Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
File:                     5qirioB4uztX5W_3wL1Npj7oLIs.mft (raw, json)
Hash identifier:          M+EaBsla/s+y1osf/Ck1Zo+0e1ZSgUMoTBPspnUlYHI=
Subject key identifier:   8A:A2:70:73:C7:15:04:AA:D1:DF:42:8D:29:72:CC:30:75:12:A9:4A
Authority key identifier: E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B
Certificate issuer:       /CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
Certificate serial:       019D9E516BAFEAA9AFFCF408B63855D7F68D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
Manifest number:          13D1
Signing time:             Sat 18 Apr 2026 02:00:29 +0000
Manifest this update:     Sat 18 Apr 2026 02:00:29 +0000
Manifest next update:     Sun 19 Apr 2026 02:00:29 +0000
Files and hashes:         1: 5qirioB4uztX5W_3wL1Npj7oLIs.crl (hash: dUHbZrNzAUFSCX4oppHDlij4fNPm4R8E5niIymHTNyg=)
                          2: KlzzYC8Q2UVlJx85f6zf8EkPNPg.asa (hash: K23b9m4+V1oJoVx1ztFLX9QMWZu++2ah4sRiGDlVDmU=)
                          3: Wm5un5s1l1Uczxx1_V5CG7Ar2bA.roa (hash: B9uLWiqoWEc0M4LCpE9t/HNlmsxvolzzjhIuXCpoz+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:51:6b:af:ea:a9:af:fc:f4:08:b6:38:55:d7:f6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6a8ab8a8078bb3b57e56ff7c0bd4da63ee82c8b
        Validity
            Not Before: Apr 18 02:00:29 2026 GMT
            Not After : Apr 19 02:00:29 2026 GMT
        Subject: CN=8aa27073c71504aad1df428d2972cc307512a94a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:5a:51:42:f5:06:f7:f4:b5:e9:56:9d:94:
                    b5:04:e3:6e:55:8b:d0:93:cc:19:0d:29:7a:66:e0:
                    9a:04:b7:61:54:a6:12:9f:5e:22:44:5d:a6:b2:3f:
                    64:18:22:af:99:84:e5:b2:5e:e6:1f:83:98:5a:06:
                    f2:39:28:41:c9:bc:d8:de:74:05:a3:f8:04:9b:28:
                    f2:76:b0:7d:7d:ef:52:d4:7a:fc:b4:5f:ef:e8:16:
                    d1:5c:3c:bd:93:4f:ca:18:ad:b9:b3:bd:4a:0a:b5:
                    43:84:a6:b8:36:1e:f7:78:fd:0d:73:52:d5:56:ae:
                    78:8d:4a:af:e6:9d:c5:12:cd:1c:fd:df:58:99:70:
                    2b:37:57:6f:e2:15:3f:96:05:11:1c:fa:3c:0a:cf:
                    e7:61:6c:12:56:05:1b:16:3b:30:f0:03:06:fe:b3:
                    5c:32:bf:c2:e3:51:34:d6:83:60:13:ec:fb:1d:0b:
                    6d:29:b5:36:c1:e8:ab:af:72:20:7e:d9:dc:c1:34:
                    3c:7d:c2:5a:f9:16:97:cb:d2:b8:9a:8a:7d:73:e3:
                    79:eb:e5:9b:b4:fb:77:f6:a2:46:bc:19:6e:b7:12:
                    fa:dc:64:b3:6d:72:8e:40:6d:06:a6:b5:95:0c:d6:
                    f9:8c:7c:30:06:7d:42:f5:fa:5b:b8:4a:e4:a8:e2:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A2:70:73:C7:15:04:AA:D1:DF:42:8D:29:72:CC:30:75:12:A9:4A
            X509v3 Authority Key Identifier:
                keyid:E6:A8:AB:8A:80:78:BB:3B:57:E5:6F:F7:C0:BD:4D:A6:3E:E8:2C:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qirioB4uztX5W_3wL1Npj7oLIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/228e16-f808-4471-a984-364ee2859f2c/1/5qirioB4uztX5W_3wL1Npj7oLIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:cb:25:06:c5:2c:b0:30:6c:e2:50:fb:60:9d:7c:6f:77:8d:
         3b:de:4e:48:12:6b:8d:52:dd:5b:80:42:bf:fb:63:00:19:d8:
         b6:71:50:d0:7d:f0:9f:81:12:3b:01:91:5e:9b:e1:7e:f4:1f:
         7f:05:de:73:43:05:5b:c5:00:a4:67:c8:cf:ed:a6:82:26:63:
         8f:7c:99:d0:2f:05:08:89:8c:ce:8b:5c:1a:1d:7b:f0:d6:28:
         7a:5a:e4:50:ca:49:2a:19:c1:fa:d5:4c:23:e0:6e:0d:4e:6a:
         fd:0c:d0:f3:05:6f:a7:31:f7:0d:6a:85:67:e5:2e:47:8c:7b:
         bf:2f:11:5c:bf:b0:e7:88:c3:2c:63:6b:a9:d1:8c:cc:33:fe:
         5e:89:c4:c4:87:ba:28:33:8b:79:d0:6d:7a:bd:c9:b0:45:64:
         f4:fd:78:01:de:1f:84:c0:72:07:48:1e:b2:36:f9:fc:0e:a7:
         95:c3:00:82:71:ed:90:1b:88:78:83:63:5e:93:0d:16:f9:8b:
         ec:e0:d7:34:29:4b:41:d6:cd:3e:42:49:e9:54:d3:46:37:2e:
         e3:8f:93:5c:43:57:32:5a:62:ae:61:5b:b5:0f:d4:d7:e9:0a:
         8c:75:f8:2c:6a:62:b3:9e:7c:e6:77:c8:21:a6:81:53:1b:9f:
         2c:f0:0d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:00:45 2026 by rpki-client