Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
File:                     h5tde1dZQJk3xcLCLwrb6OgyoF0.mft (raw, json)
Hash identifier:          G0QM0SVST2OTIScqnyzh7yaA/hGckdWKtkM7MzIqlqk=
Subject key identifier:   55:D5:55:46:3F:0F:2D:F8:70:9D:3D:A7:41:94:67:4A:2D:C2:93:09
Authority key identifier: 87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D
Certificate issuer:       /CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
Certificate serial:       019CE4ECA873C712C791FE7B0EC4A0C137A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
Manifest number:          1867
Signing time:             Fri 13 Mar 2026 02:00:40 +0000
Manifest this update:     Fri 13 Mar 2026 02:00:40 +0000
Manifest next update:     Sat 14 Mar 2026 02:00:40 +0000
Files and hashes:         1: h5tde1dZQJk3xcLCLwrb6OgyoF0.crl (hash: Cn6/54PD90u1SxCPKRURdllb0az4bHDcFRGO/BWDG/A=)
                          2: tIWXntXKAgFX0o2CV5R3EvscJgw.roa (hash: GTihkbWiV/MenNAEieTq6Kt2bzz2nxk2i7D/ILSukLE=)
                          3: wDl6L6U8gtXF9PxG-RDkEh7vuAA.roa (hash: hIwbqTZcso8+8XAzuEzLE/OzP+u04MNbgmhj7K21Bm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e4:ec:a8:73:c7:12:c7:91:fe:7b:0e:c4:a0:c1:37:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=879b5d7b5759409937c5c2c22f0adbe8e832a05d
        Validity
            Not Before: Mar 13 02:00:40 2026 GMT
            Not After : Mar 14 02:00:40 2026 GMT
        Subject: CN=55d555463f0f2df8709d3da74194674a2dc29309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:95:f1:f0:51:69:c4:3f:86:bd:fc:eb:8e:68:
                    d9:04:56:04:b5:f2:d9:a2:a1:20:01:cd:98:59:1a:
                    0c:6c:b3:74:ca:1d:5c:92:3f:44:a0:8a:4d:ef:f0:
                    b4:90:21:ff:2a:47:97:29:04:9a:9b:4a:cc:e1:35:
                    d4:c3:33:31:2f:74:8e:98:a4:69:03:3b:3d:8c:80:
                    7b:37:0a:a7:4c:54:c2:a0:c4:7c:68:f1:b8:fe:cb:
                    9c:ef:04:c2:38:b5:1f:02:8d:aa:73:89:67:e3:92:
                    9b:c8:91:0a:ee:1f:5b:c3:a3:5e:76:24:66:96:80:
                    13:3a:01:93:f8:a4:e7:2a:df:81:6c:38:e4:f0:ce:
                    a2:c6:f1:02:5f:ea:ab:41:7d:fb:5a:6a:0e:5f:69:
                    5e:06:38:34:ec:b8:f6:c8:bf:50:91:f9:4b:34:c1:
                    35:48:8c:0f:79:b6:74:e6:c0:93:a4:1d:5f:a1:f6:
                    81:8e:d4:e4:eb:33:2b:c1:ac:02:3f:11:3b:dd:db:
                    7c:05:ef:81:f9:f2:55:fa:57:29:e4:74:ec:d1:5a:
                    d4:d2:59:54:f9:0c:eb:f2:3b:34:24:3d:81:fc:e7:
                    4f:82:56:76:b9:24:14:88:de:b0:24:48:36:d7:4d:
                    8d:09:41:0b:18:2b:b4:1f:ca:09:30:b1:63:1f:61:
                    ec:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D5:55:46:3F:0F:2D:F8:70:9D:3D:A7:41:94:67:4A:2D:C2:93:09
            X509v3 Authority Key Identifier:
                keyid:87:9B:5D:7B:57:59:40:99:37:C5:C2:C2:2F:0A:DB:E8:E8:32:A0:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5tde1dZQJk3xcLCLwrb6OgyoF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/4f9b82-f1b0-4fe4-a798-5a06f7887dbd/1/h5tde1dZQJk3xcLCLwrb6OgyoF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:c6:24:f2:29:d5:3c:79:08:2e:a8:fe:5a:5a:b5:6b:c2:8f:
         b2:44:cc:e1:ad:15:5a:13:ac:46:3e:29:40:5c:ed:21:c2:77:
         e1:f4:51:f7:0f:08:99:62:00:b3:df:b0:22:fc:3f:33:7f:0c:
         11:37:b1:5a:c2:29:2e:1b:70:d0:12:26:2f:bc:bf:55:05:5e:
         45:9b:24:a7:2b:b1:d6:e8:80:c0:2f:c8:a6:07:c2:57:ce:db:
         52:55:d3:e4:7b:34:ab:e2:9a:84:43:d0:b5:5e:24:48:dc:56:
         b5:b2:5f:ff:d6:96:89:1b:a3:f6:82:58:cb:8d:93:71:b8:b5:
         6f:db:1d:73:6f:42:f9:71:0f:49:ca:44:12:b6:19:6d:56:8f:
         2a:93:38:e5:7c:5b:e3:dd:2e:fa:f1:85:09:8a:1f:1b:75:37:
         a8:39:1e:9f:30:5c:8b:46:22:c1:96:79:01:a3:3f:7c:f1:1a:
         ac:7b:96:62:5c:80:22:cf:30:d4:e4:93:9d:69:99:9d:3b:06:
         f3:5e:16:cf:09:00:e1:2a:9b:b4:8e:f5:43:b6:7e:c8:9c:66:
         1d:d0:14:05:07:c9:c7:8e:f0:07:13:93:29:af:b6:88:ba:9f:
         ad:be:e2:2f:11:24:71:a8:ee:56:1a:9d:95:a3:9f:4e:13:8c:
         e8:33:ab:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:46:06 2026 by rpki-client