Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
File:                     5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft (raw, json)
Hash identifier:          tmsM4tBu9KmzwgIDupZC+j0F1kDGocW65Nbw6LqsWn8=
Subject key identifier:   3C:E7:15:33:18:16:27:B0:E4:2D:F9:BB:24:E5:52:1E:F8:FC:C6:28
Authority key identifier: E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06
Certificate issuer:       /CN=e6a4d5df233898e04fae3d83e85822d9880e0806
Certificate serial:       019CA9EB53B8949CFB14F1CEB9207BCD413C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
Manifest number:          78
Signing time:             Sun 01 Mar 2026 15:01:37 +0000
Manifest this update:     Sun 01 Mar 2026 15:01:37 +0000
Manifest next update:     Mon 02 Mar 2026 15:01:37 +0000
Files and hashes:         1: 4SK6T1joxEKD3qcJIw_toyLw7Cg.asa (hash: S9VsSYa/rKcIFEh+rtQN72zQTr6Bln2NJ0sYtwMEOXo=)
                          2: 5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl (hash: VSYQj73oeSeHWCicEUNvM9wGlZ9yEsz8YceLaFu0aPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:a9:eb:53:b8:94:9c:fb:14:f1:ce:b9:20:7b:cd:41:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a4d5df233898e04fae3d83e85822d9880e0806
        Validity
            Not Before: Mar  1 15:01:37 2026 GMT
            Not After : Mar  2 15:01:37 2026 GMT
        Subject: CN=3ce71533181627b0e42df9bb24e5521ef8fcc628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:27:fb:8f:22:9f:84:c8:63:5c:62:da:15:
                    99:32:8d:63:e4:79:7d:1e:74:28:22:91:aa:38:c0:
                    68:34:38:ca:7c:99:6b:31:3c:6b:2b:87:99:0c:ff:
                    c1:d6:fb:44:1f:1c:c0:f5:e4:14:27:57:5d:04:b6:
                    0c:73:7e:63:90:75:9f:27:72:16:ad:9d:ca:58:ff:
                    83:2e:7c:1b:08:54:17:82:25:f5:27:92:89:2a:b3:
                    2c:bf:ee:dd:15:b6:28:86:a4:6a:0c:3a:c1:34:28:
                    7b:6e:fc:c3:45:3c:df:4d:b5:b8:26:af:e7:f7:42:
                    dd:ab:9c:c4:a6:7a:0c:89:1a:c6:d2:28:5a:2c:6d:
                    f6:cf:17:b0:ef:5f:9a:19:e5:6a:04:50:b7:77:d1:
                    f8:c0:4f:50:28:67:7b:2d:10:51:e1:5e:8a:00:39:
                    39:17:52:1c:20:ac:fb:e3:c2:df:dc:94:ee:a6:d9:
                    c7:0c:29:62:a8:72:b4:05:6c:f7:bb:97:55:18:ac:
                    64:7d:c2:00:bf:60:3a:d1:4f:6a:0c:95:0b:6d:11:
                    64:ca:a2:27:76:9f:ef:ba:3b:4a:b4:e9:ca:8d:b0:
                    91:26:72:ac:16:3f:05:a2:ea:1c:cd:f0:87:bb:36:
                    4b:30:4d:31:08:a9:4f:53:5c:8e:39:4b:e9:9f:58:
                    f3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:E7:15:33:18:16:27:B0:E4:2D:F9:BB:24:E5:52:1E:F8:FC:C6:28
            X509v3 Authority Key Identifier:
                keyid:E6:A4:D5:DF:23:38:98:E0:4F:AE:3D:83:E8:58:22:D9:88:0E:08:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/63abe6-3551-414f-8792-1f9dfd814ab6/1/5qTV3yM4mOBPrj2D6Fgi2YgOCAY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cc:01:39:bc:ec:91:fc:b3:96:66:30:50:fc:6b:1f:13:c0:
         7c:87:28:a2:19:b0:e4:81:e0:64:1c:d5:11:32:92:c2:bd:c9:
         a3:46:11:ae:19:7b:cc:9c:60:64:f2:17:b2:41:f0:1f:f5:f1:
         68:5d:b6:1c:af:48:b7:84:2f:18:67:e2:cd:55:33:48:9c:1d:
         bb:68:1e:ee:1c:72:bd:fd:cd:8b:59:91:93:b4:7b:75:5a:2f:
         3e:20:7b:f9:ef:42:ed:3e:9b:0d:e3:5e:19:3d:6e:5b:84:37:
         c0:3c:a3:8f:b5:ac:ff:35:d6:84:49:54:8b:2f:15:4f:71:f2:
         0e:30:35:e1:07:04:ab:83:f9:c9:7a:37:ba:e4:2c:9c:a8:98:
         4a:9f:19:70:d5:1d:25:d5:f9:fc:9a:4a:5c:63:fe:38:58:c5:
         4a:5b:d6:ac:d3:0a:df:3f:9e:79:3a:39:f8:d4:cf:a2:67:05:
         f7:d4:77:fb:73:e5:de:00:bc:47:cb:48:3e:ef:0a:e4:35:ec:
         18:22:a4:53:22:26:e7:78:29:51:fe:f0:38:cc:1c:09:75:4f:
         b7:72:b4:a0:6c:1c:8c:26:b4:7d:f7:30:74:98:05:b2:86:86:
         57:31:1c:3c:56:c9:67:ca:f4:22:d5:66:9b:7b:ad:a0:5d:af:
         cd:16:5c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:55 2026 by rpki-client