Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
File:                     5wQefn0YTV261xQp42W58Kx2ylI.mft (raw, json)
Hash identifier:          6mUZ9ur9QwB3rAqmVUI8OiwDm90YEZLtPMOfpjiJ+Xs=
Subject key identifier:   E7:C2:1A:6A:5A:5F:2F:6C:26:71:89:5E:52:81:51:97:10:61:43:A6
Authority key identifier: E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52
Certificate issuer:       /CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
Certificate serial:       019D371B3DBF1F485DAC6DA1B0224E863986
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
Manifest number:          016D
Signing time:             Sun 29 Mar 2026 01:00:25 +0000
Manifest this update:     Sun 29 Mar 2026 01:00:25 +0000
Manifest next update:     Mon 30 Mar 2026 01:00:25 +0000
Files and hashes:         1: 5wQefn0YTV261xQp42W58Kx2ylI.crl (hash: /umroZwuCuv6a8bgRX651pVLH/PiUM4OQBPRhKD5ACA=)
                          2: JGaj-VMF82BATvYd0lQOFLHFMc8.roa (hash: pT58jY5xAuPaGqFJHp5UHGx9TDCbSHrDu393sd5XVkQ=)
                          3: Tgyba4QUN4V8tZaz-LrXuKGglcI.roa (hash: 3N1ko+R/E9uyhb+olKiqz7rmkIhC5Q0D6JIxxMh2AjI=)
                          4: ng1Tkoik0468H1Ss1bWCZlgGMXA.roa (hash: syZ/2LZN01/WEB1S0lL+Wm4S4EZXka7JcoKvJG2ctoE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 01:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:1b:3d:bf:1f:48:5d:ac:6d:a1:b0:22:4e:86:39:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7041e7e7d184d5dbad71429e365b9f0ac76ca52
        Validity
            Not Before: Mar 29 01:00:25 2026 GMT
            Not After : Mar 30 01:00:25 2026 GMT
        Subject: CN=e7c21a6a5a5f2f6c2671895e52815197106143a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:54:c7:a5:bc:28:2a:7b:96:f4:22:60:6e:36:
                    c0:50:81:c8:06:28:ee:ee:b5:36:e7:ce:c7:94:d8:
                    2a:5d:fe:eb:26:24:cb:fa:50:02:c8:1e:29:6f:31:
                    9e:87:94:b9:e2:59:6b:3e:9b:70:4f:1f:dc:ef:04:
                    93:05:f3:ce:53:57:a8:a4:4d:4e:80:a5:3f:6b:fd:
                    98:9f:5a:9b:c4:a8:1e:21:9d:d7:18:04:42:20:75:
                    91:28:69:cb:f2:2c:62:2c:58:a7:96:cf:c9:8f:90:
                    5d:bc:0a:2a:34:51:e3:9e:da:ba:f9:88:06:55:f7:
                    1d:3a:b1:85:ba:43:b4:2c:fa:49:d7:b8:4a:47:17:
                    74:76:75:0d:05:26:89:05:42:fa:90:44:17:f5:f9:
                    11:97:59:68:a3:5e:d9:c0:de:4a:10:40:e1:31:1c:
                    1b:65:b5:c4:3b:80:20:1a:e5:0e:7e:ea:97:25:85:
                    49:f7:ed:1e:dd:14:3e:6f:96:e4:77:c8:10:a9:8f:
                    a6:1e:28:a0:cf:a2:33:5c:bb:b3:88:f2:15:92:12:
                    fb:c9:64:ec:91:9d:dd:82:40:d2:9e:ea:fb:ff:5e:
                    2c:6b:87:b5:8e:56:c1:22:68:5f:04:55:6c:4a:70:
                    13:0f:f2:b1:33:f9:1b:b7:35:04:95:47:66:75:9d:
                    30:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C2:1A:6A:5A:5F:2F:6C:26:71:89:5E:52:81:51:97:10:61:43:A6
