Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
File:                     5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft (raw, json)
Hash identifier:          aXxxm5zMUtC6TO1S+ze6YKtiqDozuGMqs0IrGZp1irY=
Subject key identifier:   E4:C4:E9:9E:73:75:89:B5:F3:E9:DE:E9:90:A2:3F:9F:D1:7D:0E:DE
Authority key identifier: E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15
Certificate issuer:       /CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
Certificate serial:       019D9B51306C11957B175974FFF56006B5F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
Manifest number:          1386
Signing time:             Fri 17 Apr 2026 12:01:22 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:22 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:22 +0000
Files and hashes:         1: 5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl (hash: o409DjNOSo7qeo2vrcWjFzmpUvqz3qGXLTZUVN/sV/M=)
                          2: j0KfrHF7U_ersUCrBx0wIYyU1mg.roa (hash: YJlkOTIzqTwvJH6suym0S6Opx86SQJy3UvFlMQtx2RI=)
                          3: kJQjUgrsTkI9sNO65hRDTSRGiT8.roa (hash: lI+jSO9Op8f4ZB2mDkA1WTwA0uM7OvPByGs3tSZRjRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:30:6c:11:95:7b:17:59:74:ff:f5:60:06:b5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e67c1145d18554698edd99d7cd199cd3c02b2a15
        Validity
            Not Before: Apr 17 12:01:22 2026 GMT
            Not After : Apr 18 12:01:22 2026 GMT
        Subject: CN=e4c4e99e737589b5f3e9dee990a23f9fd17d0ede
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e5:1f:3b:4b:31:3f:2e:63:42:59:00:56:68:
                    72:b8:53:5c:6e:d2:0e:f1:2f:9d:70:a9:3c:8d:7a:
                    a7:1e:23:b7:62:43:a6:a4:90:84:0a:fc:d2:36:21:
                    d0:cd:85:ac:6f:e9:23:fa:63:4c:4f:7d:a5:ae:f8:
                    bf:75:38:d0:6f:4f:e1:04:e4:88:d8:ae:3c:d9:5d:
                    8d:86:02:3d:1a:87:e2:ef:9e:e9:aa:8e:20:f6:ca:
                    fb:b3:27:6a:1d:c4:a7:5d:be:3f:6d:e6:90:0e:02:
                    07:0e:97:cf:3f:af:39:c3:0c:d2:ed:e6:1d:e9:3f:
                    51:c9:26:4e:97:97:92:1c:dd:90:1c:3a:ac:2f:05:
                    f4:78:a7:49:c0:69:db:67:a7:c0:32:4d:f7:78:ac:
                    17:dc:ca:c9:80:b6:43:43:9a:5a:0d:97:dc:0f:c9:
                    3a:a7:16:6c:18:87:b1:32:a7:e0:79:48:49:f8:96:
                    82:12:2c:31:7d:d4:81:07:b9:33:7c:c4:14:13:bc:
                    58:90:76:f9:18:af:6a:98:a6:e5:ce:4c:aa:71:75:
                    56:11:47:b5:9c:98:8b:33:00:db:0a:ec:28:08:54:
                    30:42:ba:07:e4:f3:df:01:ce:f0:1c:ed:06:f6:da:
                    26:5a:70:50:52:68:a3:4a:fc:2f:1c:77:87:7c:95:
                    9a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C4:E9:9E:73:75:89:B5:F3:E9:DE:E9:90:A2:3F:9F:D1:7D:0E:DE
            X509v3 Authority Key Identifier:
