52:a2:84:15:b9:83:
         ff:68:43:bc:2b:65:cb:3e:7e:e8:39:46:0f:6d:f3:fb:6c:a9:
         fb:50:53:11:0c:e3:eb:05:a2:69:41:2a:ff:02:f7:93:0e:1d:
         6c:1a:bf:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 13:29:39 2026 by rpki-client