Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File:                     5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier:          ZPSkSndf7/t3wWw0jNk/pIdhJYOCCyRojJWvk4sjXn8=
Subject key identifier:   F5:2B:56:4E:57:2F:7B:6C:A9:07:89:E0:7D:11:6C:BC:81:77:AB:07
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer:       /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial:       019DDC8C405D74589B615669415C935742A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number:          0CCD
Signing time:             Thu 30 Apr 2026 04:01:12 +0000
Manifest this update:     Thu 30 Apr 2026 04:01:12 +0000
Manifest next update:     Fri 01 May 2026 04:01:12 +0000
Files and hashes:         1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: KKyxUHws1L8esaO4AbPtBkTaAIZuyI7OaqtTawmSR8Y=)
                          2: QS3mViuWefpzRVuut9BCujNEHBk.roa (hash: pncFDsfj5PoDws+gFKzvHR1BHzgW/TNAwcyb1+Rx/Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 04:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dc:8c:40:5d:74:58:9b:61:56:69:41:5c:93:57:42:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
        Validity
            Not Before: Apr 30 04:01:12 2026 GMT
            Not After : May  1 04:01:12 2026 GMT
        Subject: CN=f52b564e572f7b6ca90789e07d116cbc8177ab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:93:47:3c:fd:b7:61:74:3b:77:df:85:3a:
                    2c:c0:40:f2:cf:e5:74:d7:2d:7e:ff:79:3a:b4:fc:
                    3d:9b:23:8b:93:50:9e:19:5c:91:a6:25:7f:b1:d1:
                    40:01:80:ee:49:e3:33:53:7c:ab:83:f2:ce:f6:57:
                    82:96:6e:2b:5b:4e:39:f1:8c:77:cb:f2:ef:b5:5b:
                    a7:f4:4a:88:34:0d:6e:06:a1:be:81:cc:7b:2b:d2:
                    6c:36:d7:7b:c1:94:bc:6c:c2:aa:82:c5:ce:88:1d:
                    40:eb:88:be:fb:6c:d3:d7:9f:5d:fd:de:25:aa:8c:
                    4c:84:ea:82:f6:d3:e4:ae:6e:08:7c:74:ca:8a:c1:
                    59:53:d4:eb:ad:8e:7c:61:d6:21:63:ef:0f:29:48:
                    cf:2a:d0:fc:c3:5e:2a:aa:0c:bf:7c:c7:40:2d:8d:
                    1c:12:66:fc:b8:fa:cc:5e:48:04:59:70:ea:b4:ee:
                    f4:67:29:aa:27:54:e6:49:13:4c:fd:ce:47:8f:b1:
                    90:74:13:04:b2:57:96:b7:0f:94:50:76:3e:5f:28:
                    7c:41:14:bf:37:84:94:e7:0f:01:09:f6:28:95:99:
                    c9:5c:6f:d6:80:a1:9b:fe:39:58:ba:35:cf:54:e4:
                    94:fa:f9:41:fd:5c:70:01:f4:6d:d7:36:41:16:30:
                    d2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2B:56:4E:57:2F:7B:6C:A9:07:89:E0:7D:11:6C:BC:81:77:AB:07
            X509v3 Authority Key Identifier:
                keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b0:c4:29:e7:01:7f:cb:e8:27:49:ca:ee:50:1b:fc:a9:3b:
         a6:01:ec:e8:d9:4b:05:25:8d:4b:5b:d6:cf:97:fc:28:33:de:
         7b:42:63:28:e2:68:ab:fe:41:be:f3:23:4d:b6:21:e0:40:ff:
         f5:55:db:8d:df:b9:a7:23:a5:73:2e:ce:41:74:6b:76:f7:f7:
         27:03:fa:58:fe:67:ae:1d:1c:2b:98:57:df:a3:a9:21:05:5b:
         07:56:d2:0e:0e:c7:28:fc:b1:03:f1:d2:9f:06:f1:e0:b9:19:
         72:a6:91:1b:08:07:c7:20:f2:af:ba:7f:13:54:c2:5f:6a:70:
         c8:52:e6:f8:f3:ab:d4:64:54:10:df:c7:1a:58:45:14:b7:65:
         98:46:d9:cf:c2:e7:4a:b5:75:e6:8d:04:05:11:60:2a:88:d1:
         96:26:95:d9:33:1f:a7:1c:d5:9f:ac:f1:25:69:a4:79:12:73:
         b6:dd:15:bf:bf:ca:b3:ea:c8:54:1e:56:2e:15:04:9c:c1:56:
         af:b3:ee:c7:d1:90:05:a1:4a:d2:cf:44:1a:f9:aa:01:ef:44:
         2e:77:cd:c8:e5:b5:7e:3c:14:58:c1:27:f1:23:92:19:60:d7:
         51:bd:16:58:24:4b:f8:b0:f3:3c:e3:84:f2:68:18:14:3c:e0:
         50:17:c3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:45:57 2026 by rpki-client