Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
File:                     5_7U53ggnDyuk9S3bTUHBEYsOqs.mft (raw, json)
Hash identifier:          kKjoX9czK0DjgM3dlRUMOq1eAXj5pqgFBxoKhBmqt/k=
Subject key identifier:   A3:5D:DD:F2:30:BE:E3:81:45:98:42:05:7C:32:9B:28:3A:5B:C3:93
Authority key identifier: E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB
Certificate issuer:       /CN=e7fed4e778209c3cae93d4b76d350704462c3aab
Certificate serial:       019D3940EF50E19563B6528E808FCB7275B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
Manifest number:          1628
Signing time:             Sun 29 Mar 2026 11:00:49 +0000
Manifest this update:     Sun 29 Mar 2026 11:00:49 +0000
Manifest next update:     Mon 30 Mar 2026 11:00:49 +0000
Files and hashes:         1: 5_7U53ggnDyuk9S3bTUHBEYsOqs.crl (hash: 5KNsFc3nRgBmWKoou/gxv8DiEquTwX+uJSea1UulA+k=)
                          2: JwW5igF2W5CG4b3gOB1N-4Tr5f0.roa (hash: 5blYmQTQjzI334hh/BrW3VyFklzwSKOWMSe53enNbtY=)
                          3: VrszO5Duu2tRlGCAKelJi9h9HAE.roa (hash: aQbT8pvpsdyttAdl0Hl4R5X9KOuoLqwgtVsC4EEC5a0=)
                          4: W9Fvlv3duX9DRkDTqbmNDRUAR2w.roa (hash: steiQ/OhvjftehInkgiMWqLT5RHndX02Sd+qChnL5N4=)
                          5: s8S9zF9JZsr2WbNXFfV-EAyCTok.roa (hash: b8QiJz3/x06BzZRIg3FCqyXoFLFLy+dFH00BYbMUiU8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:40:ef:50:e1:95:63:b6:52:8e:80:8f:cb:72:75:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7fed4e778209c3cae93d4b76d350704462c3aab
        Validity
            Not Before: Mar 29 11:00:49 2026 GMT
            Not After : Mar 30 11:00:49 2026 GMT
        Subject: CN=a35dddf230bee381459842057c329b283a5bc393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:be:ec:dd:08:f3:ca:53:fe:3a:69:c9:7f:
                    39:87:fd:a0:c0:95:98:2a:e5:92:4a:59:a2:61:bb:
                    ac:3e:34:1c:9d:76:5f:71:4f:89:3a:d7:b3:fa:df:
                    74:d8:13:bf:61:69:f6:12:34:e7:32:8c:8a:d1:81:
                    a9:b9:f8:7d:56:46:0e:d3:f6:22:49:8f:f3:6c:65:
                    e2:bd:20:1d:c6:cd:ea:d8:82:e8:96:40:83:97:c6:
                    25:6c:d5:e9:0c:50:51:f1:f2:73:99:c7:3a:59:ee:
                    e8:d4:19:4f:1a:4d:19:92:49:8c:ab:95:d2:a8:2b:
                    57:e0:0b:61:6c:2d:2b:26:97:4a:52:6c:5f:14:75:
                    01:b3:99:ed:06:a2:12:63:ff:4a:c6:4c:a3:a4:28:
                    37:67:8f:50:6c:8b:6b:6c:58:60:38:ab:d7:28:be:
                    2a:4b:de:84:7d:0a:30:fd:21:7c:da:0a:71:c9:da:
                    3f:c7:0c:88:d7:c6:13:14:8e:31:65:95:a6:f5:9d:
                    57:7c:27:5a:2b:e6:30:57:61:0f:d9:2d:08:5f:e6:
                    c4:85:52:24:a6:d2:b9:d1:f6:4d:2a:be:5e:d8:0f:
                    f5:05:18:bc:54:a3:2c:58:bc:72:e6:8b:03:51:89:
                    ed:e4:48:2d:69:10:11:88:22:c9:92:41:ac:1c:6f:
                    6e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5D:DD:F2:30:BE:E3:81:45:98:42:05:7C:32:9B:28:3A:5B:C3:93
            X509v3 Authority Key Identifier:
                keyid:E7:FE:D4:E7:78:20:9C:3C:AE:93:D4:B7:6D:35:07:04:46:2C:3A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_7U53ggnDyuk9S3bTUHBEYsOqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/22a3c7-6fe5-49e1-935d-8bb80152ab34/1/5_7U53ggnDyuk9S3bTUHBEYsOqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ac:45:25:c0:47:a0:1f:1d:2f:fb:b6:95:8f:30:ee:71:2b:
         85:07:c3:65:c3:1e:08:fb:99:e4:42:0a:0b:ae:15:be:a1:35:
         d9:5e:0c:68:a0:61:8d:fb:81:28:19:fa:c3:58:85:9a:e1:16:
         ad:ad:d5:1a:e2:f5:01:76:3c:55:aa:87:08:78:5b:5d:10:8a:
         ea:b1:ab:c7:bf:8b:0e:ae:69:25:f4:81:d6:08:38:a8:d7:0e:
         5c:c1:1b:60:ca:47:f1:f9:ba:ce:d2:07:ab:af:aa:ac:fc:ed:
         3d:eb:ce:b6:19:37:ba:3b:54:d7:dd:35:d3:f9:df:b5:20:41:
         4d:e6:46:15:b5:ed:c3:56:3b:d4:a9:7b:f5:d7:6f:6a:c5:26:
         6a:75:6b:e6:2b:6a:6f:bf:79:50:07:9c:fe:e8:38:4d:c5:e6:
         6c:5c:bb:06:8a:f9:8d:86:1e:42:b7:fd:b6:70:93:87:82:3e:
         f4:30:e3:19:89:57:1f:19:46:89:9d:71:7c:f8:da:0e:fe:02:
         e8:af:41:c9:10:95:0c:df:da:62:48:87:ef:2c:d6:c6:81:eb:
         e9:6f:08:f3:15:6a:9e:92:53:50:20:6f:2e:73:b6:bb:63:92:
         5c:17:39:c6:9b:65:b3:7d:e4:3d:b2:85:c2:17:70:60:e5:35:
         92:2f:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:07 2026 by rpki-client