                keyid:E6:7C:11:45:D1:85:54:69:8E:DD:99:D7:CD:19:9C:D3:C0:2B:2A:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5nwRRdGFVGmO3ZnXzRmc08ArKhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e62e0c-25eb-4c95-8002-87f1cf73a43a/1/5nwRRdGFVGmO3ZnXzRmc08ArKhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fb:c8:d6:75:5b:0c:e1:b4:d7:89:06:b9:bf:7b:ad:0a:eb:
         75:db:ab:2d:b2:f3:53:df:9d:2f:09:b3:4b:f3:af:f9:6e:8c:
         35:45:82:54:a4:5a:06:49:73:ac:05:fd:8f:60:63:95:d1:47:
         18:d0:bb:8e:83:c1:21:8f:e9:e4:54:9c:53:73:e7:19:df:1c:
         1a:34:a7:51:ed:ff:c1:60:1e:2d:9c:50:8b:db:c0:fb:0d:8e:
         2c:9a:90:a0:70:23:77:ee:d8:b2:65:75:e3:af:56:17:5b:60:
         28:e4:4f:07:02:6a:53:5e:99:d0:2a:15:8a:5d:e5:d0:aa:8c:
         ce:4b:71:63:3e:06:33:41:a8:4b:fc:98:b9:e6:85:14:03:0c:
         3d:93:0b:ec:21:b7:20:0f:ea:84:70:ec:36:f7:73:16:3c:7d:
         48:1e:a8:84:0e:e1:46:40:ef:28:78:1c:af:fb:ea:65:c3:a0:
         5c:d6:b6:aa:66:70:c7:b6:67:37:c5:95:43:c2:6a:97:7a:3f:
         52:43:f5:58:cc:ac:b4:83:67:7d:aa:27:63:62:2c:e1:46:e5:
         c1:eb:eb:42:00:56:b7:10:4b:fa:e6:7e:c7:7a:96:b6:99:86:
         fd:f4:42:b0:cc:fb:94:e8:74:1e:28:bf:b7:2a:2d:2e:c0:e2:
         45:0d:e5:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUTBsEZV7F1l0//VgBrX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2N2MxMTQ1ZDE4NTU0Njk4ZWRkOTlkN2NkMTk5Y2QzYzAy
YjJhMTUwHhcNMjYwNDE3MTIwMTIyWhcNMjYwNDE4MTIwMTIyWjAzMTEwLwYDVQQD
EyhlNGM0ZTk5ZTczNzU4OWI1ZjNlOWRlZTk5MGEyM2Y5ZmQxN2QwZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuUfO0sxPy5jQlkAVmhyuFNcbtIO
8S+dcKk8jXqnHiO3YkOmpJCECvzSNiHQzYWsb+kj+mNMT32lrvi/dTjQb0/hBOSI
2K482V2NhgI9Gofi757pqo4g9sr7sydqHcSnXb4/beaQDgIHDpfPP685wwzS7eYd
6T9RySZOl5eSHN2QHDqsLwX0eKdJwGnbZ6fAMk33eKwX3MrJgLZDQ5paDZfcD8k6
pxZsGIexMqfgeUhJ+JaCEiwxfdSBB7kzfMQUE7xYkHb5GK9qmKblzkyqcXVWEUe1
nJiLMwDbCuwoCFQwQroH5PPfAc7wHO0G9tomWnBQUmijSvwvHHeHfJWafQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTE6Z5zdYm18+ne6ZCiP5/RfQ7eMB8GA1UdIwQY
MBaAFOZ8EUXRhVRpjt2Z180ZnNPAKyoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW53UlJkR0ZWR21PM1puWHpSbWMwOEFyS2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lNjJlMGMtMjVlYi00Yzk1LTgwMDIt
ODdmMWNmNzNhNDNhLzEvNW53UlJkR0ZWR21PM1puWHpSbWMwOEFyS2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lNjJlMGMtMjVlYi00Yzk1LTgwMDItODdmMWNmNzNhNDNh
LzEvNW53UlJkR0ZWR21PM1puWHpSbWMwOEFyS2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/vI1nVb
DOG014kGub97rQrrddurLbLzU9+dLwmzS/Ov+W6MNUWCVKRaBklzrAX9j2BjldFH
GNC7joPBIY/p5FScU3PnGd8cGjSnUe3/wWAeLZxQi9vA+w2OLJqQoHAjd+7YsmV1
469WF1tgKORPBwJqU16Z0CoVil3l0KqMzktxYz4GM0GoS/yYueaFFAMMPZML7CG3
IA/qhHDsNvdzFjx9SB6ohA7hRkDvKHgcr/vqZcOgXNa2qmZwx7ZnN8WVQ8Jql3o/
UkP1WMystINnfaonY2Is4UblwevrQgBWtxBL+uZ+x3qWtpmG/fRCsMz7lOh0Hii/
tyotLsDiRQ3lqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:15:55 2026 by rpki-client