Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
File:                     1V5WEXiBQrMVQorlH2fLus-At-g.mft (raw, json)
Hash identifier:          IdGsgYFtQhRuW/8TUcYGzpq3VMWENs30tt5v/czZaLQ=
Subject key identifier:   E4:EC:3C:16:53:21:61:EB:05:3C:66:0C:F6:FF:35:57:58:8B:14:B4
Authority key identifier: D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8
Certificate issuer:       /CN=d55e5611788142b315428ae51f67cbbacf80b7e8
Certificate serial:       019CE4B600C3CC03941DB0994C76561E8D55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
Manifest number:          05B7
Signing time:             Fri 13 Mar 2026 01:00:58 +0000
Manifest this update:     Fri 13 Mar 2026 01:00:58 +0000
Manifest next update:     Sat 14 Mar 2026 01:00:58 +0000
Files and hashes:         1: 1V5WEXiBQrMVQorlH2fLus-At-g.crl (hash: EICluX2nNDTafZsTb7ht9CylOxxjVdktNyQiaYeEf/Q=)
                          2: de6ErolZQIyqyskxIJ9qsMNkKNo.roa (hash: jruSnROhXq+S2qj6HU2rC2fPnP4UTAP+/5sPjL7DukM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:b6:00:c3:cc:03:94:1d:b0:99:4c:76:56:1e:8d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55e5611788142b315428ae51f67cbbacf80b7e8
        Validity
            Not Before: Mar 13 01:00:58 2026 GMT
            Not After : Mar 14 01:00:58 2026 GMT
        Subject: CN=e4ec3c16532161eb053c660cf6ff3557588b14b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d1:33:89:64:37:e1:f9:6f:f5:a3:40:af:e6:
                    5d:91:fc:32:5d:a3:5e:78:b6:ab:bb:20:59:cb:4e:
                    23:2a:57:7d:70:fe:7a:fa:4a:a0:cb:99:05:b4:b8:
                    34:3d:b8:06:78:9f:6f:56:16:ea:30:79:3b:00:59:
                    30:88:ee:3b:5c:90:1a:24:b8:e3:13:34:73:97:69:
                    c3:3d:11:a9:55:2e:e3:75:36:2c:f2:54:75:19:a4:
                    1c:92:33:30:6e:c3:d2:3d:94:c3:be:f4:16:c2:fe:
                    2b:db:d0:42:29:48:94:c5:e4:25:1b:d2:4d:ae:f3:
                    49:99:11:08:61:c5:01:7c:bd:96:8e:e5:cd:38:50:
                    e3:cf:12:d2:ad:a9:6e:fc:11:3a:96:a4:23:cc:5c:
                    f0:9b:20:f2:2a:cc:7e:86:a4:76:f4:f8:2b:15:f6:
                    1a:0b:07:9b:d7:fd:7f:5c:e6:aa:f4:d0:a6:2d:f1:
                    5d:7e:50:7f:38:62:a8:6e:e8:48:45:f2:a4:e4:14:
                    72:a3:40:88:7d:1f:a5:0d:e2:ae:57:34:88:cf:9d:
                    32:1d:30:ff:01:06:1b:b3:ac:c5:32:66:6a:1e:db:
                    d6:72:9d:51:28:44:2c:99:29:c0:86:1e:bf:e0:f3:
                    4f:af:bf:4c:64:0e:d0:5a:2f:a9:c2:4d:ae:23:ad:
                    01:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EC:3C:16:53:21:61:EB:05:3C:66:0C:F6:FF:35:57:58:8B:14:B4
            X509v3 Authority Key Identifier:
