Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
File:                     F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json)
Hash identifier:          auJNcQgNSwB74aB21AVec5IehthcBQoiGE/JmkQ5YGw=
Subject key identifier:   36:01:D1:66:8A:97:02:8C:D7:0E:89:A2:58:0C:FE:CE:68:CC:F7:B6
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Certificate issuer:       /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial:       019D37892696866ACDA524C2AECBDF177B68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
Manifest number:          12C4
Signing time:             Sun 29 Mar 2026 03:00:28 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:28 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:28 +0000
Files and hashes:         1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: itzlsqMwDugkj5tv5+JRLkLIRVnYiGjfv6ndoybpQEo=)
                          2: MwjqyVMrj31F474MSeKkhNXzvoI.roa (hash: m7bqaTX59YwG3k1du3WuNAO3cJYKNz+DJfHgg5XKNsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:26:96:86:6a:cd:a5:24:c2:ae:cb:df:17:7b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
        Validity
            Not Before: Mar 29 03:00:28 2026 GMT
            Not After : Mar 30 03:00:28 2026 GMT
        Subject: CN=3601d1668a97028cd70e89a2580cfece68ccf7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:97:28:13:3a:0e:c1:d8:28:d3:35:dd:a7:15:
                    cf:94:22:4d:04:df:bf:1c:f9:e3:a0:11:bb:c6:8f:
                    cc:99:6d:e7:50:27:6a:c4:62:e7:af:db:f7:cf:c6:
                    6a:2a:fd:f4:81:71:ac:cb:13:44:ec:57:1a:35:87:
                    35:77:c8:90:de:13:dd:88:c7:9a:0f:64:b4:23:5b:
                    bd:12:41:65:3c:ec:74:d9:e1:29:85:3b:75:91:99:
                    b0:98:1b:98:3a:47:ba:a2:a2:0e:ac:b0:6b:cd:02:
                    49:87:64:ea:11:5d:de:64:af:47:33:91:d7:a3:40:
                    dc:8c:79:61:2e:97:68:98:74:db:a4:d4:7a:00:84:
                    18:fc:9a:2c:93:a3:c9:dd:0b:a6:42:f4:4a:ae:1a:
                    aa:2c:5f:96:ef:73:f1:91:9e:b4:2d:5b:cb:7d:f1:
                    f1:36:5b:68:58:40:c1:be:e7:e8:02:54:e4:e3:0e:
                    ba:d5:36:b7:1f:26:a8:e8:9e:03:ac:63:ba:e4:ed:
                    ec:ca:33:5f:cc:0f:08:e1:73:fd:ce:f9:eb:ec:2a:
                    6a:63:af:27:c0:24:6e:ba:a8:e7:a7:a6:2d:9c:66:
                    15:7b:35:74:94:24:78:ed:2c:f5:a1:3b:4f:21:fa:
                    c8:c2:9e:7f:4d:c4:b1:62:2f:93:ec:d8:30:51:b9:
                    7c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:01:D1:66:8A:97:02:8C:D7:0E:89:A2:58:0C:FE:CE:68:CC:F7:B6
            X509v3 Authority Key Identifier:
                keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:47:ff:30:74:ce:0a:6d:26:1a:2c:31:53:b2:8b:36:f6:dc:
         f3:0e:0a:3a:5b:c1:2d:de:d2:2c:68:72:3e:e2:53:5a:37:fc:
         76:c9:45:37:f8:a4:39:d7:28:ed:af:2f:81:dc:70:d0:28:30:
         80:2e:6c:02:63:23:d7:0e:2a:08:30:30:1b:b9:17:f8:fe:f0:
         b8:84:5e:2e:f2:4a:42:b7:f7:23:40:94:c9:f3:fe:c4:0f:df:
         b0:0c:48:21:4d:ae:a4:86:66:e2:29:93:fe:68:b4:6e:b0:61:
         fb:43:b8:48:27:8e:08:6b:ea:7f:42:4f:f8:63:43:4b:bb:f7:
         84:32:91:7d:dc:a9:1f:09:ec:77:49:3d:9d:e6:d4:95:e8:7b:
         61:d3:46:3c:60:6d:ce:c0:24:b5:99:fb:ab:e9:fc:e2:79:e1:
         62:e4:61:22:32:98:ab:d2:f9:66:ce:54:2b:5b:50:25:28:84:
         6a:aa:32:cf:1b:2d:db:86:c4:72:05:37:83:8e:c0:1e:56:30:
         0a:7b:4f:28:06:59:a7:25:72:df:e6:f8:8b:73:19:0c:3e:f8:
         73:b7:32:88:86:4f:49:2d:00:a0:f7:95:76:bd:30:fa:46:75:
         97:a9:4c:1f:7c:17:bf:45:ee:01:c6:63:62:dc:cf:1e:0f:e1:
         87:ac:f8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:47 2026 by rpki-client