Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
File:                     5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft (raw, json)
Hash identifier:          2/O0yMSfOW4UeglGdDWdB/pg8XwKpgaD2QG1ZAQNfPs=
Subject key identifier:   5C:50:3D:12:28:2A:88:77:0E:C7:85:41:D5:04:99:8F:9E:4E:47:BB
Authority key identifier: E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79
Certificate issuer:       /CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
Certificate serial:       019D9A3EE520A534442B84E14EEF4FAFF271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
Manifest number:          1555
Signing time:             Fri 17 Apr 2026 07:01:46 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:46 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:46 +0000
Files and hashes:         1: 2FfewzchtBOlT_1-bM1KbwVEptI.roa (hash: XCreExSvtYmion6efW1Ds82lk+nlI9Ef/9JOGZG0IwY=)
                          2: 5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl (hash: Uhzc37WY3QF4EEpwKie/XnX/O30NN9aUSWnL23mpdiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:e5:20:a5:34:44:2b:84:e1:4e:ef:4f:af:f2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41bf78b70ac276cbf65bb909f9934082f4d2d79
        Validity
            Not Before: Apr 17 07:01:46 2026 GMT
            Not After : Apr 18 07:01:46 2026 GMT
        Subject: CN=5c503d12282a88770ec78541d504998f9e4e47bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:0f:91:ab:af:e6:62:1b:52:4a:7e:66:13:
                    83:f2:d5:b6:58:f4:dd:a2:44:a2:29:b8:15:4e:cb:
                    14:b6:8d:ed:9f:fb:a1:8f:0f:5a:ff:32:0b:9f:c7:
                    e2:48:15:03:f5:e9:94:c6:4d:cc:b8:da:97:3a:2b:
                    9f:ff:59:a6:fa:0d:62:68:3d:fc:85:fb:a5:62:42:
                    ad:41:34:b9:fa:1b:c0:9b:c9:54:db:af:fd:f8:a0:
                    cd:93:df:cf:18:43:0a:cb:d2:b7:62:d5:38:f0:7c:
                    7d:ba:c3:01:6c:20:3a:a7:57:f6:23:5e:e3:ec:d0:
                    f6:3f:b0:07:10:7e:6b:e4:28:19:1a:86:dd:cd:2e:
                    19:e0:5a:a2:06:43:e1:fa:08:83:99:ab:a2:57:d1:
                    5b:97:f0:ee:70:cb:57:0a:83:52:2c:fc:5e:c8:22:
                    73:d5:58:70:16:65:86:b0:7f:f4:73:f6:8d:29:34:
                    5f:cb:bf:d2:7f:ab:28:3f:93:e6:c2:a8:40:be:a4:
                    8c:2d:f0:3c:20:5e:cb:d8:3f:62:bb:f7:7a:14:32:
                    dd:59:35:75:bb:75:39:c8:43:e4:46:d4:29:9a:8e:
                    26:9f:f2:d2:ac:a9:b0:b5:a5:e0:f4:d0:fa:79:b0:
                    60:f9:09:bf:e5:62:37:c0:ce:30:a7:4d:9e:70:31:
                    d0:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:50:3D:12:28:2A:88:77:0E:C7:85:41:D5:04:99:8F:9E:4E:47:BB
            X509v3 Authority Key Identifier:
                keyid:E4:1B:F7:8B:70:AC:27:6C:BF:65:BB:90:9F:99:34:08:2F:4D:2D:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/0cc042-cf2b-4616-92e0-af0556c47a37/1/5Bv3i3CsJ2y_ZbuQn5k0CC9NLXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:57:70:38:94:80:2c:c5:f3:a5:b4:12:c0:a6:1b:31:1d:9c:
         3a:86:8f:bc:00:86:07:35:6c:ce:32:34:42:06:a9:60:f7:04:
         09:23:34:90:bf:74:52:4a:7d:81:25:a1:0c:09:60:2d:fd:2a:
         a2:ec:94:d8:fa:14:ce:26:78:af:3c:8b:a1:b5:79:2e:c9:d7:
         c7:3a:cf:da:50:5a:67:06:79:da:55:c9:99:2d:57:c4:5b:9c:
         20:5e:fb:f2:10:8a:bd:44:52:55:48:c9:cc:f7:08:8e:a6:4c:
         2a:76:a9:2e:0d:7a:e9:2a:dd:6e:6e:3f:d1:46:46:bb:82:96:
         e4:fd:0b:1b:d0:b7:6a:4b:54:c6:32:02:d3:9d:29:e2:73:16:
         2e:7a:4e:1b:ff:fb:90:5d:ab:f6:58:dc:d3:18:13:01:34:15:
         44:e9:38:5e:1d:57:86:cd:e3:bc:0e:aa:e3:ad:b1:df:f0:3b:
         3d:a8:c5:e5:62:88:bd:51:9e:d3:a6:9f:18:f5:eb:cf:cd:b9:
         ff:b2:fe:dc:4b:b3:61:a7:77:a1:b5:7f:9d:24:41:4c:7a:81:
         1c:36:c6:f3:f2:4c:89:52:aa:c7:20:59:0d:8a:37:c3:df:66:
         c4:7d:58:a5:c1:c5:52:46:56:7b:e6:fc:46:da:a5:eb:33:6b:
         3c:67:7d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:26 2026 by rpki-client