Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
File:                     5NozpY-0djTWFOwJpomN4PWABv4.mft (raw, json)
Hash identifier:          QJlNuf6oeTFRmyxxecgxm/PAJNby8KtAKsvBcNU1mUI=
Subject key identifier:   C3:2F:90:D5:A3:90:3C:4A:51:68:51:AC:AF:A9:D1:44:A2:6C:D6:CE
Authority key identifier: E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE
Certificate issuer:       /CN=e4da33a58fb47634d614ec09a6898de0f58006fe
Certificate serial:       019D9A751BD433AA8FB32FB778FD739CE932
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
Manifest number:          0F99
Signing time:             Fri 17 Apr 2026 08:00:59 +0000
Manifest this update:     Fri 17 Apr 2026 08:00:59 +0000
Manifest next update:     Sat 18 Apr 2026 08:00:59 +0000
Files and hashes:         1: 5NozpY-0djTWFOwJpomN4PWABv4.crl (hash: sF8fK90I9kRMWR91Y9M2J038AdiuHhRFkH46ggF1Snk=)
                          2: X3KSPRpScg7W0Ns5vBLAW7YVOAY.roa (hash: gCWNoXRiXdqXJ9sAUoBn9JpM+1ZIHNyGOsBQSFKX4Lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:75:1b:d4:33:aa:8f:b3:2f:b7:78:fd:73:9c:e9:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4da33a58fb47634d614ec09a6898de0f58006fe
        Validity
            Not Before: Apr 17 08:00:59 2026 GMT
            Not After : Apr 18 08:00:59 2026 GMT
        Subject: CN=c32f90d5a3903c4a516851acafa9d144a26cd6ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:df:09:70:d8:54:2d:b0:6c:ee:f2:bf:25:d5:
                    fc:9c:26:d2:a6:8a:15:97:5d:55:9a:d6:b3:1e:56:
                    a2:c1:c5:82:9d:36:6e:6e:26:75:4c:4c:49:33:77:
                    d2:e6:e1:a8:17:be:16:1c:2b:99:ac:bf:1f:3b:03:
                    a5:60:a4:66:fc:84:a0:9e:48:bb:ef:a7:eb:55:40:
                    3f:c1:b9:47:16:88:93:ed:8f:2c:4c:e7:81:65:78:
                    74:9e:5d:82:bd:f0:a2:b6:58:31:e1:48:32:ce:4f:
                    fe:19:4a:7d:50:cf:c3:09:87:65:94:ec:4f:81:b7:
                    6f:c5:63:b9:31:d1:d5:47:6b:91:8d:fc:35:0d:20:
                    56:d3:ed:40:f8:41:40:77:b4:2b:f2:54:89:20:cd:
                    d7:9e:e8:9d:03:66:30:82:e4:e8:14:ee:9e:71:4c:
                    1b:d4:69:4b:f1:0a:ec:16:03:58:02:3c:35:83:0b:
                    79:ff:bc:b9:29:4d:95:ae:8c:fb:13:62:e8:7a:16:
                    9d:94:89:86:e2:33:65:2b:06:1b:90:d5:21:8d:9e:
                    8e:6e:22:76:2c:cd:b6:0c:29:2b:3a:42:58:7e:be:
                    b4:63:6a:a0:9d:36:14:00:d4:f5:8f:e2:13:3a:ee:
                    04:a9:9a:49:67:08:1b:b9:d4:a6:1c:54:75:8e:a6:
                    8b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:2F:90:D5:A3:90:3C:4A:51:68:51:AC:AF:A9:D1:44:A2:6C:D6:CE
            X509v3 Authority Key Identifier:
                keyid:E4:DA:33:A5:8F:B4:76:34:D6:14:EC:09:A6:89:8D:E0:F5:80:06:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NozpY-0djTWFOwJpomN4PWABv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/2d0ca2-8c3e-4f8c-906c-6ce60226a9e8/1/5NozpY-0djTWFOwJpomN4PWABv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f4:23:0f:88:e9:15:81:0d:fd:13:bb:23:32:7e:e5:87:eb:
         a1:d8:46:cf:3d:a3:40:b1:02:80:33:81:4f:d3:64:86:cc:4f:
         35:19:a1:37:de:9c:dc:b9:10:54:cb:12:e1:bd:86:34:05:51:
         2e:6e:02:d7:75:a5:4e:1c:2b:00:2a:e6:a4:40:3e:d7:15:a7:
         d4:b0:82:19:f1:3c:c8:a5:5b:19:27:b0:ca:f4:e5:74:9f:d0:
         c7:8b:dc:7f:a7:42:c5:d1:ea:75:6e:d6:31:fa:e1:1b:d5:1a:
         a8:e3:ae:a3:7c:a9:56:c8:34:b1:a5:db:a1:ca:b0:15:3c:5c:
         6c:97:b9:08:c2:9f:01:1d:e7:3e:61:dd:7e:54:b9:2d:39:69:
         6a:86:ca:2c:81:26:fa:25:78:66:8f:da:08:48:a3:0f:2a:e6:
         89:47:d6:d6:b2:97:f6:c8:bc:c6:de:99:ac:e3:ba:02:77:ee:
         42:c5:db:ff:ce:4f:2c:d2:f9:b2:ee:f8:ed:01:70:72:09:ae:
         50:ec:59:f3:d0:ab:f4:e2:12:8d:39:47:95:a6:9c:11:b7:16:
         5a:1e:04:ba:13:0a:84:e1:ca:65:08:14:52:e9:52:19:4c:ff:
         88:57:ab:ba:9b:39:05:d0:b2:0b:07:2a:04:b4:bd:b7:a0:43:
         b5:56:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:37 2026 by rpki-client