            X509v3 Authority Key Identifier:
                keyid:E7:04:1E:7E:7D:18:4D:5D:BA:D7:14:29:E3:65:B9:F0:AC:76:CA:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wQefn0YTV261xQp42W58Kx2ylI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/532f41-2e3b-47eb-bed5-0e1c4ad03956/1/5wQefn0YTV261xQp42W58Kx2ylI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:1b:46:4c:b9:43:57:06:90:f3:c0:2d:ee:6d:a9:bf:aa:88:
         61:a9:ff:56:04:1d:c8:84:60:2c:5f:3b:9e:cd:52:e2:1d:a9:
         42:44:87:ae:89:7b:5f:bf:af:8e:87:28:05:f8:cf:22:ce:c7:
         22:26:3b:d4:ab:8d:dc:14:f1:02:79:44:ed:63:df:e2:f0:07:
         3c:95:36:15:72:c7:01:e9:77:d3:bc:20:af:40:bc:df:c9:c9:
         c9:cd:17:54:1a:95:4a:18:52:0d:cd:91:44:0a:17:14:b6:12:
         a0:ec:92:17:2b:56:1d:99:f0:5c:30:b7:ff:8f:fa:09:94:00:
         12:0c:70:56:db:b1:bd:3a:6b:24:b5:27:10:40:5d:bb:59:58:
         1b:0d:a4:f0:e2:e7:88:27:8e:eb:82:65:32:3a:26:e5:d2:00:
         76:2e:07:fe:f9:10:f9:0d:94:8a:b4:91:b5:65:aa:cc:44:91:
         d5:c7:c9:4c:d9:2a:34:06:7d:39:81:f5:ce:d1:7a:b8:11:c8:
         87:11:57:ba:36:95:41:a7:25:81:32:cc:9d:9a:c4:cc:49:8d:
         5f:14:a2:8d:94:1b:b9:23:0b:59:46:3d:6e:9f:b5:a8:31:13:
         62:96:74:84:95:91:69:c3:56:f4:9c:02:fc:1e:8a:4a:87:82:
         50:8e:47:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03Gz2/H0hdrG2hsCJOhjmGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MDQxZTdlN2QxODRkNWRiYWQ3MTQyOWUzNjViOWYwYWM3
NmNhNTIwHhcNMjYwMzI5MDEwMDI1WhcNMjYwMzMwMDEwMDI1WjAzMTEwLwYDVQQD
EyhlN2MyMWE2YTVhNWYyZjZjMjY3MTg5NWU1MjgxNTE5NzEwNjE0M2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lTHpbwoKnuW9CJgbjbAUIHIBiju
7rU2587HlNgqXf7rJiTL+lACyB4pbzGeh5S54llrPptwTx/c7wSTBfPOU1eopE1O
gKU/a/2Yn1qbxKgeIZ3XGARCIHWRKGnL8ixiLFinls/Jj5BdvAoqNFHjntq6+YgG
VfcdOrGFukO0LPpJ17hKRxd0dnUNBSaJBUL6kEQX9fkRl1loo17ZwN5KEEDhMRwb
ZbXEO4AgGuUOfuqXJYVJ9+0e3RQ+b5bkd8gQqY+mHiigz6IzXLuziPIVkhL7yWTs
kZ3dgkDSnur7/14sa4e1jlbBImhfBFVsSnATD/KxM/kbtzUElUdmdZ0wJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfCGmpaXy9sJnGJXlKBUZcQYUOmMB8GA1UdIwQY
MBaAFOcEHn59GE1dutcUKeNlufCsdspSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXdRZWZuMFlUVjI2MXhRcDQyVzU4S3gyeWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81MzJmNDEtMmUzYi00N2ViLWJlZDUt
MGUxYzRhZDAzOTU2LzEvNXdRZWZuMFlUVjI2MXhRcDQyVzU4S3gyeWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81MzJmNDEtMmUzYi00N2ViLWJlZDUtMGUxYzRhZDAzOTU2
LzEvNXdRZWZuMFlUVjI2MXhRcDQyVzU4S3gyeWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhtGTLlD
VwaQ88At7m2pv6qIYan/VgQdyIRgLF87ns1S4h2pQkSHrol7X7+vjocoBfjPIs7H
IiY71KuN3BTxAnlE7WPf4vAHPJU2FXLHAel307wgr0C838nJyc0XVBqVShhSDc2R
RAoXFLYSoOySFytWHZnwXDC3/4/6CZQAEgxwVtuxvTprJLUnEEBdu1lYGw2k8OLn
iCeO64JlMjom5dIAdi4H/vkQ+Q2UirSRtWWqzESR1cfJTNkqNAZ9OYH1ztF6uBHI
hxFXujaVQaclgTLMnZrEzEmNXxSijZQbuSMLWUY9bp+1qDETYpZ0hJWRacNW9JwC
/B6KSoeCUI5HVA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:15 2026 by rpki-client