Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File:                     5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier:          S6oB9T5l9gwNPtj8x0J1ujGN8CYuaAbz+WXcEYBWnlg=
Subject key identifier:   56:74:26:A8:BB:70:16:2E:1B:53:83:2B:31:13:8D:4E:FD:33:F9:35
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer:       /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial:       019CE3D9A8604DC529436AF461D59CE483C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number:          7C
Signing time:             Thu 12 Mar 2026 21:00:18 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:18 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:18 +0000
Files and hashes:         1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: Cedbc3+udiBhUCtlcQNWjULEjmi5wS4H3xPZhKczcds=)
                          2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:d9:a8:60:4d:c5:29:43:6a:f4:61:d5:9c:e4:83:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
        Validity
            Not Before: Mar 12 21:00:18 2026 GMT
            Not After : Mar 13 21:00:18 2026 GMT
        Subject: CN=567426a8bb70162e1b53832b31138d4efd33f935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9d:5f:81:0f:c4:1e:f3:30:c0:2a:c4:ea:84:
                    2d:97:92:80:d9:15:a4:5c:10:dd:5c:9d:6d:0c:6c:
                    e0:00:f8:92:f8:5f:a8:d3:88:a2:f7:fc:9d:12:63:
                    d6:3d:6a:50:6f:11:e6:43:ba:12:a3:75:80:dc:76:
                    31:b4:d4:7f:bd:3d:b3:b1:e3:15:3a:0a:91:28:ab:
                    2b:15:2e:e6:0b:fa:69:57:47:52:ce:19:88:55:38:
                    5c:2b:77:e5:5d:41:12:2f:29:23:ab:53:1c:29:5e:
                    ce:49:de:e1:a7:6d:56:65:ff:14:a7:ac:53:bd:2c:
                    60:d9:d6:12:0c:4b:21:b9:6d:5c:98:fd:55:2b:75:
                    5b:85:dc:b2:bc:e0:d6:de:70:fd:f1:e2:b9:b6:f5:
                    6f:31:c4:1d:bf:6a:da:25:11:cb:b4:da:c9:ee:d1:
                    bb:58:e6:b7:6d:14:58:61:aa:82:3c:9a:a0:5a:97:
                    27:82:be:a6:d5:9c:de:af:96:48:b3:f8:ab:62:52:
                    c9:82:7a:d2:cf:e3:21:3f:55:9b:e3:bd:50:0d:af:
                    bb:2d:5d:f1:5b:b9:a5:47:e7:bc:c8:0c:80:16:88:
                    7c:51:cc:2e:41:09:42:68:4b:ae:98:2c:7f:46:6a:
                    b0:2e:da:fe:db:7f:dc:5b:1b:b6:e3:19:39:b0:c7:
                    fa:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:74:26:A8:BB:70:16:2E:1B:53:83:2B:31:13:8D:4E:FD:33:F9:35
            X509v3 Authority Key Identifier:
                keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1d:31:d1:a2:9c:c6:d9:3c:cc:d4:24:86:99:ec:e4:99:b9:
         07:88:e8:97:a3:0a:cf:09:2c:e8:cb:d3:d3:92:06:a1:36:f9:
         3a:d2:37:58:56:4c:7a:03:f8:23:f0:0d:de:c9:39:18:5e:8b:
         15:d9:a0:66:78:16:bf:55:76:04:8b:e7:85:58:f9:1d:16:05:
         e1:29:96:f3:f5:0c:98:64:e4:f2:ab:1b:6b:0a:d1:17:e8:e8:
         3b:55:0e:13:2b:ef:d7:08:9e:fc:dd:bf:d5:8b:24:a8:80:bc:
         db:35:02:f9:ba:40:19:0f:61:c9:74:95:db:ca:f8:64:84:4e:
         c5:0f:24:13:1d:55:fc:0a:46:22:5f:61:68:69:95:08:29:0c:
         20:3d:87:f5:0f:b5:7f:89:06:d2:f4:81:b6:00:86:64:67:d0:
         a0:3b:08:47:2a:af:30:46:76:a4:50:34:74:0c:57:65:20:2f:
         40:80:3a:8f:81:91:97:ee:2b:86:f0:d7:87:8a:1b:8a:bd:36:
         30:5a:f5:2d:ef:4e:95:c6:6f:b1:1f:ed:2a:af:6e:d0:38:34:
         8d:17:55:58:32:09:c9:41:8e:73:6e:48:a9:5d:4a:d1:d2:87:
         a1:e0:9e:21:52:d3:c7:1e:f3:77:3b:a4:9a:b2:e0:44:14:0b:
         a4:1f:9c:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzj2ahgTcUpQ2r0YdWc5IPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0YWE1MzNmNDc1ZjA3OWY3MzVmZWIxOTQ2ODRjMThkNWFl
YTYzMmYwHhcNMjYwMzEyMjEwMDE4WhcNMjYwMzEzMjEwMDE4WjAzMTEwLwYDVQQD
Eyg1Njc0MjZhOGJiNzAxNjJlMWI1MzgzMmIzMTEzOGQ0ZWZkMzNmOTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ1fgQ/EHvMwwCrE6oQtl5KA2RWk
XBDdXJ1tDGzgAPiS+F+o04ii9/ydEmPWPWpQbxHmQ7oSo3WA3HYxtNR/vT2zseMV
OgqRKKsrFS7mC/ppV0dSzhmIVThcK3flXUESLykjq1McKV7OSd7hp21WZf8Up6xT
vSxg2dYSDEshuW1cmP1VK3VbhdyyvODW3nD98eK5tvVvMcQdv2raJRHLtNrJ7tG7
WOa3bRRYYaqCPJqgWpcngr6m1Zzer5ZIs/irYlLJgnrSz+MhP1Wb471QDa+7LV3x
W7mlR+e8yAyAFoh8UcwuQQlCaEuumCx/RmqwLtr+23/cWxu24xk5sMf6/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZ0Jqi7cBYuG1ODKzETjU79M/k1MB8GA1UdIwQY
MBaAFOSqUz9HXwefc1/rGUaEwY1a6mMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUtwVFAwZGZCNTl6WC1zWlJvVEJqVnJxWXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lN2I3MGQtNjAwMS00MjhiLWFkZDAt
MzdjMjEwYmFiN2EwLzEvNUtwVFAwZGZCNTl6WC1zWlJvVEJqVnJxWXk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9lN2I3MGQtNjAwMS00MjhiLWFkZDAtMzdjMjEwYmFiN2Ew
LzEvNUtwVFAwZGZCNTl6WC1zWlJvVEJqVnJxWXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABB0x0aKc
xtk8zNQkhpns5Jm5B4jol6MKzwks6MvT05IGoTb5OtI3WFZMegP4I/AN3sk5GF6L
FdmgZngWv1V2BIvnhVj5HRYF4SmW8/UMmGTk8qsbawrRF+joO1UOEyvv1wie/N2/
1YskqIC82zUC+bpAGQ9hyXSV28r4ZIROxQ8kEx1V/ApGIl9haGmVCCkMID2H9Q+1
f4kG0vSBtgCGZGfQoDsIRyqvMEZ2pFA0dAxXZSAvQIA6j4GRl+4rhvDXh4obir02
MFr1Le9OlcZvsR/tKq9u0Dg0jRdVWDIJyUGOc25IqV1K0dKHoeCeIVLTxx7zdzuk
mrLgRBQLpB+ctQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:17 2026 by rpki-client