Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
File:                     5_moojloMmPnVeEsl9LXpDLQs3c.mft (raw, json)
Hash identifier:          YNBhRC0/C3yJGdFjCzXlFSTMyXVweY4TeNcmv+jsc5o=
Subject key identifier:   D0:D7:ED:B4:37:86:46:37:B0:E0:5B:43:F7:2E:B4:3C:2F:73:54:94
Authority key identifier: E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77
Certificate issuer:       /CN=e7f9a8a239683263e755e12c97d2d7a432d0b377
Certificate serial:       019D39414A52293E40804B0F4DAEE121E8CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
Manifest number:          1890
Signing time:             Sun 29 Mar 2026 11:01:13 +0000
Manifest this update:     Sun 29 Mar 2026 11:01:13 +0000
Manifest next update:     Mon 30 Mar 2026 11:01:13 +0000
Files and hashes:         1: 5_moojloMmPnVeEsl9LXpDLQs3c.crl (hash: TzQVs0c3pIQ2Kll2GTGLiSiuE4D98w5+340XTM9c/iU=)
                          2: cRkpuRyG0zhhGQbjsE_A8YfRNQ0.roa (hash: 4rEqZhA0GfuCAYMPrptrHJxFbCbgz4cowu0vbJKFg/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:39:41:4a:52:29:3e:40:80:4b:0f:4d:ae:e1:21:e8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f9a8a239683263e755e12c97d2d7a432d0b377
        Validity
            Not Before: Mar 29 11:01:13 2026 GMT
            Not After : Mar 30 11:01:13 2026 GMT
        Subject: CN=d0d7edb437864637b0e05b43f72eb43c2f735494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:09:71:69:88:b5:76:c3:52:fc:d8:a3:a3:
                    34:43:d4:6d:10:3e:7b:d4:b8:5d:75:2d:2f:5b:c0:
                    86:43:95:53:64:95:c6:e0:a8:08:d7:81:5c:dc:f9:
                    d2:0d:f7:f7:b7:1e:50:e0:d3:a2:7e:36:d2:48:f8:
                    a1:de:59:48:bc:c5:fc:be:9e:c9:ca:6c:b2:b7:69:
                    47:e7:65:16:8e:0d:8f:b3:e0:db:54:cc:de:2f:04:
                    a4:3d:12:cf:50:3d:e2:5d:97:a8:29:33:3f:63:a4:
                    60:8d:e8:46:a1:27:23:fc:f9:7d:7a:06:be:c8:d9:
                    4e:ad:c7:a8:15:3d:5c:e7:ff:d1:e1:c4:3e:87:11:
                    9b:b6:ca:6b:0e:9f:9e:07:30:9e:6e:4a:19:34:74:
                    e9:38:c4:c5:2e:c9:82:fa:e0:17:b0:18:a7:40:a5:
                    c0:18:ae:18:61:00:5c:ca:de:6f:f4:26:6e:48:f3:
                    4f:c2:df:83:f8:09:bc:e8:63:08:c6:2d:ad:40:f3:
                    d3:a6:6f:46:86:8a:13:4f:0c:35:12:ad:8a:af:e6:
                    70:32:d1:86:40:02:0d:da:49:36:8a:4f:18:e9:9e:
                    fd:5d:3f:ef:83:40:e4:0a:e7:d7:6a:0e:5b:de:29:
                    55:aa:2b:ed:78:12:8b:80:8b:02:b8:bc:f7:15:88:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D7:ED:B4:37:86:46:37:B0:E0:5B:43:F7:2E:B4:3C:2F:73:54:94
            X509v3 Authority Key Identifier:
                keyid:E7:F9:A8:A2:39:68:32:63:E7:55:E1:2C:97:D2:D7:A4:32:D0:B3:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_moojloMmPnVeEsl9LXpDLQs3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/2548a4-7715-4134-8132-2bf0a3bcc4f1/1/5_moojloMmPnVeEsl9LXpDLQs3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:16:ac:e5:26:f9:54:39:db:92:a4:01:18:e7:0e:02:b7:12:
         36:59:37:c4:fa:ab:55:b2:9d:10:22:59:d2:15:d8:eb:75:a9:
         75:b5:57:0c:bf:f1:53:da:d0:bd:67:f5:c1:3c:33:3c:8d:07:
         ea:fa:64:30:cc:54:b2:3b:e9:2f:be:72:fa:11:09:ee:82:a2:
         5d:14:44:d0:e4:1c:27:d2:38:0d:6b:4b:16:90:5b:78:d4:7f:
         8b:ee:c0:ad:c2:18:22:0c:2d:9f:cb:32:f6:55:8a:7d:ce:8c:
         09:4c:ec:93:94:a1:b4:1b:be:96:80:4a:93:c2:43:23:2d:5b:
         06:98:aa:d6:bd:3c:23:b6:0f:f9:9c:0f:37:f3:9a:15:66:ca:
         f8:12:83:89:5c:7c:d2:81:61:7d:8d:4e:95:78:e9:b8:47:a9:
         82:e9:24:ba:37:15:eb:4b:01:84:ef:68:35:a6:09:02:48:74:
         fc:8b:49:d3:b1:f6:2f:6b:46:77:1a:55:7f:51:52:e1:a5:1c:
         cd:71:01:38:7a:e5:9b:0b:cb:50:df:95:8c:1f:4b:c2:af:dc:
         e0:ee:53:bc:8e:0d:bb:a5:59:13:cf:a0:b2:b0:8b:fa:4b:e6:
         dd:a2:cb:67:1e:50:fa:3c:22:6b:0e:8b:ac:bb:4a:4b:3b:b7:
         2d:15:47:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:45:09 2026 by rpki-client