Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
File:                     V-cs5_jElCNaCEgjlluQRwS8gkA.mft (raw, json)
Hash identifier:          ny6fAIOwJpOfd4ek/V6e44WubhcLoYpnRBTvfzcAH0s=
Subject key identifier:   8A:25:0A:ED:EA:09:12:45:44:00:3B:84:7A:CE:74:D9:D7:14:D4:7A
Authority key identifier: 57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40
Certificate issuer:       /CN=57e72ce7f8c494235a084823965b904704bc8240
Certificate serial:       019D382DEC4EEF0AAAB69BD3DF3B47DC35E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
Manifest number:          04F2
Signing time:             Sun 29 Mar 2026 06:00:26 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:26 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:26 +0000
Files and hashes:         1: Hwa8i0p0AtGJ1GXfRVKCvTBqny0.roa (hash: DT+ukv3DVtJgqcPr2TlSsYEdjNtd1WuqqHEUYL6lIL8=)
                          2: V-cs5_jElCNaCEgjlluQRwS8gkA.crl (hash: 9ygE0/oPOsFK9zlORurl/hz1LYexW+iFGNECiKtMAyQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:ec:4e:ef:0a:aa:b6:9b:d3:df:3b:47:dc:35:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e72ce7f8c494235a084823965b904704bc8240
        Validity
            Not Before: Mar 29 06:00:26 2026 GMT
            Not After : Mar 30 06:00:26 2026 GMT
        Subject: CN=8a250aedea09124544003b847ace74d9d714d47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c5:97:6d:ed:cf:2e:5d:44:6b:86:76:5a:01:
                    4c:c0:eb:37:81:96:0c:da:13:41:6d:8b:08:7e:63:
                    33:31:75:f0:7f:48:29:ca:f7:80:1d:1e:fc:55:5d:
                    eb:d4:76:b8:e5:54:02:1c:ab:b2:a6:fb:65:a2:6b:
                    94:d3:b2:af:f6:9b:ac:25:c7:4d:f5:e1:fb:05:cd:
                    bf:a8:42:5b:15:e9:ba:57:c5:58:82:fd:75:17:24:
                    2a:f0:64:e4:40:11:c1:93:dd:d5:81:48:68:0b:9e:
                    a1:4a:6c:c5:d6:e9:40:09:a1:e1:ee:16:8c:fb:11:
                    e7:f5:db:da:4c:83:06:38:8c:a3:75:ae:32:3d:da:
                    9d:b2:d0:3e:69:40:15:9e:e6:38:c7:f0:82:c8:fb:
                    8f:91:aa:4d:10:4d:00:1d:61:ff:5a:21:4d:a5:9e:
                    c4:25:6c:50:0a:51:d7:6e:f5:3c:02:36:dd:70:55:
                    16:6a:41:d2:e9:05:c6:55:b8:4c:48:cb:3e:9c:7e:
                    f4:7b:2d:0f:c3:93:47:6f:a5:b5:58:23:07:ab:c3:
                    74:1f:85:34:a2:16:85:58:c0:f8:dc:5d:4a:79:07:
                    66:a3:b2:23:06:1f:6e:33:8a:02:a5:ec:b7:40:95:
                    1d:c4:5f:a0:c9:37:16:2c:95:29:83:91:5e:8e:3e:
                    c5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:25:0A:ED:EA:09:12:45:44:00:3B:84:7A:CE:74:D9:D7:14:D4:7A
            X509v3 Authority Key Identifier:
                keyid:57:E7:2C:E7:F8:C4:94:23:5A:08:48:23:96:5B:90:47:04:BC:82:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-cs5_jElCNaCEgjlluQRwS8gkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/da2ab1-4b53-499f-8ddd-2a0f8743c2c2/1/V-cs5_jElCNaCEgjlluQRwS8gkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:f6:70:0d:13:32:af:66:4f:1a:36:19:21:aa:17:6c:d3:a8:
         01:89:bc:33:86:8e:a5:ee:fd:4e:42:e0:95:9a:25:7b:f0:65:
         a8:c3:b4:6c:51:e0:52:cf:7d:e7:26:d4:ed:93:3f:86:64:74:
         47:40:ea:18:9a:b2:5c:47:ae:dc:41:fa:2e:b4:6f:79:28:27:
         4d:48:d4:f6:af:09:69:26:f0:2c:0e:8b:3a:f0:dc:35:a2:45:
         2b:82:f6:35:8d:2f:a9:72:94:6c:47:6c:df:cf:2b:93:8d:2b:
         62:32:be:88:5e:aa:24:47:54:7a:6d:08:db:8e:f5:35:c0:f4:
         6e:60:11:29:a1:ef:37:d7:92:88:17:68:e3:ca:20:22:09:2a:
         ea:6f:12:64:7c:16:59:89:d8:86:97:88:82:20:36:20:ff:7d:
         65:99:4c:a4:36:d2:c6:c3:08:d3:f1:ec:96:ed:b4:72:f8:99:
         c8:9b:bf:32:ec:57:8d:90:78:ac:87:a6:e6:2a:a7:23:15:55:
         be:53:af:b7:63:2a:51:39:c1:be:93:3a:2e:f9:86:45:bc:c3:
         0d:0b:ef:cd:09:52:9e:71:ed:b7:74:a0:f3:7a:77:5f:bc:21:
         35:e3:37:af:f6:70:82:6e:06:d0:48:44:29:c9:46:12:7e:09:
         a5:8c:2f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:18 2026 by rpki-client