Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File:                     xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier:          Rg5oPf2uQgc4Lvk2Y8+BxHPgWu4HL1VRkJGAI/XAa1Q=
Subject key identifier:   5C:97:B5:E1:11:B2:18:F6:54:5D:68:88:9A:C0:FC:E7:74:7A:99:71
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer:       /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial:       019D382E7A44D9347087D67CF6530EC58BB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number:          1691
Signing time:             Sun 29 Mar 2026 06:01:03 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:03 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:03 +0000
Files and hashes:         1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=)
                          2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: QdbxIKsAMqtqHB5uJH8w2RBQ5y4v7GdplOmJZMIVZ7E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:7a:44:d9:34:70:87:d6:7c:f6:53:0e:c5:8b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
        Validity
            Not Before: Mar 29 06:01:03 2026 GMT
            Not After : Mar 30 06:01:03 2026 GMT
        Subject: CN=5c97b5e111b218f6545d68889ac0fce7747a9971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:82:07:7e:b2:1c:04:f7:4e:cd:14:7c:d3:
                    28:cb:2a:6b:7e:11:24:75:f5:29:50:a9:9c:63:bd:
                    f1:18:0f:e5:40:bf:d8:5b:5f:fb:dc:63:8e:b0:fd:
                    e8:49:81:be:72:2f:96:cd:4a:db:39:84:5c:f6:24:
                    6e:ab:e8:21:4a:70:ba:58:51:98:5f:2e:c5:d9:36:
                    fe:41:3c:c0:67:59:70:86:91:da:bc:58:0e:8a:8b:
                    b1:20:6b:a3:ec:b0:7f:90:e8:5e:55:03:f5:b3:ea:
                    b6:8f:3a:fa:ec:21:a1:f4:1f:b5:d0:bf:1d:9a:96:
                    c9:c4:5c:b3:85:71:fb:9b:68:e9:0a:12:4f:47:75:
                    d4:e4:7f:cd:49:65:5e:e0:97:ca:d3:10:8a:ca:9c:
                    78:0f:ef:08:fe:58:bf:42:ae:8a:a4:5a:8d:0d:17:
                    f8:a5:79:d9:65:e7:34:15:8c:37:ce:33:48:46:8a:
                    26:10:86:34:0d:69:8d:bf:2a:2b:22:f6:24:2d:96:
                    50:ad:7e:87:4e:55:fd:28:54:03:7b:77:28:4a:61:
                    31:b7:62:23:22:b8:45:c0:f2:7e:2a:ae:62:61:9f:
                    49:1c:fa:cc:cb:12:e2:9b:ee:ed:c2:6c:8f:6a:60:
                    99:e3:d2:56:3b:6b:b6:74:82:5b:6c:36:ef:2e:9f:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:97:B5:E1:11:B2:18:F6:54:5D:68:88:9A:C0:FC:E7:74:7A:99:71
            X509v3 Authority Key Identifier:
                keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:01:8d:23:58:1f:18:fc:20:b6:2a:a5:ef:cf:8e:d2:e6:dd:
         6b:19:ae:4e:82:ae:38:53:7d:5c:55:de:ad:c8:dd:2c:c3:47:
         2d:a4:50:ed:df:8a:b2:36:8d:dd:5c:3b:53:7e:9c:39:ce:26:
         28:03:de:b7:dc:e5:70:79:b8:f1:15:90:39:d5:a8:d7:1c:36:
         54:59:d2:13:04:be:95:17:99:de:93:f8:43:3a:e0:47:5b:88:
         11:39:56:da:29:c6:6d:c3:22:a1:7c:17:7a:1a:8d:84:bf:18:
         c9:a1:46:10:0b:3b:54:f4:b1:94:97:47:59:bd:ce:3b:18:9d:
         70:3a:b1:29:a6:10:86:4d:d4:1f:fa:e1:c5:1c:96:86:f9:1e:
         3b:51:9d:a5:f2:2f:f4:63:32:2e:c2:f4:ba:d5:df:c9:54:9b:
         e4:1a:63:22:f5:7a:4e:2d:da:6f:41:34:a1:0b:91:ed:bc:9d:
         96:aa:b1:10:e9:71:72:cd:01:69:a1:05:9d:8a:fb:a5:c7:0f:
         60:d9:04:49:a6:bb:02:de:43:59:f9:4b:56:00:8b:7c:8a:26:
         2f:fa:89:31:87:98:7b:91:d1:b1:e6:4a:cb:36:82:03:dd:52:
         dc:36:e7:82:71:fe:02:2e:18:a6:e0:3b:e0:c1:f2:4a:62:fc:
         c6:12:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:38 2026 by rpki-client