Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
File:                     5rtLno321mTvy3e0EEFcg0phd4I.mft (raw, json)
Hash identifier:          E1+guyg0LccZ12wjo6+DVd4lRQqv6rDyH5f3C8Sh1Bk=
Subject key identifier:   35:A3:F9:34:2F:FA:36:2B:55:80:8E:52:80:09:F9:CC:F4:0A:38:7A
Authority key identifier: E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82
Certificate issuer:       /CN=e6bb4b9e8df6d664efcb77b410415c834a617782
Certificate serial:       019D99626B6593E09E97415B364CC55FE97B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
Manifest number:          06AC
Signing time:             Fri 17 Apr 2026 03:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:57 +0000
Files and hashes:         1: 5rtLno321mTvy3e0EEFcg0phd4I.crl (hash: +KWfzyWeFciFME1KSQJmypVwx/WJaRjO8e0g7BLF1rs=)
                          2: Q92n5As_StLfCEOsCZRxLPjQigk.roa (hash: m0A5cImf1wfkQyI07Q9zPZS2LIiSLajm2W221r5jirk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:6b:65:93:e0:9e:97:41:5b:36:4c:c5:5f:e9:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6bb4b9e8df6d664efcb77b410415c834a617782
        Validity
            Not Before: Apr 17 03:00:57 2026 GMT
            Not After : Apr 18 03:00:57 2026 GMT
        Subject: CN=35a3f9342ffa362b55808e528009f9ccf40a387a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:7f:f0:b0:a1:94:99:33:7e:8c:e1:1e:cc:
                    82:64:8f:22:2c:48:35:eb:6b:96:8d:97:4e:f2:f1:
                    f9:3f:64:a2:d4:dc:3a:ab:e7:cc:6f:db:a0:6f:4c:
                    3b:dc:92:0f:5a:9d:78:e1:af:b7:96:69:ef:93:8b:
                    7c:4d:f0:63:cc:a6:ee:96:56:a7:a0:4b:95:1f:fd:
                    02:15:33:c3:28:6c:83:0c:c3:96:de:7b:47:15:66:
                    ad:4d:60:56:78:a8:58:74:10:64:27:6d:7a:a1:1f:
                    e4:2e:36:b9:c1:10:05:0e:80:22:4d:30:ed:4c:43:
                    7e:35:5e:fb:e7:88:a2:95:ba:70:14:84:f5:a8:4e:
                    f0:6b:cb:c0:47:25:0f:3e:a8:d4:7b:26:b3:8f:3b:
                    37:11:f6:5a:1f:f8:8a:95:29:7d:ba:62:70:b5:ff:
                    9d:97:0a:bf:7a:1f:06:da:8c:e8:d5:37:bb:0b:75:
                    c7:92:b7:ad:96:f1:d8:3d:53:6f:d4:f8:f3:1c:30:
                    53:21:c1:7b:11:ae:21:03:f8:bd:bb:51:24:97:91:
                    c8:85:cd:31:49:5b:ad:65:7a:54:a2:61:dc:e6:3e:
                    3a:b9:11:c9:c9:46:d8:fe:ec:b0:cb:4b:7e:ad:d7:
                    a3:31:a7:d2:fc:65:58:da:38:9f:48:1e:c5:1a:1d:
                    bc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A3:F9:34:2F:FA:36:2B:55:80:8E:52:80:09:F9:CC:F4:0A:38:7A
            X509v3 Authority Key Identifier:
                keyid:E6:BB:4B:9E:8D:F6:D6:64:EF:CB:77:B4:10:41:5C:83:4A:61:77:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5rtLno321mTvy3e0EEFcg0phd4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/5ca07a-b242-4144-a264-7d547ec84114/1/5rtLno321mTvy3e0EEFcg0phd4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:9e:96:f1:9d:fe:72:ad:52:3e:66:eb:f3:f5:d7:aa:54:81:
         ad:fb:83:37:3c:d3:7b:20:e0:ca:ee:9b:79:5d:6e:18:36:45:
         3e:e9:a9:6b:6b:b2:8a:92:b5:9b:5c:e0:d3:5b:e5:8c:f4:e6:
         c6:ec:02:52:fd:e6:b6:b9:18:57:99:81:75:9b:57:dd:4a:b9:
         8d:bd:bb:59:25:21:4b:fc:f2:dc:08:65:32:ae:27:38:4d:e0:
         98:78:9a:5e:ab:57:1d:0e:c6:75:ae:a4:d8:fc:c2:a1:e2:b6:
         18:2a:4a:9d:ba:2f:2d:76:12:66:17:ee:b3:58:9d:98:97:81:
         90:b4:b8:b8:04:df:9a:c4:2e:eb:5e:10:89:72:73:bb:c5:14:
         37:5e:36:86:a9:b6:e2:a2:aa:5a:8c:72:ff:ae:42:9d:2d:e4:
         64:77:fd:81:d7:52:a6:78:3f:69:5c:2d:f6:ec:94:af:32:a6:
         e7:12:c5:90:7e:e1:0e:f3:93:91:ca:47:33:82:08:a2:40:49:
         31:53:7c:d3:be:cf:cc:be:45:e7:b5:7f:5b:a3:3a:f7:d7:3d:
         12:33:8b:d0:c1:48:cb:54:17:e1:ab:20:84:85:b0:84:b8:bf:
         d0:7a:9c:15:1c:c0:19:21:f8:d2:c7:49:32:17:d7:66:ae:67:
         fc:0e:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:38 2026 by rpki-client