Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
File:                     5frVG_rdJFMhvgkuaB2N5uLSdcM.mft (raw, json)
Hash identifier:          lpUTPwXifG2ZJijFqctklri+Sl/0u8QL22vDbGCFoX4=
Subject key identifier:   51:E1:70:27:E4:14:99:41:58:EC:D3:75:71:F5:8D:98:03:15:4F:08
Authority key identifier: E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3
Certificate issuer:       /CN=e5fad51bfadd245321be092e681d8de6e2d275c3
Certificate serial:       019CAA591D3E54F43A81D6CC0F62F78EA185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
Manifest number:          07C9
Signing time:             Sun 01 Mar 2026 17:01:32 +0000
Manifest this update:     Sun 01 Mar 2026 17:01:32 +0000
Manifest next update:     Mon 02 Mar 2026 17:01:32 +0000
Files and hashes:         1: 5frVG_rdJFMhvgkuaB2N5uLSdcM.crl (hash: WoNBULeq4YSNWZ8S02Sfhh1LnYaolESSs8Dj8Scg2Ak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:59:1d:3e:54:f4:3a:81:d6:cc:0f:62:f7:8e:a1:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5fad51bfadd245321be092e681d8de6e2d275c3
        Validity
            Not Before: Mar  1 17:01:32 2026 GMT
            Not After : Mar  2 17:01:32 2026 GMT
        Subject: CN=51e17027e414994158ecd37571f58d9803154f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c1:1a:6f:28:9b:d7:09:1b:ce:57:f0:53:5d:
                    85:a0:af:2c:eb:ad:98:35:87:90:37:00:72:b9:16:
                    4c:08:1c:20:15:c8:3c:c7:69:b3:d1:c6:29:8a:7f:
                    ce:61:20:6f:58:6b:81:ed:3c:2b:3c:42:b4:5f:a7:
                    bb:94:ae:05:2f:1c:c2:d3:ef:b9:99:90:0f:fa:26:
                    50:5a:da:ca:6c:f9:97:76:7d:1a:e6:d8:13:07:c1:
                    56:ef:fe:fc:c8:38:3d:58:e8:8c:08:e5:56:15:a0:
                    b9:45:41:61:af:f6:1a:66:6f:1f:50:97:f4:a1:3d:
                    b4:25:99:b1:e3:2c:98:f5:c5:f5:7e:aa:b3:cb:84:
                    44:0b:79:d3:65:24:24:cc:d3:f2:f5:38:89:86:ee:
                    db:fd:3c:5a:f5:33:d4:9b:71:54:82:73:3d:56:cf:
                    03:e7:9d:49:0b:4b:d7:14:2a:34:6a:18:4d:53:48:
                    9a:14:91:a0:f5:cd:a0:18:79:19:c2:94:e5:f7:dd:
                    47:3f:9e:18:89:f8:e2:42:e9:01:5e:2b:9b:17:d2:
                    58:04:39:98:61:b6:ab:8b:ad:a0:f0:b9:b9:de:48:
                    55:95:6f:db:79:ea:e0:ba:34:be:e5:47:78:15:77:
                    ad:95:9f:f2:3e:eb:8f:8b:80:ac:a5:ff:59:24:ce:
                    d7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E1:70:27:E4:14:99:41:58:EC:D3:75:71:F5:8D:98:03:15:4F:08
            X509v3 Authority Key Identifier:
                keyid:E5:FA:D5:1B:FA:DD:24:53:21:BE:09:2E:68:1D:8D:E6:E2:D2:75:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5frVG_rdJFMhvgkuaB2N5uLSdcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/020b7a-74a3-4594-9c46-d5bdb639fbca/1/5frVG_rdJFMhvgkuaB2N5uLSdcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a1:ee:b0:7e:de:03:07:13:6d:d1:e2:dc:c1:76:95:50:b9:
         b5:4b:20:69:49:d6:02:03:9a:8c:ed:f1:8b:e2:85:8c:72:ae:
         39:c9:0c:ac:51:e1:35:79:6f:f2:4b:b5:17:80:f9:27:8b:ca:
         22:46:2c:90:2c:90:99:c0:26:be:a7:83:cc:a6:df:e2:d4:78:
         1e:21:9d:1d:6b:a0:22:25:67:f2:e1:51:ca:d9:5d:38:05:e5:
         9a:c9:3a:fd:14:7b:66:e5:d0:7f:ab:e1:95:40:3b:56:46:13:
         ca:e8:29:da:1b:b0:2a:5b:7f:48:22:df:6b:fd:3d:af:65:4a:
         f0:20:22:4d:51:df:6d:51:cb:73:9e:c7:30:3e:f4:1e:32:6d:
         e7:af:ee:6e:00:40:e7:a0:00:67:5e:25:58:0d:0b:86:b0:3d:
         22:eb:f9:ee:27:80:6b:72:e3:80:8f:15:cc:60:fd:cd:76:aa:
         9e:10:2e:e2:a9:9e:cd:e8:fd:15:a5:c2:22:21:03:ae:92:5f:
         73:e4:30:eb:d8:2a:35:ea:62:4f:3f:2b:bf:59:d8:79:66:0a:
         6a:50:61:03:da:ee:29:3e:8f:0c:8f:86:87:a7:e3:64:4a:ba:
         e6:10:dd:74:c6:58:bf:f8:40:7f:c0:42:17:f8:6d:f7:0c:5f:
         a6:f8:54:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:55 2026 by rpki-client