Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File:                     5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier:          mW+5ft73SLPUsdQVdxp1/lnHqLe3OiTVi10U//MSIvo=
Subject key identifier:   DD:29:44:2D:43:53:2D:BD:AD:AC:27:5E:FF:F6:E1:36:78:6A:2D:0F
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer:       /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial:       019DA41D11C731FF5D72C14A2F80E5A9FFBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number:          18C8
Signing time:             Sun 19 Apr 2026 05:01:01 +0000
Manifest this update:     Sun 19 Apr 2026 05:01:01 +0000
Manifest next update:     Mon 20 Apr 2026 05:01:01 +0000
Files and hashes:         1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
                          2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: R3idfhEzyDOIw/QkaB+UfPCQXEl2W2tOHcfHUxaC5sA=)
                          3: Oa_sii1Clbbek1SF0NauE94faXI.asa (hash: YEmLQlVRuHxGBIqwaUaToyDICFpczhTHLQZcRXVFos4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:1d:11:c7:31:ff:5d:72:c1:4a:2f:80:e5:a9:ff:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
        Validity
            Not Before: Apr 19 05:01:01 2026 GMT
            Not After : Apr 20 05:01:01 2026 GMT
        Subject: CN=dd29442d43532dbdadac275efff6e136786a2d0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3d:41:0c:dd:ef:28:85:9e:a0:55:e2:e5:01:
                    9f:6b:2a:7f:72:86:70:95:2f:9d:4f:43:5e:ed:e1:
                    61:8e:4b:bc:e2:96:e0:50:24:40:04:60:7a:d0:4e:
                    f1:fe:0c:37:d2:c8:22:c2:a8:94:fb:82:c8:27:45:
                    ff:26:6e:0b:02:bf:b3:9e:b4:8f:98:9e:1f:b8:45:
                    2d:31:6c:45:9e:3b:23:eb:ec:b6:d6:21:c8:94:c7:
                    90:b3:f2:52:64:08:a6:95:3b:01:c4:1e:4e:0d:f1:
                    84:01:44:f4:55:2c:9b:7a:30:6c:61:01:e9:10:be:
                    11:f6:04:0a:9b:24:c6:88:a8:0a:1b:4c:9b:28:ed:
                    98:07:01:30:d7:cc:b5:54:f6:4a:a4:54:25:15:ca:
                    84:8e:82:a8:bc:a4:c7:f3:35:96:30:5a:b4:9b:98:
                    87:00:f7:db:74:ca:e7:d1:69:cb:36:ef:a9:02:00:
                    8e:6d:5c:eb:33:ca:04:77:be:ca:81:02:2c:19:fa:
                    90:e3:f3:fa:84:b9:7a:f0:32:07:2c:c2:9c:8a:f7:
                    34:91:f1:a2:1a:24:73:eb:62:5c:53:24:ca:18:7f:
                    e9:47:8f:7d:33:d2:86:b7:1e:30:5a:e9:43:0e:28:
                    ac:8b:ed:a9:a9:41:61:96:4d:26:e9:5f:a2:06:bd:
                    4a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:29:44:2D:43:53:2D:BD:AD:AC:27:5E:FF:F6:E1:36:78:6A:2D:0F
            X509v3 Authority Key Identifier:
                keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:4e:08:13:7e:99:bf:77:ea:8b:ed:21:f3:18:b1:e7:d4:f5:
         c9:04:7d:87:cc:5d:41:b0:30:e6:9a:6e:e2:29:ec:79:d7:02:
         71:48:99:36:94:7c:e7:6f:3d:d5:f2:84:76:9c:46:bf:e1:27:
         6d:9d:9c:e1:ca:3d:9e:c8:e7:c4:e0:19:3d:ca:83:d5:08:d1:
         2a:75:25:88:07:ce:ce:11:07:68:61:4b:8a:21:f5:8d:73:47:
         3a:a1:7c:76:20:93:87:1d:2f:e8:fb:96:15:b1:bf:ec:9d:0c:
         52:1c:1e:6e:a0:91:58:a0:d7:e8:87:66:4d:2b:18:dc:7a:0d:
         f9:42:b5:34:d8:9f:a8:a5:d1:de:35:a7:ed:7d:45:ad:52:77:
         43:05:ef:70:24:33:1d:dd:b1:08:a7:b3:67:05:9b:91:be:83:
         4b:2e:7e:8c:c6:d2:91:23:52:e9:78:f0:a3:34:8e:ce:e5:19:
         97:d3:cd:c5:3f:b1:8d:f5:7a:b8:80:31:e9:1c:9b:a5:95:7f:
         2b:62:ca:d7:a0:75:c9:54:1c:e7:cc:f6:af:c8:b8:c4:55:3d:
         ef:9d:9b:f5:1f:53:ec:35:87:c9:06:7a:e4:03:01:1b:1c:df:
         db:6d:2a:12:09:a3:9c:f6:51:8b:84:b0:d7:05:7b:6e:25:d0:
         89:02:cf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:51 2026 by rpki-client