Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
File:                     N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json)
Hash identifier:          Y+Zb/tMahMoIvCTnMArsbexPS4Uq5qaHkRISZvQvGSs=
Subject key identifier:   87:43:E9:98:D7:92:0F:B4:D6:9A:5A:4B:F8:2D:91:07:AD:83:BF:18
Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
Certificate issuer:       /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Certificate serial:       019D97AA8C91F8A7A1C669B91A5578715F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
Manifest number:          0A54
Signing time:             Thu 16 Apr 2026 19:00:29 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:29 +0000
Manifest next update:     Fri 17 Apr 2026 19:00:29 +0000
Files and hashes:         1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: xdYqQu/6Ia6tAZlPDGXCLk0SK2f4RkvaOM7j1eaF+Pc=)
                          2: TCXCSy8OTt2z48kEbdsf0Ii50x4.roa (hash: ABalj2aODIZMqx3xajCEDvRzB5V6E/YYH2xej8zDQ0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:aa:8c:91:f8:a7:a1:c6:69:b9:1a:55:78:71:5f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
        Validity
            Not Before: Apr 16 19:00:29 2026 GMT
            Not After : Apr 17 19:00:29 2026 GMT
        Subject: CN=8743e998d7920fb4d69a5a4bf82d9107ad83bf18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:ab:79:82:b4:30:ff:48:b0:2d:a6:7c:60:
                    91:78:e3:95:36:92:29:af:dc:a1:ff:6f:62:34:87:
                    cd:a7:e6:f4:64:78:c9:2d:26:8b:1a:a5:8a:9d:2e:
                    7c:50:e1:dd:34:8c:c2:3a:e4:08:96:13:d4:46:e4:
                    bc:1c:68:a1:3d:25:89:6e:c8:36:2f:03:6f:3f:48:
                    b0:c8:93:f7:f8:5c:83:33:d4:3e:db:af:69:40:ef:
                    59:ac:48:0d:77:b3:f0:99:71:08:63:32:ba:14:11:
                    76:53:0e:e1:aa:8f:5c:e5:b7:3f:cb:88:9f:0d:dc:
                    a0:ff:52:c3:ac:a4:8b:ad:45:d5:c3:7b:6f:24:92:
                    08:51:67:77:e1:fe:a1:51:13:e5:40:0d:03:9a:27:
                    08:8c:48:62:08:78:06:5f:f9:21:ab:d7:5e:94:88:
                    2a:91:f1:36:3d:9b:32:69:cb:bb:19:a5:30:14:1a:
                    33:7a:47:aa:6b:ef:7a:ae:24:48:3d:82:18:2e:74:
                    5c:16:1e:8e:e6:a6:75:20:65:55:96:13:59:65:35:
                    09:6e:63:fb:0f:4f:30:77:92:77:59:0d:13:27:2f:
                    60:0e:7c:22:ab:35:ae:f5:bf:36:83:2a:7d:79:ca:
                    d8:e9:39:e1:a8:2a:ef:44:9a:e7:81:d7:df:47:8b:
                    41:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:43:E9:98:D7:92:0F:B4:D6:9A:5A:4B:F8:2D:91:07:AD:83:BF:18
            X509v3 Authority Key Identifier:
                keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b4:87:96:85:ea:fa:5b:4a:c7:a3:2d:14:89:45:f6:1d:c5:
         38:de:e4:39:f4:07:cd:ab:40:a8:42:a4:4e:ea:99:ad:df:57:
         3b:e0:be:85:cd:13:45:78:7d:89:b7:e3:b3:c9:b1:0f:7c:48:
         c7:69:7c:0f:ca:c8:e2:b7:46:73:59:42:36:ed:7e:12:59:13:
         5e:16:31:41:85:60:f1:34:43:09:14:ec:a3:4b:54:0e:4b:29:
         ed:e6:f7:eb:ca:fe:7e:bd:c9:5d:a4:0b:b2:40:ee:c5:be:0b:
         69:97:5d:ef:48:9a:3d:72:94:b2:68:54:8a:9b:21:d7:0c:d5:
         6f:7d:1f:1b:13:98:eb:84:3a:fb:c0:84:5a:8d:51:52:b9:3d:
         40:18:7f:f0:b1:3e:d3:d8:0b:2d:10:87:99:01:bc:db:b1:94:
         72:b1:d3:a6:fa:bf:a4:49:69:cc:da:ee:68:b4:2b:29:6b:7e:
         2b:9c:4a:23:d6:1d:b0:e8:71:a5:f7:be:97:77:ea:2c:6d:bd:
         16:e7:8f:4b:12:68:c5:a6:f6:75:12:4b:c1:3b:d2:95:65:d7:
         d7:a7:73:d5:f8:e9:29:2d:ab:67:1b:99:70:70:2a:87:88:79:
         5b:b5:26:29:b1:7a:f7:3a:82:51:b9:50:0f:9a:77:7d:94:11:
         d7:2a:66:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XqoyR+Kehxmm5GlV4cV8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZjRiOTFhM2ZmY2U5Zjk3NTA1YTczY2ZkNWU0YWQ0ZTM1
ZTA0MmQwHhcNMjYwNDE2MTkwMDI5WhcNMjYwNDE3MTkwMDI5WjAzMTEwLwYDVQQD
Eyg4NzQzZTk5OGQ3OTIwZmI0ZDY5YTVhNGJmODJkOTEwN2FkODNiZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuWreYK0MP9IsC2mfGCReOOVNpIp
r9yh/29iNIfNp+b0ZHjJLSaLGqWKnS58UOHdNIzCOuQIlhPURuS8HGihPSWJbsg2
LwNvP0iwyJP3+FyDM9Q+269pQO9ZrEgNd7PwmXEIYzK6FBF2Uw7hqo9c5bc/y4if
Ddyg/1LDrKSLrUXVw3tvJJIIUWd34f6hURPlQA0DmicIjEhiCHgGX/khq9delIgq
kfE2PZsyacu7GaUwFBozekeqa+96riRIPYIYLnRcFh6O5qZ1IGVVlhNZZTUJbmP7
D08wd5J3WQ0TJy9gDnwiqzWu9b82gyp9ecrY6TnhqCrvRJrngdffR4tBhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdD6ZjXkg+01ppaS/gtkQetg78YMB8GA1UdIwQY
MBaAFDf0uRo//On5dQWnPP1eStTjXgQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQt
YWIyYmFmYTFhZTRkLzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84NWEwM2QtODdjMy00NDAxLTlhMGQtYWIyYmFmYTFhZTRk
LzEvTl9TNUdqXzg2ZmwxQmFjOF9WNUsxT05lQkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOrSHloXq
+ltKx6MtFIlF9h3FON7kOfQHzatAqEKkTuqZrd9XO+C+hc0TRXh9ibfjs8mxD3xI
x2l8D8rI4rdGc1lCNu1+ElkTXhYxQYVg8TRDCRTso0tUDksp7eb368r+fr3JXaQL
skDuxb4LaZdd70iaPXKUsmhUipsh1wzVb30fGxOY64Q6+8CEWo1RUrk9QBh/8LE+
09gLLRCHmQG827GUcrHTpvq/pElpzNruaLQrKWt+K5xKI9YdsOhxpfe+l3fqLG29
FuePSxJoxab2dRJLwTvSlWXX16dz1fjpKS2rZxuZcHAqh4h5W7UmKbF69zqCUblQ
D5p3fZQR1ypmww==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:31 2026 by rpki-client