Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File:                     a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier:          +l1x5kfJx+DqXo4Qxh6qm+OOTxAGC8JwYV/aS93+WXg=
Subject key identifier:   13:50:62:A5:F1:C3:B8:C6:3C:82:AE:E4:07:89:87:AB:C9:EE:0E:F6
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer:       /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial:       019CEB937E5217A9FB4E03ABCD92F4F805A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number:          0896
Signing time:             Sat 14 Mar 2026 09:00:37 +0000
Manifest this update:     Sat 14 Mar 2026 09:00:37 +0000
Manifest next update:     Sun 15 Mar 2026 09:00:37 +0000
Files and hashes:         1: KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa (hash: 82rT1wn8tLHS3yTCKW0vJmoxGtSf+pDEWCX5BqeTJXM=)
                          2: WjMwl8ZfVOdoyhMOTA8BMehWEJI.roa (hash: RHZCcknMsS5tx01/QhJWB8dlrXaXtmtm/9S2WPp95p0=)
                          3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: hYpLue6bzp2q4a75KKL4ecLRWKdZNG1aW1Tl/wjGiQM=)
                          4: kKa1XAZi28YxfpB3mEQct4rM5D8.roa (hash: WRwHyOAs556xA5lR2SanPEOIWdbcPQ5+gONgps5Y/Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Mar 2026 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:eb:93:7e:52:17:a9:fb:4e:03:ab:cd:92:f4:f8:05:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
        Validity
            Not Before: Mar 14 09:00:37 2026 GMT
            Not After : Mar 15 09:00:37 2026 GMT
        Subject: CN=135062a5f1c3b8c63c82aee4078987abc9ee0ef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b9:b8:fe:74:6d:db:fa:f0:db:ac:98:7c:aa:
                    c4:9c:99:19:f9:58:b3:0e:3c:06:3a:cf:d4:fb:e0:
                    f3:0f:73:36:d5:dd:b3:85:e6:38:11:e9:5d:d0:64:
                    9d:72:13:c8:e6:58:5e:28:32:92:33:75:bd:7d:3f:
                    b1:0d:0b:d8:1b:e9:a5:b5:01:4f:47:6d:f4:af:68:
                    b2:e4:40:7e:4b:45:ff:f4:6b:e9:35:12:2b:2d:93:
                    3d:f5:66:0c:61:51:7c:28:76:d7:a9:1f:0b:17:f9:
                    6b:7b:68:67:38:62:d2:08:b9:b5:f0:e7:96:45:48:
                    91:80:04:a0:5a:ff:74:3f:f2:f6:d3:7d:91:71:05:
                    2e:a7:ec:76:2d:36:d6:20:ba:8b:48:1e:3f:de:14:
                    e3:2b:b0:6f:a1:7b:e8:9c:ec:0d:5b:b2:16:b0:42:
                    7f:f3:31:6e:2a:49:2a:8d:97:83:77:fc:43:42:92:
                    47:01:91:a8:de:76:c3:9c:8b:1a:3c:59:e3:ff:2b:
                    64:eb:d6:9a:20:8d:1c:a6:91:00:b3:65:cc:e6:1b:
                    7f:d5:d8:b5:6b:67:6c:af:98:02:02:e6:cf:1d:c6:
                    e8:b6:50:00:75:3b:73:e7:d0:77:d0:6b:65:17:23:
                    15:ce:6c:d1:b6:31:52:8e:e9:4f:b8:6d:be:51:57:
                    f3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:50:62:A5:F1:C3:B8:C6:3C:82:AE:E4:07:89:87:AB:C9:EE:0E:F6
            X509v3 Authority Key Identifier:
                keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:cb:7b:60:fe:8b:22:27:ad:0c:72:39:ac:3b:35:f8:96:ac:
         70:55:6f:a8:41:b8:b9:0d:7f:6f:62:72:16:d9:3c:25:75:21:
         b7:f8:b3:51:10:7c:3f:cd:04:6c:db:0e:fb:46:2a:57:02:c6:
         b1:a9:ca:2a:15:78:9d:a6:58:34:33:7c:ba:69:32:e8:28:82:
         c1:19:62:c7:c2:12:d7:25:9a:66:10:5b:b0:dc:0d:a2:4b:1b:
         f0:2b:89:94:ae:2a:87:8e:13:d3:6e:5b:80:7d:1a:61:02:8c:
         f4:82:36:b8:56:80:ce:b9:08:3f:f0:1a:43:ad:08:38:4b:96:
         fd:87:4e:f3:83:30:9b:a9:6a:3e:c9:90:7f:2d:8f:0b:dd:21:
         bc:ea:c2:fe:00:a2:c8:95:51:fd:53:04:1c:6d:c5:26:22:d7:
         19:f9:91:6e:35:a6:8e:62:2e:69:19:c2:11:4f:fe:23:1f:66:
         da:d4:a7:6d:6e:ae:8d:6e:f6:7a:74:7d:26:69:b3:e0:8f:a1:
         b4:9d:33:7a:cf:5d:13:83:97:19:4e:d2:fd:bc:21:ca:88:5b:
         45:30:60:04:a6:23:07:1d:2e:2e:15:32:77:c9:95:47:80:43:
         d9:e1:ec:7c:76:ac:4c:fb:48:46:cc:e5:13:f0:fc:21:30:90:
         76:e1:dd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:17:05 2026 by rpki-client