Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
File:                     5D8j1ok3SUKI38x6Dv4f50ogNuE.mft (raw, json)
Hash identifier:          y1Z6kOfjUEwyHq1a4aEqxb4Ul88m4FLeUKDeWtTIYCk=
Subject key identifier:   F4:8F:13:11:71:71:9B:BE:94:38:6F:BD:2D:D9:9F:D8:FC:C8:00:DE
Authority key identifier: E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1
Certificate issuer:       /CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
Certificate serial:       019D9BF51088F5A76B98F0EABD7B74199132
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 15:00:22 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:22 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:22 +0000
Files and hashes:         1: 5D8j1ok3SUKI38x6Dv4f50ogNuE.crl (hash: ZZDinL+v7lc+jpeY38UcehKNicSQsCSZBFZiOGJ1gdE=)
                          2: Ir27xg9dLc2jCmst038CD7aSTUE.roa (hash: oSA2uezGmOSkDFovORRhwQlbzwF4ltfNZW/lvc676ZY=)
                          3: WDTYJfU4GmC_Z6SmZBDA6liuL48.roa (hash: FJHas3EZqiie/GgKCvyAh7bXL6nc+V2NXzO+Cw5KyLA=)
                          4: pwYTinLuDu67XvmsuR-F4t51_KA.roa (hash: eNI+YaNU/hzM1s49lx5C1dDOoIT3b4beF5vq3z+7/TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:10:88:f5:a7:6b:98:f0:ea:bd:7b:74:19:91:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43f23d68937494288dfcc7a0efe1fe74a2036e1
        Validity
            Not Before: Apr 17 15:00:22 2026 GMT
            Not After : Apr 18 15:00:22 2026 GMT
        Subject: CN=f48f131171719bbe94386fbd2dd99fd8fcc800de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:23:b8:4d:a2:28:16:c2:14:2f:26:8a:24:
                    bb:8d:b8:92:a2:e8:02:88:11:f5:bb:c3:7a:98:75:
                    90:e1:8e:f1:8a:6c:03:6e:53:98:f5:4a:ec:99:5e:
                    5d:46:ea:b4:3e:e9:cd:93:ec:a2:e8:c3:55:44:98:
                    38:8b:2e:1a:39:99:54:3b:c3:6e:68:1e:65:71:20:
                    92:84:fb:09:38:ac:67:4c:a0:ed:da:95:11:45:0e:
                    af:fd:77:15:70:61:0d:bb:a0:92:30:67:7b:17:cc:
                    7c:00:26:44:a4:6c:f9:08:66:2f:7b:12:2c:a2:38:
                    e1:85:89:c6:26:e2:e3:73:a9:b4:41:30:19:b7:e5:
                    dc:7f:b2:2f:02:22:8b:3d:c3:ad:58:82:be:9f:93:
                    a8:be:e9:c1:ea:67:7a:28:b9:4c:e1:1a:82:62:c0:
                    2d:ad:41:17:4b:10:03:01:dc:61:9a:a9:31:c7:e2:
                    88:81:ce:06:25:11:b9:d2:82:70:ff:e9:61:85:0f:
                    f1:e5:05:e9:c3:fe:ae:25:fe:26:6c:e0:14:47:2a:
                    32:e2:87:03:7c:6f:24:2c:ea:29:71:cf:76:9c:a7:
                    35:2b:61:4c:28:c8:ba:00:a4:b5:c6:ae:24:95:0c:
                    a3:13:b2:40:2d:fd:29:0c:6b:29:23:da:6f:a6:2b:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:8F:13:11:71:71:9B:BE:94:38:6F:BD:2D:D9:9F:D8:FC:C8:00:DE
            X509v3 Authority Key Identifier:
                keyid:E4:3F:23:D6:89:37:49:42:88:DF:CC:7A:0E:FE:1F:E7:4A:20:36:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D8j1ok3SUKI38x6Dv4f50ogNuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ab5fdc-9d6b-4675-9a13-9d185f738211/1/5D8j1ok3SUKI38x6Dv4f50ogNuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:06:e6:44:72:08:ed:55:56:fd:0d:25:43:53:b2:a5:4a:
         ac:de:1d:b7:2c:37:73:3f:22:45:4c:d2:49:ec:ae:e5:ac:18:
         ca:28:d1:c2:8d:29:aa:62:85:a5:00:f4:0d:07:11:c8:30:2d:
         68:a0:9e:6a:30:ab:f3:fd:c0:6a:ef:c3:3e:4b:cf:08:83:4f:
         07:5d:89:f8:58:b2:56:31:af:87:2e:1b:49:86:44:a3:66:5c:
         eb:29:77:72:65:cc:44:8f:e2:11:d0:9b:91:e8:ce:8e:b3:fa:
         42:d0:a4:f1:e8:f9:a7:cb:39:c0:f5:11:5c:8d:3f:d0:8c:8d:
         23:ef:a0:1f:ec:e1:a0:e5:85:85:d5:41:e3:15:c3:0a:a0:2c:
         78:f2:fb:c9:3f:c2:4f:fb:6a:92:1a:05:37:56:d1:50:e1:aa:
         7c:78:33:fe:39:ca:ec:be:5c:51:5e:c4:8c:22:f5:ea:4a:f3:
         1d:d5:3d:12:51:7d:50:c6:0f:de:1a:3d:61:a9:14:0c:9e:12:
         e4:89:71:e3:79:8b:d0:e3:e8:c3:ec:d9:52:47:da:6a:b8:35:
         62:bb:ea:15:90:ae:27:6b:0f:24:34:5d:af:91:41:13:4f:9e:
         81:e1:20:d4:28:90:0a:96:f2:7d:72:e0:1f:17:d4:ef:ba:6f:
         bd:ee:4d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:54:12 2026 by rpki-client