Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
File:                     V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft (raw, json)
Hash identifier:          J+QJVlM55VQgffkF2+oaC8qigcFOrrFwzkDXmuI0PrM=
Subject key identifier:   57:5B:DE:2D:04:E8:77:E5:7D:90:9A:83:EE:AA:52:D9:F9:29:46:A4
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Certificate issuer:       /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial:       019D378944C58E55CFE838E0883A51BC8DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
Manifest number:          16D8
Signing time:             Sun 29 Mar 2026 03:00:36 +0000
Manifest this update:     Sun 29 Mar 2026 03:00:36 +0000
Manifest next update:     Mon 30 Mar 2026 03:00:36 +0000
Files and hashes:         1: Sq8Hay0mGsBowKqwtDZvadunGsM.roa (hash: X7j1mWxjchwdoCNGDPezAH5d5ppHerhR7WmtyOb/ZCk=)
                          2: V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl (hash: UQ5tUZxeXy53dHudfXm1+fu4tHN9lokGzgE//iRq5F0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 03:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:37:89:44:c5:8e:55:cf:e8:38:e0:88:3a:51:bc:8d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
        Validity
            Not Before: Mar 29 03:00:36 2026 GMT
            Not After : Mar 30 03:00:36 2026 GMT
        Subject: CN=575bde2d04e877e57d909a83eeaa52d9f92946a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:10:41:07:5a:93:8b:3e:36:20:66:50:8f:2a:
                    0c:bd:4d:d4:80:ed:44:59:17:68:25:84:e4:6c:8d:
                    86:7d:09:b2:67:87:5e:73:13:59:46:b6:d8:34:0f:
                    cb:d9:3d:9f:4d:82:a1:05:e2:de:78:0c:49:b0:f6:
                    bb:84:84:ac:f8:41:07:ce:1a:fe:23:6b:5d:7b:d8:
                    39:2d:4e:8b:f2:87:5e:f5:b3:f0:e3:8a:bf:51:d7:
                    6b:bd:c5:f9:1b:5f:b8:13:9a:1d:3e:9d:3f:81:34:
                    44:1c:44:69:4c:df:da:5b:67:88:6e:75:54:8d:4f:
                    75:80:7b:99:e3:18:5a:c9:36:74:a2:a7:41:cb:dc:
                    1a:48:cb:a3:05:77:07:92:1d:a7:03:16:3c:f0:2b:
                    c4:f6:39:10:ab:57:80:e0:eb:24:e5:46:48:a6:b6:
                    1e:03:08:b6:08:ba:0f:12:c9:64:ae:48:1d:46:dd:
                    f3:30:94:43:2f:7d:38:1b:f0:4c:ee:2c:43:e7:47:
                    44:68:8c:9c:13:1b:f0:35:95:9a:85:25:a7:a9:1e:
                    7f:1e:ff:53:37:13:64:2f:43:1d:f9:a9:c2:1f:81:
                    f0:01:b9:1b:5c:6f:81:97:68:a4:99:8f:48:16:71:
                    e1:17:59:eb:c4:32:2a:cd:a3:aa:21:cc:02:67:e4:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5B:DE:2D:04:E8:77:E5:7D:90:9A:83:EE:AA:52:D9:F9:29:46:A4
            X509v3 Authority Key Identifier:
                keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e0:2a:15:2f:e3:33:d5:af:a9:41:c2:14:d7:bf:ab:cc:0c:
         47:9d:53:88:91:2f:44:32:68:23:4e:58:b5:8c:4c:61:2d:58:
         94:95:2b:9e:f2:bf:4a:44:a8:a2:27:b3:d5:d9:31:05:96:ab:
         42:2d:7c:a5:6b:7a:bc:23:a8:da:da:ce:62:68:bf:8d:26:4f:
         33:72:42:29:82:92:f3:fb:24:0a:76:d2:9d:35:b3:c4:c1:89:
         d1:ba:d4:6f:54:17:8e:1b:dd:b1:c2:c1:ba:1b:80:e7:f6:c9:
         cd:80:c2:c6:7a:93:1f:50:d2:f4:03:81:2f:7b:19:de:33:65:
         53:37:c4:0d:a2:e0:88:be:47:07:71:31:ce:0f:4a:8e:7a:79:
         3f:6d:6e:8f:87:64:a1:0f:da:9a:cf:53:9d:36:99:d4:1c:df:
         e0:f4:8b:99:fc:5c:44:4d:e8:68:1c:2a:19:c1:e6:f1:30:4f:
         ef:19:54:6c:f3:80:96:a3:cd:22:cd:d1:98:d3:4f:d4:c7:14:
         17:c1:61:9a:3c:86:b2:f2:e1:2b:76:e2:50:a0:e8:d1:23:6e:
         f6:69:26:88:d0:fb:f3:d9:0e:79:1c:8c:3c:b8:a4:a6:f4:e5:
         be:0a:51:ee:9f:10:f3:4b:d5:a8:b5:15:17:c5:de:90:8e:0e:
         c9:c5:ec:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:32 2026 by rpki-client