Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
File:                     m5fCLQsziopFqhNFsJF7oNyXM5A.mft (raw, json)
Hash identifier:          HPcbikntfV1pH7QJy8q8MVe1SftIUvhxrBiulSyplQc=
Subject key identifier:   AE:2B:07:BD:BF:38:65:D1:0A:81:11:5F:02:DF:DA:66:5B:5C:BB:F5
Authority key identifier: 9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90
Certificate issuer:       /CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
Certificate serial:       019DA3E5E40D02777F4EA7837D5B2A11AF68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
Manifest number:          1502
Signing time:             Sun 19 Apr 2026 04:00:45 +0000
Manifest this update:     Sun 19 Apr 2026 04:00:45 +0000
Manifest next update:     Mon 20 Apr 2026 04:00:45 +0000
Files and hashes:         1: 61nXLWiLNthRTvWX64Fv7Aiwf_E.roa (hash: C6Ewv4dAXXufstpmAXr9+tKYxI6LwFVuw358jAoTr6Q=)
                          2: H0bioT9sTUbmhbBMCEJa7Y2xXtE.roa (hash: r97ApaF6RiLlIffqieVuHrnbD6MO9Ow6tAs1USkQaqw=)
                          3: QlMsfkJfSm0fUcxiYGVPGdGD4fA.roa (hash: CRz3lsPjoW3JZTtpME0HEZ/likjgfqyzP+ZOWT4Oi2k=)
                          4: m5fCLQsziopFqhNFsJF7oNyXM5A.crl (hash: Z600tIRIFWvrSvOfD4mRyk8FVB9srJjafwfYcBMYqwQ=)
                          5: z9fTcJ6BwHGafAxKgV8m2cAUPqs.roa (hash: HhotdTCLEhBn/XmQ52b2JJFeeMZwYQqW5x7lcVcO9bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e5:e4:0d:02:77:7f:4e:a7:83:7d:5b:2a:11:af:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b97c22d0b338a8a45aa1345b0917ba0dc973390
        Validity
            Not Before: Apr 19 04:00:45 2026 GMT
            Not After : Apr 20 04:00:45 2026 GMT
        Subject: CN=ae2b07bdbf3865d10a81115f02dfda665b5cbbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:22:2b:c5:5c:18:3a:35:fd:07:b8:5b:8c:69:
                    6f:10:79:69:31:33:98:32:b1:17:7e:a6:f9:12:f7:
                    40:b8:48:d7:b3:0d:1e:07:dd:35:a2:d8:d9:33:5a:
                    b0:86:61:cf:a8:d3:a0:6c:6d:b1:9f:5c:58:61:40:
                    17:54:68:4a:83:3f:4a:16:5f:01:1c:16:db:60:9a:
                    83:12:8d:74:5b:dd:e7:3c:64:b3:2c:f5:7d:ae:3c:
                    e6:e3:c8:ee:64:42:18:a5:df:2a:57:c4:2c:72:61:
                    cc:49:85:30:48:6d:07:d0:ea:f1:d1:4b:09:99:9c:
                    91:9a:ca:1e:ad:b8:95:07:7b:ac:44:93:f7:4c:b3:
                    71:19:b8:27:0a:8f:63:9c:67:4f:6e:0a:26:c7:63:
                    50:1a:c3:f8:6e:ae:c5:f5:8d:95:7f:5e:54:1d:bf:
                    47:c6:08:65:c8:2c:3a:af:1c:ff:af:18:60:ca:d7:
                    98:c7:a7:0a:38:dd:e9:20:f8:db:68:0c:c8:67:cc:
                    cd:94:0f:3f:70:7c:3e:71:bc:70:7f:26:43:5e:69:
                    23:d4:84:88:61:6d:41:fa:ed:24:a1:70:58:0d:4a:
                    ff:77:74:ad:33:1f:73:31:db:62:30:94:1d:02:89:
                    97:2e:16:d9:16:24:89:2c:5e:d0:6f:4b:13:96:48:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2B:07:BD:BF:38:65:D1:0A:81:11:5F:02:DF:DA:66:5B:5C:BB:F5
            X509v3 Authority Key Identifier:
                keyid:9B:97:C2:2D:0B:33:8A:8A:45:AA:13:45:B0:91:7B:A0:DC:97:33:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5fCLQsziopFqhNFsJF7oNyXM5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e2258d-8bc5-44ed-8073-ae999ed7c5d4/1/m5fCLQsziopFqhNFsJF7oNyXM5A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ad:68:91:90:38:59:13:13:a5:fa:b5:9a:fb:c7:42:e9:da:
         eb:ee:a2:73:c5:45:6f:6a:81:62:b2:99:53:9e:26:27:b4:3a:
         17:89:d4:ad:0e:07:d7:f9:bb:70:08:01:ec:f0:20:42:58:61:
         e6:ec:56:ec:11:da:12:61:da:bd:34:c6:2b:2c:91:24:ee:a8:
         df:0e:0a:2e:42:fa:85:4d:45:80:45:52:ea:ac:e0:96:61:85:
         2e:f0:7e:6d:eb:03:8e:65:b7:01:6d:ff:1e:af:52:19:30:c6:
         58:be:ac:9c:09:31:bb:07:dd:0e:e3:b1:28:56:f8:3a:df:8a:
         ec:df:01:3c:f9:1b:12:b2:ee:94:d8:e0:1e:b7:0c:94:74:66:
         8a:42:67:ec:5d:bd:a4:c6:68:7b:a1:50:95:7e:31:a0:8b:c3:
         7a:d8:15:7f:45:b6:84:34:2e:08:08:4d:fb:d7:35:15:45:58:
         9f:88:e6:78:c8:5f:c0:46:72:b6:7b:06:2f:c0:71:5e:a3:f5:
         55:66:83:5b:d0:92:b2:9a:84:b4:21:c1:d5:6f:9f:a2:6c:56:
         b1:83:46:48:2e:2f:ea:9a:43:c9:92:db:29:65:42:78:17:d8:
         2b:94:f3:dc:c3:2a:2b:38:a9:c3:7b:21:85:96:5e:0e:4b:d4:
         18:68:8b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:52 2026 by rpki-client