                keyid:D5:5E:56:11:78:81:42:B3:15:42:8A:E5:1F:67:CB:BA:CF:80:B7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V5WEXiBQrMVQorlH2fLus-At-g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/23dfb2-749d-471d-b114-83c7db7596fe/1/1V5WEXiBQrMVQorlH2fLus-At-g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:8e:29:99:78:88:6f:4b:08:9c:c8:a6:db:88:d3:ae:5d:75:
         ac:98:f5:1d:7d:34:7d:08:82:d0:45:ab:df:7e:fc:fa:b3:cc:
         14:cc:56:32:b6:8e:e5:4a:c5:05:11:21:6a:88:d6:ed:c9:3c:
         45:51:de:6b:8f:57:00:e3:54:7b:ca:c0:1a:92:b8:c7:8e:b0:
         c6:49:be:bc:6f:76:cb:fa:28:6c:c2:f1:b7:64:50:fa:a1:7b:
         ba:f7:2e:12:8d:12:aa:73:6d:0b:32:38:2c:57:45:fa:8f:24:
         a4:86:f4:9b:46:e1:a3:04:8f:f6:c2:af:7d:c2:5a:16:d3:ec:
         4a:83:3b:01:71:af:09:1e:da:0d:d9:97:6f:5e:d4:1d:95:c1:
         d7:f6:82:de:29:52:9c:38:a2:b4:5d:06:ea:de:fc:66:e6:af:
         00:f2:f2:de:9f:af:5f:8e:d3:6a:44:13:cd:d0:47:0a:13:85:
         e0:b4:dc:b1:7e:74:90:fd:80:0c:fb:ae:6c:0c:15:3a:c3:7e:
         88:6a:42:76:d0:3f:25:f2:0c:8a:d6:3b:9c:5f:8d:80:6e:04:
         fb:01:d1:bc:1e:d9:f8:d2:f2:dd:a2:53:70:65:a2:36:e8:ce:
         3e:0a:da:c1:40:2e:f2:06:26:45:5a:e7:b8:17:8f:8a:77:46:
         19:e8:bc:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzktgDDzAOUHbCZTHZWHo1VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NWU1NjExNzg4MTQyYjMxNTQyOGFlNTFmNjdjYmJhY2Y4
MGI3ZTgwHhcNMjYwMzEzMDEwMDU4WhcNMjYwMzE0MDEwMDU4WjAzMTEwLwYDVQQD
EyhlNGVjM2MxNjUzMjE2MWViMDUzYzY2MGNmNmZmMzU1NzU4OGIxNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tEziWQ34flv9aNAr+ZdkfwyXaNe
eLaruyBZy04jKld9cP56+kqgy5kFtLg0PbgGeJ9vVhbqMHk7AFkwiO47XJAaJLjj
EzRzl2nDPRGpVS7jdTYs8lR1GaQckjMwbsPSPZTDvvQWwv4r29BCKUiUxeQlG9JN
rvNJmREIYcUBfL2WjuXNOFDjzxLSralu/BE6lqQjzFzwmyDyKsx+hqR29PgrFfYa
Cweb1/1/XOaq9NCmLfFdflB/OGKobuhIRfKk5BRyo0CIfR+lDeKuVzSIz50yHTD/
AQYbs6zFMmZqHtvWcp1RKEQsmSnAhh6/4PNPr79MZA7QWi+pwk2uI60B8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTsPBZTIWHrBTxmDPb/NVdYixS0MB8GA1UdIwQY
MBaAFNVeVhF4gUKzFUKK5R9ny7rPgLfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yM2RmYjItNzQ5ZC00NzFkLWIxMTQt
ODNjN2RiNzU5NmZlLzEvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yM2RmYjItNzQ5ZC00NzFkLWIxMTQtODNjN2RiNzU5NmZl
LzEvMVY1V0VYaUJRck1WUW9ybEgyZkx1cy1BdC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwo4pmXiI
b0sInMim24jTrl11rJj1HX00fQiC0EWr3378+rPMFMxWMraO5UrFBREhaojW7ck8
RVHea49XAONUe8rAGpK4x46wxkm+vG92y/oobMLxt2RQ+qF7uvcuEo0SqnNtCzI4
LFdF+o8kpIb0m0bhowSP9sKvfcJaFtPsSoM7AXGvCR7aDdmXb17UHZXB1/aC3ilS
nDiitF0G6t78ZuavAPLy3p+vX47TakQTzdBHChOF4LTcsX50kP2ADPuubAwVOsN+
iGpCdtA/JfIMitY7nF+NgG4E+wHRvB7Z+NLy3aJTcGWiNujOPgrawUAu8gYmRVrn
uBePindGGei8Tg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 03:47:45 2026 by rpki-client