Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
File:                     K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json)
Hash identifier:          3gQjyF3LqrNPwR5D/ejIqmbvdGwx9VNby5iCjPzODTA=
Subject key identifier:   9A:50:CB:F5:02:7A:90:E1:99:C9:0F:11:18:A9:70:EA:79:67:6A:B8
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Certificate issuer:       /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial:       019DA265B3C21790F8C0267A528F2CB4DB5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
Manifest number:          0247
Signing time:             Sat 18 Apr 2026 21:01:07 +0000
Manifest this update:     Sat 18 Apr 2026 21:01:07 +0000
Manifest next update:     Sun 19 Apr 2026 21:01:07 +0000
Files and hashes:         1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: ZJ3i46ssxLKspf8lhQq6bK4T9bDFfbB6pd+y9D5MXi0=)
                          2: TV4yZeh5gb-YNu16ne89KzqjkHI.asa (hash: ZF+GnFpj0JJbI8NWDxgtBCaESGA8VYEeovm/zlGZB0A=)
                          3: b2FwzXwPA4h4cgwtnyc60OtTa88.roa (hash: lkanuRYvWV1r1485k4lQhFz2YZsaICmZonIaOSauHis=)
                          4: sX-7jKd4Jkup4SzLh7V9fhcXJIY.roa (hash: zRqjfBS/ZWhDgqQc0xO/XDUwPIazRjKs3hCDGDdnfh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a2:65:b3:c2:17:90:f8:c0:26:7a:52:8f:2c:b4:db:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
        Validity
            Not Before: Apr 18 21:01:07 2026 GMT
            Not After : Apr 19 21:01:07 2026 GMT
        Subject: CN=9a50cbf5027a90e199c90f1118a970ea79676ab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6f:f1:f0:94:1c:0d:47:f5:6e:13:09:07:66:
                    83:c3:43:0b:e5:78:8d:05:67:d6:8e:44:94:d2:f6:
                    d7:01:bc:8c:a9:50:97:88:26:de:1f:1d:7c:ed:f1:
                    b1:80:38:60:f8:f6:5e:5e:e3:75:d1:e3:33:3f:ba:
                    81:26:00:7e:e1:f3:34:01:a0:c9:98:f8:dd:c0:7f:
                    82:c9:33:0e:5a:e9:db:9c:22:65:ef:25:07:7e:a0:
                    62:c2:1a:77:62:49:4e:22:96:9a:91:0c:0f:29:b4:
                    7a:4e:38:50:a1:a3:5e:5a:f5:33:35:d3:dc:9f:80:
                    2b:b5:ee:ad:7e:dc:6a:ab:26:b1:7f:e2:56:99:c7:
                    64:ca:24:d4:5f:1f:0e:de:76:2f:1d:eb:50:1a:9f:
                    6d:00:b7:6e:c7:fc:7b:85:ff:e4:93:01:05:35:0d:
                    53:6a:a2:ed:ee:16:40:dc:48:b0:ef:07:01:ee:55:
                    58:b8:5e:37:f9:97:09:dd:58:d3:5e:62:b9:dd:c3:
                    f4:cd:1e:64:9f:81:86:db:05:83:ef:17:f5:be:3c:
                    62:75:5a:ce:77:a2:63:63:de:45:73:73:5e:8c:2d:
                    82:99:9c:87:26:1b:e3:60:19:65:60:4b:6d:83:e8:
                    9f:56:7a:13:dc:83:d1:9f:15:6e:27:b3:fa:81:3c:
                    27:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:50:CB:F5:02:7A:90:E1:99:C9:0F:11:18:A9:70:EA:79:67:6A:B8
            X509v3 Authority Key Identifier:
                keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c8:92:66:3c:b4:f3:4d:04:da:74:f6:3a:28:4d:12:d8:35:
         72:e1:7e:ef:91:6f:65:b0:0f:45:0b:13:07:98:28:a8:1c:92:
         5d:b8:f4:b5:01:98:3a:10:c2:1c:9c:5c:f2:66:f2:02:a7:57:
         93:d3:ce:e4:cf:b5:57:57:82:b7:62:08:65:14:60:40:c8:e4:
         94:34:6e:92:61:65:75:54:c8:10:b0:75:37:23:34:c8:3c:39:
         a5:05:6b:89:85:73:46:4a:c8:cf:b5:47:be:1a:9b:57:95:91:
         e0:08:1c:79:5f:0d:12:43:ce:bf:af:40:4c:38:1b:6a:cd:ca:
         98:c7:ec:17:b9:b5:f1:b1:fc:46:fa:4c:1b:c7:54:67:0d:e5:
         b8:63:68:c7:6d:61:2e:38:69:6d:25:38:c1:4e:e2:f6:53:89:
         10:36:98:2d:3e:02:90:b0:38:ca:5a:c9:87:24:f3:0a:9a:88:
         16:29:54:cf:ba:7b:e5:4e:c3:ab:ef:10:6c:a9:b0:b6:6d:85:
         f0:8f:28:b5:70:6b:17:b3:3d:e3:68:20:cb:5b:06:e9:85:1d:
         ab:5e:dc:dd:1e:09:05:1a:c8:0c:ba:00:7e:06:83:13:5a:79:
         74:61:ea:d7:d9:1d:a9:03:50:2b:12:e2:84:4a:ea:6b:87:62:
         c5:f0:34:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 00:56:49 2026 by rpki-client