Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File:                     5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier:          Mu/j0otKnadZlzR1fFcQ68Ttr4GTuYHs2e07niE2VRI=
Subject key identifier:   D0:7F:06:0B:26:C9:5A:F5:6C:20:89:95:0D:C9:C9:09:2A:3E:D6:F9
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer:       /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial:       019D6574B6C8009F4B5C3612571AC4162885
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number:          15B5
Signing time:             Tue 07 Apr 2026 01:00:40 +0000
Manifest this update:     Tue 07 Apr 2026 01:00:40 +0000
Manifest next update:     Wed 08 Apr 2026 01:00:40 +0000
Files and hashes:         1: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: uxeMCAwNYuCwrlvqrXMWvJOAlCJNIclwdjBHlz6+WZg=)
                          2: XSiU7-0SbDMQ_IdA4IB6KriuE3I.roa (hash: yT0rAcntGSaWEZ0ss06gXt5M4fgq/qjh8GeO0S2AMtY=)
                          3: _pR80NWgxj4Gx0LuVsPkMkTDYZg.roa (hash: 1gS4zptz0LFHVLhrqKXAHRNkXnwAvD1HMmz81y59cx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Apr 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:65:74:b6:c8:00:9f:4b:5c:36:12:57:1a:c4:16:28:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
        Validity
            Not Before: Apr  7 01:00:40 2026 GMT
            Not After : Apr  8 01:00:40 2026 GMT
        Subject: CN=d07f060b26c95af56c2089950dc9c9092a3ed6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:1b:62:55:7d:92:6e:69:4b:54:b4:3f:81:
                    7b:af:d7:cb:5f:34:02:d7:e7:98:e7:55:39:b6:db:
                    7f:00:05:8a:e3:fb:79:f8:0e:c9:6f:86:f4:27:f4:
                    e2:7d:cf:70:5d:5b:53:ad:ee:4c:05:29:c1:82:c9:
                    bd:e2:50:3a:55:43:52:79:a4:83:26:e1:81:c9:39:
                    c8:19:d9:56:42:40:46:6c:18:0e:ac:90:9b:4d:c9:
                    07:b8:f7:08:a9:04:2b:6f:5b:77:13:2d:a3:1a:4b:
                    f1:97:be:d4:4e:ca:a5:8f:4b:d6:19:81:4d:eb:f2:
                    77:bc:c1:54:8f:8c:d9:ed:ec:e1:16:70:24:86:a1:
                    3e:9d:af:3d:e2:65:a6:35:8a:c0:33:7b:80:b6:3c:
                    38:e3:3b:81:af:9b:e0:0f:da:38:47:dd:7e:b2:b4:
                    50:08:f4:a9:b0:8c:be:49:93:9c:20:78:bf:ac:f9:
                    26:7c:49:2a:a5:ad:4b:c5:5d:a6:5c:be:fb:9c:df:
                    38:3d:d6:ce:ef:02:2a:f9:cb:99:aa:cd:43:d6:f5:
                    9a:12:5c:2e:47:1e:7e:1b:18:08:c2:34:77:c9:a4:
                    03:54:65:58:52:8f:e0:17:81:fc:74:4b:23:46:fb:
                    f8:3a:dd:02:23:0e:a9:8a:3e:81:29:b3:6f:d3:f1:
                    b1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7F:06:0B:26:C9:5A:F5:6C:20:89:95:0D:C9:C9:09:2A:3E:D6:F9
            X509v3 Authority Key Identifier:
                keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:34:c1:dd:a0:45:76:96:b5:cb:34:73:05:96:53:ce:58:48:
         00:f4:85:a2:cc:f4:f7:b0:a9:35:91:bf:d4:bd:94:98:92:ee:
         c6:79:b6:bf:37:76:7c:ec:29:d9:41:9e:85:c8:64:9e:2e:c2:
         45:b4:db:3c:f9:44:10:88:d3:ec:29:3b:47:5b:2c:e3:93:45:
         23:08:99:b4:c9:25:f8:df:75:9b:42:c6:77:d8:8c:38:5c:b7:
         7a:a0:fb:a0:d8:3e:96:4b:95:a5:59:ad:a4:18:6e:fa:18:fd:
         bf:f8:06:cf:fa:2b:73:bc:ef:ec:e0:f9:8f:ee:01:d0:0f:7b:
         a5:66:98:7a:6f:af:2a:04:c3:b1:67:f0:04:e6:f8:9b:1e:9f:
         0a:57:b2:9b:e7:47:fb:f6:ad:e1:b2:b2:f5:54:02:07:ef:68:
         1c:fd:f5:23:c4:56:1a:74:ec:0a:8d:5e:4f:97:27:4f:bb:71:
         c1:74:76:a9:ba:21:bc:3a:04:d3:da:3f:4f:bb:bb:52:f8:fb:
         62:fa:7b:0b:2d:93:ee:64:0d:5c:a2:fb:8e:06:65:16:2b:dd:
         ec:bb:c8:3e:26:9e:ff:c1:d3:87:3e:26:1a:d8:de:87:bf:bc:
         e1:ac:0b:3e:83:57:44:43:7f:49:b8:93:04:19:e9:e0:bd:e9:
         cb:e0:92:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:04:42 2026 by rpki-client