Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File:                     5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier:          WzLNuDQq5xWYvgEN53G+04GrpgmOsvZf1RDHxNBQ36g=
Subject key identifier:   96:79:84:3F:C2:0B:72:05:D4:38:B5:B4:3D:DA:D1:67:DF:F0:F5:5A
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer:       /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial:       019CE5C9135A9738783C41C696E2A617F3C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number:          134A
Signing time:             Fri 13 Mar 2026 06:01:26 +0000
Manifest this update:     Fri 13 Mar 2026 06:01:26 +0000
Manifest next update:     Sat 14 Mar 2026 06:01:26 +0000
Files and hashes:         1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: 8LLyMD3unfYiTIIhDHXE3jSfOLCeWeMcGsr/FC4xrjQ=)
                          2: 9wxon_jSPGs29d0oz5cGIJC4nyg.roa (hash: Xz4cE3NQ80mMRNxOjLbkBn+IL5J1nET+/jUfxtIVjP8=)
                          3: GR0moaidu9mIStt-zm-cvuX-WDg.roa (hash: RV/X/dbPCJTmst6CLCu9ZvlvMnLGaT8HGpULXJtWGI0=)
                          4: KbTR7aHwwLpZYX34f5JnyinWFjs.roa (hash: SB5fokkBufwe+kAeEHnmUVt4YkIfxrCsr/69Y8UsTR8=)
                          5: mO6Fb7S41xAj_RDQIm69ljJKwSs.roa (hash: mzwHry2L+FiTcVlvwHZhbyETQYyjQEIEkkpwQQwfOpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Mar 2026 06:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e5:c9:13:5a:97:38:78:3c:41:c6:96:e2:a6:17:f3:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
        Validity
            Not Before: Mar 13 06:01:26 2026 GMT
            Not After : Mar 14 06:01:26 2026 GMT
        Subject: CN=9679843fc20b7205d438b5b43ddad167dff0f55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:03:f2:e9:28:23:27:75:7c:5b:b7:de:1b:36:
                    07:38:eb:a1:61:0c:08:4d:b9:a7:48:21:be:48:2e:
                    d6:ea:f0:97:38:59:44:1c:4c:8f:d2:4f:5d:ed:6e:
                    35:67:21:9c:20:a8:45:a3:fb:15:0e:ad:24:b1:04:
                    27:91:de:23:5a:8a:79:44:e4:f8:f2:87:ff:f7:61:
                    14:94:a1:c0:cf:0f:2b:00:cc:59:d0:03:cb:90:6e:
                    f8:8b:81:af:2b:51:2d:45:2d:d1:f8:48:68:6d:e4:
                    ca:47:03:c7:fe:28:dc:85:a6:a4:4f:3f:e6:79:eb:
                    15:95:f0:76:8f:6e:f5:33:cd:a1:cf:ef:c7:23:4c:
                    8a:29:a3:9a:14:15:aa:40:77:a9:08:e8:cf:18:c5:
                    37:43:73:75:a0:26:91:28:fd:f7:e2:86:92:a9:01:
                    f0:40:ee:aa:2b:1c:be:45:e8:a3:87:b9:c5:3a:20:
                    08:ee:3e:4f:3c:63:8d:e3:b2:e0:9b:b1:3b:bf:cc:
                    13:6d:2e:78:fc:38:b1:27:bf:11:38:06:ae:03:12:
                    41:77:a6:39:5a:20:4e:3e:34:78:85:e0:e8:90:20:
                    90:de:64:28:36:0f:38:5f:59:3e:fa:23:c6:c0:c2:
                    5c:7e:b8:26:ae:34:54:b7:8a:3b:4d:2e:9f:d1:0f:
                    13:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:79:84:3F:C2:0B:72:05:D4:38:B5:B4:3D:DA:D1:67:DF:F0:F5:5A
            X509v3 Authority Key Identifier:
                keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:b0:0b:e3:38:c8:0f:8c:61:fa:8c:fd:ed:69:f5:8b:9f:92:
         95:78:b9:f4:b0:64:84:77:be:ba:19:61:3c:71:73:60:16:1c:
         43:c1:e2:94:c1:d2:c7:0f:b3:c3:bb:40:fc:76:c0:ca:dd:da:
         51:03:13:99:4e:96:af:1a:a3:da:32:10:d2:d3:4b:f0:b7:20:
         26:f3:64:83:81:6c:ff:ec:21:2a:4e:2f:70:d0:da:d1:b8:fe:
         47:8d:fd:3e:0d:87:f7:ab:2d:b9:7e:92:09:c3:27:9f:0f:49:
         c2:21:ea:45:1b:ed:7e:a7:b9:ca:a0:cc:d1:2c:ca:a6:b1:0c:
         a2:8f:1c:e2:56:17:01:29:62:9c:c7:86:7f:15:cb:32:19:20:
         5c:ec:c8:a4:9a:a6:14:7c:2d:04:05:37:f9:c7:c6:dd:5b:26:
         c3:3b:6e:90:e2:a3:83:e4:66:ac:2c:d7:a9:45:e8:b3:bb:80:
         01:f9:41:2a:82:11:f3:6f:8b:1b:d3:e7:92:b9:e3:93:85:fc:
         bb:3e:0c:1f:1e:54:b3:32:65:0f:c3:6d:bd:92:30:a9:e7:39:
         56:d9:3b:ad:7b:65:95:66:24:fe:39:f3:4c:f1:d3:1e:f7:41:
         8a:a2:c6:c0:0c:d1:37:fa:9a:31:ca:c2:18:9f:71:2e:70:26:
         f4:10:17:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 12:11:36 2026 by rpki-client