Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File:                     5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier:          G0+FCqgqL2S1WVcBaqEVrJOtepMLwFgyDfDI5WGF5j4=
Subject key identifier:   B8:3D:BB:46:57:CE:61:C7:50:58:70:F3:01:BA:8F:59:0E:3A:D6:05
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer:       /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial:       019D390A4C8532FB92E0F64B3C2A1481CC07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number:          0C3F
Signing time:             Sun 29 Mar 2026 10:01:09 +0000
Manifest this update:     Sun 29 Mar 2026 10:01:09 +0000
Manifest next update:     Mon 30 Mar 2026 10:01:09 +0000
Files and hashes:         1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: nDjPJAqEFZxnEw8bHSOEyDGJMIB2HRlcs+BehNDAVCw=)
                          2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:0a:4c:85:32:fb:92:e0:f6:4b:3c:2a:14:81:cc:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
        Validity
            Not Before: Mar 29 10:01:09 2026 GMT
            Not After : Mar 30 10:01:09 2026 GMT
        Subject: CN=b83dbb4657ce61c7505870f301ba8f590e3ad605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d1:1f:2f:78:28:a9:21:86:24:24:57:57:e7:
                    bf:1a:08:06:88:df:30:17:64:c5:2a:2b:77:00:aa:
                    cf:bf:4a:db:22:92:ea:95:16:a8:72:1d:f4:c5:ca:
                    45:c9:37:4a:5a:c7:d6:e0:11:35:d4:80:34:6c:14:
                    df:17:93:ca:4d:25:70:f4:90:10:44:e2:54:cd:b0:
                    2b:d0:8b:fb:78:5f:82:bd:7d:cb:a4:db:75:0b:19:
                    d0:17:4d:63:1d:71:67:a2:35:06:88:c0:5d:2f:24:
                    83:ab:13:16:7d:3d:bd:12:59:25:a7:73:2d:61:88:
                    04:f7:15:a2:33:f4:84:3c:33:ad:e2:00:85:aa:d3:
                    39:00:45:5d:f2:a3:73:2d:6a:d7:fd:3a:98:48:46:
                    88:c3:2d:91:83:16:39:82:26:8c:ef:d6:72:04:99:
                    9a:82:8d:fd:cd:9a:d0:97:ae:a0:4d:34:fb:c7:95:
                    7e:10:c0:a1:12:41:d3:0d:93:db:23:b2:19:6b:68:
                    8f:99:53:24:19:00:95:01:5b:7b:f2:f0:51:66:cd:
                    d5:9c:38:7f:79:b7:91:20:8a:ef:2c:56:9b:25:28:
                    3b:e9:7a:79:10:97:fa:cd:f5:45:e5:ee:be:90:98:
                    0c:b4:2c:af:e7:c2:c1:f1:5e:3f:72:ca:9c:bb:ff:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3D:BB:46:57:CE:61:C7:50:58:70:F3:01:BA:8F:59:0E:3A:D6:05
            X509v3 Authority Key Identifier:
                keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:a6:4a:58:a4:49:8f:5b:29:fc:e0:66:8c:11:07:a1:95:8c:
         30:a6:1f:97:6e:6f:f1:80:93:99:7f:91:ef:63:3b:e8:c1:66:
         fb:72:06:95:6b:6f:cf:cb:69:6f:df:10:f0:f5:6b:83:27:f8:
         3e:5c:47:40:1a:59:22:35:19:6b:c3:41:2b:65:10:75:c7:ff:
         a8:c6:8c:d1:76:b3:a9:88:ba:df:b3:4f:47:cb:89:c0:49:bf:
         04:bd:d5:0b:ed:d2:08:e1:05:87:b5:0c:92:d1:2e:d2:cb:c3:
         f5:b3:1c:84:c8:42:8d:bc:c1:85:8b:4c:37:28:fe:32:b2:ef:
         ef:14:b0:4f:d5:2b:77:78:44:26:3c:58:60:40:79:fa:b2:9a:
         12:04:aa:aa:de:8e:06:c7:1a:7a:60:f0:88:6a:ea:f6:cf:2a:
         91:cd:1c:07:be:78:6e:57:5c:7b:bb:32:a9:60:28:50:75:a1:
         b1:37:29:7c:06:da:47:aa:90:7c:34:cf:95:25:8b:f8:8b:19:
         86:49:79:3d:d0:b5:13:69:db:a7:ef:20:48:63:d1:99:e2:4c:
         85:b4:e5:1d:19:84:68:d7:c2:cb:f2:93:f1:9d:bb:b8:7d:71:
         90:df:c0:ba:23:6d:53:20:35:ae:f6:30:ad:1f:5b:75:b6:84:
         71:88:27:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:00:58 2026 by rpki-client