Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File:                     5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier:          n96GY4okqApmjOvEi73aatBbNoSOJEMelrutCsdihpw=
Subject key identifier:   AF:74:D4:99:98:69:AC:F8:B5:2F:90:C0:CE:C3:F3:B3:69:DD:C2:08
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer:       /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial:       019D382DCC5B07FE186465E9CDA504F2E3E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number:          1829
Signing time:             Sun 29 Mar 2026 06:00:18 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:18 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:18 +0000
Files and hashes:         1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: pZyvOw2BNM6Vojl11tAmUum+kQqpqmenqHznkzl2C5Y=)
                          2: AS-661G75-znuPlEcg291RY_YW8.roa (hash: tryrPTL4snW84NvT9kdcp6puokqa439kxN3NLW6DORc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2d:cc:5b:07:fe:18:64:65:e9:cd:a5:04:f2:e3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
        Validity
            Not Before: Mar 29 06:00:18 2026 GMT
            Not After : Mar 30 06:00:18 2026 GMT
        Subject: CN=af74d4999869acf8b52f90c0cec3f3b369ddc208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:35:b6:14:f3:b6:56:4d:59:35:1d:7d:37:44:
                    86:d5:83:f5:db:91:ae:94:65:45:56:b1:43:eb:1c:
                    a6:86:98:c3:53:83:8e:64:7c:bd:a8:71:8f:4b:c4:
                    bf:c4:22:8b:b3:b4:6f:ed:a7:5c:cc:42:72:9a:98:
                    dc:a5:d2:fd:2d:86:a9:eb:48:94:5f:bc:65:df:72:
                    03:a0:fa:65:37:cb:db:2c:41:fd:32:22:98:7d:8a:
                    a9:35:76:25:d5:4d:5b:34:69:9a:58:eb:cd:7c:04:
                    70:22:30:83:62:87:48:eb:1e:da:6f:82:87:97:85:
                    00:81:ac:70:db:91:20:b2:6b:37:70:c9:27:e4:7e:
                    d1:cd:a4:fa:d2:9b:5b:be:32:4b:53:1d:4c:35:88:
                    04:d9:ac:da:14:07:19:a4:b1:f0:1f:b4:17:bc:f5:
                    bd:7d:47:71:f5:a3:89:57:d6:a2:06:67:16:e3:de:
                    ba:3a:ca:12:53:99:36:85:29:19:26:19:f5:0c:04:
                    2a:7f:35:4d:7e:e8:68:7c:fb:75:63:da:0f:40:db:
                    b4:9e:ac:11:a2:8c:21:6f:1c:27:41:df:24:7d:8d:
                    06:9f:2f:f7:9b:b1:4a:2d:3b:dd:d9:96:90:4d:36:
                    11:91:87:6a:09:e8:bb:4b:98:89:74:fd:46:24:af:
                    e2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:74:D4:99:98:69:AC:F8:B5:2F:90:C0:CE:C3:F3:B3:69:DD:C2:08
            X509v3 Authority Key Identifier:
                keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:7d:e7:bb:95:cb:4a:35:ec:f8:b0:6f:65:2e:db:a0:89:54:
         0f:c2:80:25:34:b2:cf:13:f3:d9:69:de:47:63:14:0b:be:3f:
         86:d9:cd:93:ee:c0:fc:1b:d7:ce:1d:b8:b5:29:60:f9:ad:61:
         d2:7d:6a:89:28:ae:89:3a:32:3d:46:18:3d:4c:73:96:4e:08:
         db:e9:38:ea:8d:ef:94:03:2e:ce:28:72:62:97:6b:12:ea:2a:
         b4:d6:57:d1:fc:06:6e:b1:02:d0:a8:59:73:98:f9:15:38:33:
         2b:c5:49:9b:a5:2b:38:99:f1:c4:70:1e:42:a9:ec:a7:30:3f:
         97:6a:f2:af:a5:fc:a9:ee:c8:8b:bf:ad:37:7a:00:a1:27:82:
         d9:48:ff:37:f9:00:a5:77:8e:a7:07:e5:04:a6:26:04:ba:5f:
         8d:ed:1a:68:c5:b2:df:c7:87:64:6e:90:17:b3:ed:63:84:91:
         e7:46:e5:9e:83:f4:6f:42:e9:40:f3:71:f0:96:2e:f5:51:66:
         5e:b6:81:f5:2c:16:63:d6:f5:8c:19:fe:97:2b:ab:fa:d2:84:
         35:c4:ae:ec:b4:aa:dc:21:31:d1:d9:16:1e:77:26:2b:b9:6e:
         dc:61:2a:0a:83:51:e0:05:51:da:ec:e5:03:f3:97:17:22:ce:
         60:b3:96:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:39 2026 by rpki-client