Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File:                     X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier:          7WVbQwoaZTFHj3CCt6rBASP6Ngaast51sXqfMnrWQYg=
Subject key identifier:   E9:D9:29:72:9C:1A:DB:68:E5:EB:93:B4:05:02:68:31:DB:FC:42:9D
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer:       /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial:       019D992BA8C09B59390442A1F88FA6350F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 02:01:08 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:08 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:08 +0000
Files and hashes:         1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: 2wnabq/FO2DxTjKmGpSvmrrBeTaUA4LtvfIGxJcbHZg=)
                          2: f14wvH4Znzg6WIk8GxVNwDQOTW8.roa (hash: dWPM7JhBRPyTZuaRPxFbnXkRidLxpwn4nCmrshJkS9k=)
                          3: oX2MuFZ8yaRVQjpSCUgD1HiKoUg.roa (hash: gdua3nJQKjVmAVvDW1nuoRrLS6iVbV5h3laEz26kzUQ=)
                          4: qql6gI777A1gergrcYaN_jGizsg.roa (hash: nvniz/deTAtTtE36BhXTJgk+6BLR6Hthi8M387vZVHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:a8:c0:9b:59:39:04:42:a1:f8:8f:a6:35:0f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
        Validity
            Not Before: Apr 17 02:01:08 2026 GMT
            Not After : Apr 18 02:01:08 2026 GMT
        Subject: CN=e9d929729c1adb68e5eb93b405026831dbfc429d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:97:87:18:0b:e9:e6:92:c0:38:ef:f6:86:
                    54:37:aa:ca:05:49:03:61:50:30:31:c1:73:ce:1b:
                    75:95:5a:e0:fe:02:6f:6c:3a:04:fd:31:b8:60:1d:
                    e6:f0:c9:f7:0e:94:aa:02:b1:4d:5c:94:26:03:5e:
                    ba:b1:03:a4:28:bf:72:e9:1c:86:6b:4f:f5:56:56:
                    46:c9:fe:f8:e1:e1:e1:d1:46:84:d6:fe:c2:1c:da:
                    83:ff:c7:31:08:3b:63:68:f8:c1:7d:47:29:d3:99:
                    43:38:5c:ad:36:64:78:46:39:75:69:46:78:fd:17:
                    66:cc:48:4c:13:1f:e0:cc:ba:41:c2:24:74:f9:e5:
                    b0:9b:a9:09:d3:da:c7:ce:fd:9b:50:8a:87:c8:50:
                    fb:4b:39:c6:c6:e0:40:12:12:e8:70:c0:15:38:6d:
                    23:cc:55:7c:5c:f9:a2:4d:b2:ac:ee:b9:32:16:55:
                    72:29:da:5f:ea:3e:d3:8e:6c:b8:f4:8c:69:0c:9a:
                    9d:f1:d0:ba:02:58:d2:bc:4f:6e:17:48:36:63:68:
                    2b:75:75:35:7c:7e:35:55:25:ae:12:c8:33:f8:44:
                    3b:c6:36:c9:6e:79:47:dc:0e:fe:a3:e8:b6:2d:5d:
                    3b:47:5b:e1:c7:ff:b5:1e:fe:bb:2e:01:46:7a:be:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:D9:29:72:9C:1A:DB:68:E5:EB:93:B4:05:02:68:31:DB:FC:42:9D
            X509v3 Authority Key Identifier:
                keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:d3:37:6c:7c:6d:55:35:4d:58:80:e5:de:1d:a1:84:eb:94:
         b2:95:01:6b:74:13:2d:e9:a4:c1:21:ac:17:07:ff:bb:79:03:
         cb:54:3d:03:f6:86:d0:08:e0:37:1e:f4:77:a1:de:01:6e:cf:
         21:a0:76:61:9e:39:5d:f6:32:10:b1:e8:db:f5:31:32:52:92:
         bb:6e:fc:41:01:7c:41:b1:0e:94:3c:47:54:44:2c:6e:41:3b:
         06:ff:0b:63:03:93:5d:59:29:ba:ba:9a:6f:b4:e4:51:4f:18:
         a1:8a:95:5c:41:3d:fb:d4:aa:9d:f8:63:0b:36:61:e9:3a:7b:
         ea:5d:65:35:cb:1d:26:65:de:af:2b:62:27:94:61:65:97:98:
         ad:24:c0:b9:ea:6a:10:05:a9:2b:4a:b6:bf:63:bb:a6:33:39:
         5b:07:39:5b:d5:31:82:e2:e9:d3:09:02:7a:32:5c:84:e8:39:
         62:17:1b:b8:14:fc:fa:43:62:e2:e8:7e:49:fd:71:c9:c2:4e:
         48:a7:1f:94:3d:e7:53:80:74:e5:5d:8c:00:66:06:cd:ad:d9:
         87:0f:89:81:15:b1:de:4c:a5:8f:6c:e9:f4:b0:18:2e:1d:91:
         6c:89:ca:b0:59:c7:0a:05:96:cc:eb:4e:ee:22:5b:7f:45:f5:
         61:08:ac:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:36 2026 by rpki-client