Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier:          LbhIL6CLRjMmPlvk8l4EsG71PCflKkDiJhgrBgehOCA=
Subject key identifier:   73:C6:59:CF:31:E6:92:48:79:00:FD:7E:C7:57:8F:EF:10:8C:B6:54
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       019DCF078EAAC87BC5257841CEC3F75ABBA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number:          185B
Signing time:             Mon 27 Apr 2026 13:01:12 +0000
Manifest this update:     Mon 27 Apr 2026 13:01:12 +0000
Manifest next update:     Tue 28 Apr 2026 13:01:12 +0000
Files and hashes:         1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: 3ZQjKkjfC4svFToucYI0zoIWixHm5LWpJr/Y+2tfLgM=)
                          2: _xb7dLIH6IMlpZq1SYlWl6nvqS4.roa (hash: oZ1UVmQ5z1c0zOrIXMtPyJxvit0yakzMpq+pTeT+fvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Apr 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:cf:07:8e:aa:c8:7b:c5:25:78:41:ce:c3:f7:5a:bb:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: Apr 27 13:01:12 2026 GMT
            Not After : Apr 28 13:01:12 2026 GMT
        Subject: CN=73c659cf31e692487900fd7ec7578fef108cb654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6e:db:5e:5b:7d:23:e2:ee:3a:0c:a3:51:27:
                    28:b2:c4:24:a7:21:09:b8:53:63:02:37:55:ca:60:
                    d1:8e:91:6e:b9:4a:2e:f6:5b:34:b3:05:45:46:f6:
                    ee:b3:0f:64:ec:c3:ff:69:30:0d:62:7f:01:6c:3f:
                    ec:2c:4a:b6:49:a2:1c:11:5a:b4:c0:0b:74:20:fb:
                    03:27:47:ad:d8:5a:2c:38:ae:50:b0:64:e0:ac:45:
                    1c:e7:92:73:50:72:69:1f:77:e6:4e:89:62:2e:1b:
                    de:30:06:91:0d:73:7b:a1:15:f7:bc:45:c6:f9:f9:
                    fa:dd:b9:46:a5:8c:a0:a4:51:79:d3:c5:2a:5d:e2:
                    99:ae:58:c1:d1:ac:2a:03:67:b4:bd:04:a9:a6:57:
                    63:6d:b0:5e:76:1e:21:32:a7:3a:42:e4:ee:5c:15:
                    59:87:47:4e:cf:b5:d3:d0:3a:9e:f2:7a:d1:7b:06:
                    b8:9a:96:7d:2d:89:2d:a1:93:5d:fb:34:f0:c6:0e:
                    a1:14:76:e7:16:a9:49:19:06:54:af:87:bd:e1:fe:
                    24:f4:97:9b:d1:5a:07:07:84:4f:99:e0:3c:73:99:
                    21:5f:df:f6:e2:4a:97:17:be:01:57:06:57:2c:e4:
                    85:0e:b1:60:90:f2:6e:cb:8a:c3:e4:f5:c0:ea:f7:
                    95:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C6:59:CF:31:E6:92:48:79:00:FD:7E:C7:57:8F:EF:10:8C:B6:54
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:31:af:c7:63:77:11:77:c1:31:49:29:fb:74:67:cb:a1:4d:
         0d:d6:24:0e:50:0e:fc:ed:be:54:a8:f5:70:0b:08:05:5a:d8:
         20:60:39:b7:60:2c:cf:f4:3f:01:01:59:84:bb:4e:8f:7b:92:
         dc:d5:cc:d1:ee:04:67:a7:2d:7a:0d:4e:e5:79:50:03:e0:36:
         5a:54:8c:b6:62:9f:1e:7b:19:c9:b4:ac:95:d7:a8:af:11:6e:
         ef:26:94:7e:2e:29:3c:78:d3:08:6d:bc:4b:68:8b:53:b6:08:
         76:d2:d7:50:a3:af:03:a2:66:99:f0:f2:30:bd:5b:6e:a9:67:
         82:03:44:db:86:8f:bf:72:f9:02:79:25:22:62:29:ea:25:17:
         a7:1c:4a:70:a5:be:ff:7a:01:e8:0f:a5:6c:8c:dd:bc:16:4c:
         2f:a0:5b:bc:a7:a3:e3:8c:5d:eb:65:da:df:75:99:27:01:a2:
         78:7b:7d:bf:f0:d5:65:6e:6f:d2:d1:ec:26:65:70:77:fb:94:
         00:bf:d9:63:9f:8b:64:e8:71:f2:1a:ee:84:e7:4b:80:6b:f7:
         df:72:6f:f3:f2:10:90:d0:a6:dd:12:e2:50:04:8b:b7:17:f8:
         c2:cc:68:c1:20:24:bc:28:70:9c:b4:89:83:84:38:38:1a:7a:
         90:48:8d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:12:28 2026 by rpki-client