Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
File:                     5iNO09jKltxRjTXB58kr6_z2zk0.mft (raw, json)
Hash identifier:          cojXy0h77Xk0GHFoiJkfoNlScIE6FbaVKcWpwt5golU=
Subject key identifier:   76:5B:7D:27:D3:D5:FE:29:D8:3E:41:BA:91:E6:6C:15:87:89:5F:D7
Authority key identifier: E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D
Certificate issuer:       /CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
Certificate serial:       019D9B873DB00D01EFF7CC1A72E3E0A83159
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
Manifest number:          1852
Signing time:             Fri 17 Apr 2026 13:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 13:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 13:00:24 +0000
Files and hashes:         1: 1-Q3xDZfzQc6tV29ExEVxZMLhErU.roa (hash: RiGnAtuoBY0MDLXEEdvsOwo9zTH9zl0+GNo+JIs/bog=)
                          2: 5iNO09jKltxRjTXB58kr6_z2zk0.crl (hash: leOENSWpvqNvx527oiVFgWnyfuUphK3db5+V/Xt+b1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 13:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:87:3d:b0:0d:01:ef:f7:cc:1a:72:e3:e0:a8:31:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6234ed3d8ca96dc518d35c1e7c92bebfcf6ce4d
        Validity
            Not Before: Apr 17 13:00:24 2026 GMT
            Not After : Apr 18 13:00:24 2026 GMT
        Subject: CN=765b7d27d3d5fe29d83e41ba91e66c1587895fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4a:82:65:94:62:34:15:bf:8c:3b:fe:5f:0d:
                    3a:e9:28:22:af:d9:98:88:2c:61:2c:0b:99:20:9f:
                    f7:db:5c:19:10:87:0d:72:d4:73:c0:12:c3:19:16:
                    63:b0:35:c6:9a:1c:ca:9f:91:e4:36:ce:53:d4:aa:
                    8d:26:e5:90:25:e1:44:7e:54:83:c8:43:cf:49:b0:
                    06:c9:af:57:c8:f4:4e:b9:06:f2:63:bb:6f:95:eb:
                    6a:49:56:08:e7:79:ce:79:6d:7e:4e:32:90:65:9b:
                    98:18:b6:ba:cc:7f:49:3a:c0:7c:6a:6b:d2:70:90:
                    69:d3:40:aa:7e:aa:35:b7:8b:ea:56:82:77:92:98:
                    92:b5:17:6b:21:20:fe:62:6d:61:3a:d4:54:b0:c9:
                    14:4e:e1:25:0e:d3:ef:c4:c1:66:4f:6e:e9:de:fd:
                    d5:0a:30:56:0f:b2:7b:b5:0b:68:50:55:79:ec:c8:
                    b4:42:34:9b:9e:3b:bf:0d:61:70:4e:7d:a6:1f:d8:
                    28:ae:7e:5e:9f:35:7b:0c:03:1b:99:40:63:1b:8b:
                    36:93:bf:33:ab:fc:11:d9:2a:7b:0a:3d:32:81:3c:
                    ed:1f:be:a7:3d:33:3c:59:f6:cd:30:61:6c:f8:58:
                    d0:df:05:a7:bb:43:13:0e:d5:3b:f1:73:0a:72:4e:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5B:7D:27:D3:D5:FE:29:D8:3E:41:BA:91:E6:6C:15:87:89:5F:D7
            X509v3 Authority Key Identifier:
                keyid:E6:23:4E:D3:D8:CA:96:DC:51:8D:35:C1:E7:C9:2B:EB:FC:F6:CE:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5iNO09jKltxRjTXB58kr6_z2zk0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/9b674c-3657-4c25-9953-3f7040997682/1/5iNO09jKltxRjTXB58kr6_z2zk0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:87:f7:53:10:f8:8a:ac:4a:93:60:91:60:f6:9c:e2:b0:ae:
         91:d4:ae:34:b7:8c:a8:7e:dd:0f:b3:5c:24:df:b2:fc:a1:30:
         69:ff:30:96:da:b3:b8:ab:77:ce:5f:88:99:49:ce:ef:a2:37:
         02:4b:e6:ca:33:43:78:65:31:8a:ce:f9:05:6d:cb:06:c3:74:
         91:7c:4e:c8:fa:76:b5:48:ed:c2:42:f4:6d:42:84:04:97:46:
         f3:59:f8:5a:35:15:18:68:d7:47:33:2b:c1:1c:33:f5:2e:53:
         c9:cb:c5:0b:fc:4c:e4:3f:31:ba:3f:47:22:1e:a1:16:fc:03:
         cb:e6:56:95:1a:99:69:45:1c:a1:78:d4:5f:ba:27:b4:9a:e9:
         41:85:1f:e2:31:66:80:a7:80:55:c1:c6:34:d6:1d:88:11:b6:
         58:22:ec:2f:1e:64:38:74:ad:52:d2:ce:e1:30:3a:63:7b:86:
         e1:dc:df:2e:69:29:1e:77:79:35:82:99:70:af:d3:52:29:f8:
         8f:74:aa:6e:8a:5a:75:73:ca:42:1a:7f:8b:59:76:d1:ca:1b:
         de:de:45:3a:76:4a:52:f9:0b:55:4b:bd:7b:16:da:2d:9c:3f:
         91:2d:17:17:ee:02:ff:9a:3e:1d:bc:69:92:40:1b:2b:94:42:
         07:c1:c9:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:19:23 2026 by rpki-client