Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
File:                     5zhsF7RWELWLvgnNMMqfsMGWH9M.mft (raw, json)
Hash identifier:          M8j0Z5CK2GIE7LQ2kZL4OxU767v8KOQOp0TXB0Wio1k=
Subject key identifier:   9B:18:EA:51:11:0D:37:C9:64:06:BD:0A:6F:1F:BA:05:41:9E:4E:05
Authority key identifier: E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3
Certificate issuer:       /CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
Certificate serial:       019D98504A8D64F6A8EB16C70F465BAAEB33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
Manifest number:          0A1C
Signing time:             Thu 16 Apr 2026 22:01:31 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:31 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:31 +0000
Files and hashes:         1: 5zhsF7RWELWLvgnNMMqfsMGWH9M.crl (hash: ATXQV/Q+bo/097mUKOvTxQcpyYC4iTV2mr2LOk9ef2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:4a:8d:64:f6:a8:eb:16:c7:0f:46:5b:aa:eb:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7386c17b45610b58bbe09cd30ca9fb0c1961fd3
        Validity
            Not Before: Apr 16 22:01:31 2026 GMT
            Not After : Apr 17 22:01:31 2026 GMT
        Subject: CN=9b18ea51110d37c96406bd0a6f1fba05419e4e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:64:90:cd:d7:cd:83:d5:a7:06:dd:1e:60:4d:
                    66:4d:09:71:a3:2c:ed:2f:55:ca:68:d6:44:f9:3d:
                    fc:24:99:31:63:37:de:c7:ec:39:15:8f:99:a2:0c:
                    a3:bb:f4:82:4e:f6:35:7b:c1:61:1f:b4:8c:4f:ef:
                    f9:61:16:6a:4e:98:ff:b6:e4:8a:a4:57:47:e4:a1:
                    99:30:85:61:84:3a:78:95:20:ed:aa:2e:b8:56:4e:
                    36:21:b6:e3:1d:bc:49:f0:9d:c4:ee:a6:01:af:a0:
                    4b:b7:96:ef:db:76:bb:11:27:fe:95:28:dc:1a:09:
                    1f:13:9b:dc:41:5d:1e:e3:e3:ae:87:19:70:13:0c:
                    45:46:50:89:1f:1a:ff:38:4b:e1:1b:3e:1b:e0:13:
                    90:70:55:97:b5:a2:88:1f:57:e0:e2:41:16:7f:18:
                    72:2b:89:f4:e3:58:ad:ab:b4:fe:bb:c2:4c:f0:22:
                    1e:7e:e3:43:74:c4:1b:d5:6f:2a:88:e9:34:ed:24:
                    50:2e:e0:d9:23:93:5b:72:be:02:e4:70:24:f1:7f:
                    9d:e6:e4:05:f1:39:d0:a3:22:97:86:cb:cf:40:13:
                    e7:83:fd:b9:69:e8:05:5a:82:42:ab:aa:30:4c:f1:
                    08:74:a7:5c:36:ea:c4:1e:42:cc:64:e6:9b:20:5a:
                    7d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:18:EA:51:11:0D:37:C9:64:06:BD:0A:6F:1F:BA:05:41:9E:4E:05
            X509v3 Authority Key Identifier:
                keyid:E7:38:6C:17:B4:56:10:B5:8B:BE:09:CD:30:CA:9F:B0:C1:96:1F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zhsF7RWELWLvgnNMMqfsMGWH9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4a36df-4808-48e6-896f-6bbd685d9231/1/5zhsF7RWELWLvgnNMMqfsMGWH9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a6:ef:ff:02:aa:1a:5a:33:c0:55:7e:aa:79:18:15:98:2e:
         71:dd:4c:3e:21:de:22:1a:3d:a1:9a:27:29:00:c0:9f:1b:5e:
         e9:88:bd:c1:3b:b5:67:78:3b:47:f2:44:f1:e9:49:34:d1:91:
         8e:6d:39:d0:55:c5:75:28:ad:82:50:05:52:ba:fa:f8:a2:b5:
         71:b7:92:c3:37:f0:0f:2f:7e:7f:e7:2f:3a:39:62:f2:0f:9e:
         15:30:ac:f4:9c:c7:2c:e0:f5:ea:7a:b3:eb:04:2e:72:02:61:
         20:91:02:1d:ea:cb:61:d6:82:4e:df:da:18:1a:0f:e5:d7:6c:
         4d:b6:b2:c1:5c:40:b6:e0:b8:f4:09:a3:e7:0d:d2:8a:6e:06:
         30:92:4d:1e:f2:e1:bc:bd:2f:28:3d:b0:16:fd:eb:52:bf:57:
         f6:a2:3f:da:cc:66:7c:b7:82:5f:00:48:b0:f1:fd:6b:ea:0f:
         7a:26:76:95:30:d0:a7:ac:28:8b:0f:00:a2:f5:3c:03:6c:90:
         f6:3e:ad:e3:e4:b2:2e:27:be:d3:50:a0:83:de:2a:17:d6:5a:
         80:cd:d4:9c:b5:d0:dd:05:b0:a1:f0:7f:98:a6:6f:70:2a:c6:
         5a:f0:7c:7e:a7:c0:05:72:6c:45:09:70:40:35:a0:7f:a6:71:
         fa:49:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:32 2026 by rpki-client