Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
File:                     5b15I6_brofQeyMI3TidnPCC7W0.mft (raw, json)
Hash identifier:          n6ye2yu6NGoNgMdnAIQT9sG8uFM/xbsEMEGuFLSy7Mo=
Subject key identifier:   4A:F4:5B:9A:64:E2:6A:F0:88:0D:9C:60:C1:27:AB:84:8E:E6:8E:BD
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Certificate issuer:       /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial:       019CE4111A358C7C1AF0C168142ED234FE8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
Manifest number:          1340
Signing time:             Thu 12 Mar 2026 22:00:51 +0000
Manifest this update:     Thu 12 Mar 2026 22:00:51 +0000
Manifest next update:     Fri 13 Mar 2026 22:00:51 +0000
Files and hashes:         1: 0QsDdeC8WDkI2mRII63AEJgwGL0.roa (hash: 8Van+iVY6DYl8neGvsGg9ItzBr6NdUFFOVcUSDS2B4A=)
                          2: 0bbALsEZlkbsRmfhGFXRcx9rUIY.roa (hash: EaXePGtmmMVBTaGreFnLxK1TMZfGNFgqcqvlwBSKVRI=)
                          3: 5b15I6_brofQeyMI3TidnPCC7W0.crl (hash: InafPTyNn7gbnl8r+l7qs1FQ+MM9HkxC+cYjXCqYw+k=)
                          4: FvDB3xvyGUKLfutOGVneEg7UFiQ.asa (hash: eJi/wJQyoV4yaUyCjcKLxDOTczXJuwcA4Gxi8/xhRPE=)
                          5: Uk_XDceW-ZPDKMcc_f2F6eLioUk.roa (hash: jLiOckt+vrx8TOSEJT6TLvtJFvKCadRGVP5+VbDfoXE=)
                          6: dyKVgNsjZxg_ms1n2E7Bfw10stc.roa (hash: BqmZyOOtyNCSkSJ7x/mGSb0glowMzHs3l/S8+cc3Vzw=)
                          7: hS2aW8FUkBTQalOuciQCsDXmneo.roa (hash: Pa+owwfEnOZARjAauR/QvY9V1pwMcDiCDnFUwH+c7nw=)
                          8: krebELS6FLfilnA__hBq0uhvWyo.roa (hash: XGJZqlWxpa74go/FmTdiLNyWAGB5hXKCDhTD8hHKfr0=)
                          9: uQtOTVjA9edAk2AfPQUPe5C5AYo.asa (hash: mpazgkRYNNbUsNPK4E/B9pMgCqrNdejGSwW54YC+PH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:11:1a:35:8c:7c:1a:f0:c1:68:14:2e:d2:34:fe:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
        Validity
            Not Before: Mar 12 22:00:51 2026 GMT
            Not After : Mar 13 22:00:51 2026 GMT
        Subject: CN=4af45b9a64e26af0880d9c60c127ab848ee68ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6c:e5:ca:e0:35:29:7d:80:ff:6d:43:44:de:
                    dc:3a:f5:ee:fa:66:f0:8a:a4:e1:ff:8e:ec:51:8f:
                    08:fc:02:27:30:3a:08:22:9f:ec:1b:83:4e:98:10:
                    d9:f8:c3:ce:a6:3c:1b:f0:9b:7d:40:7a:d1:aa:88:
                    ce:2c:ed:10:8e:a8:86:e4:6e:e1:0f:76:4a:07:90:
                    a5:3b:46:38:7b:5b:f5:f5:f3:2b:0c:bc:76:ef:8a:
                    ad:02:02:ad:83:26:41:af:c4:73:36:ee:c7:07:b9:
                    b2:6a:84:42:3e:b1:db:3a:7d:c6:71:e5:a5:f0:53:
                    29:96:1e:1c:f6:ca:25:71:26:f4:5f:ab:9a:bf:d2:
                    e6:f0:58:0b:fe:1a:37:29:34:7e:23:4e:77:26:75:
                    ea:04:4d:32:7c:00:2b:1f:44:fb:a1:9d:28:6b:44:
                    0b:29:97:cd:b0:ce:f5:79:a4:98:35:92:ea:45:8a:
                    7c:42:6a:91:f7:31:96:a3:c3:48:d7:b5:0d:45:99:
                    25:62:de:09:f4:12:e1:90:8d:3e:26:61:b3:b9:8b:
                    ed:8f:1b:e0:4c:59:11:4f:f9:b1:51:d4:17:52:d9:
                    b0:8b:f1:87:02:7c:ce:d9:a6:41:25:2b:7d:b7:d7:
                    ff:cf:b8:64:49:5a:25:fc:bf:dd:57:80:fb:a9:b8:
                    35:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F4:5B:9A:64:E2:6A:F0:88:0D:9C:60:C1:27:AB:84:8E:E6:8E:BD
            X509v3 Authority Key Identifier:
                keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:7c:77:ac:cc:36:bb:8c:94:94:27:1d:4b:4c:51:32:da:cf:
         a4:30:e7:25:1c:70:fb:89:3a:ee:c0:8f:c1:11:b0:8b:e9:f8:
         79:d4:be:f1:51:19:b3:db:80:b3:1a:bb:9d:33:dd:d8:e8:43:
         3b:e3:2b:a1:98:01:08:03:70:bf:61:71:c7:05:d4:8b:81:4e:
         85:63:37:9e:ba:49:46:9d:6a:5f:db:c3:05:6a:45:53:dc:e5:
         06:03:85:aa:82:9e:3a:3b:dd:47:5d:db:73:ed:fe:e3:b9:f3:
         50:bb:8a:55:d9:82:6d:24:6e:c9:09:8a:bf:20:ad:da:2a:cf:
         65:d8:d5:06:b0:c6:f8:d5:13:33:f0:05:b3:44:c2:06:6b:b5:
         dc:e7:be:02:42:8d:54:3e:73:47:39:d6:b3:d0:76:f9:23:92:
         fe:9c:b3:aa:1b:b2:a6:b3:73:0e:bd:61:c3:98:5d:28:06:73:
         05:bf:59:12:1a:ac:a2:e0:b2:84:cb:0e:e2:33:c5:68:1d:29:
         58:51:f1:23:d0:4c:79:15:6a:49:79:e2:5e:d1:e3:6b:80:74:
         a3:34:ae:19:52:b6:03:61:b4:3e:15:e9:4e:82:d9:2c:4f:53:
         b5:6e:a4:79:f8:74:ca:d6:bf:2d:8c:d1:91:74:2b:16:97:39:
         c5:ee:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:12:55 2026 by rpki-client