Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
File:                     F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json)
Hash identifier:          nDwG3aqfHBJbbOY9pLLAlMyJBSTCK2verrF53RUHGLQ=
Subject key identifier:   AC:72:B4:59:2A:40:62:6C:BC:B8:0A:4E:65:B2:5E:1E:30:3C:22:92
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Certificate issuer:       /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial:       019D9BF56A8DC7A7FB88EE58A25A2CB63795
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
Manifest number:          12F8
Signing time:             Fri 17 Apr 2026 15:00:45 +0000
Manifest this update:     Fri 17 Apr 2026 15:00:45 +0000
Manifest next update:     Sat 18 Apr 2026 15:00:45 +0000
Files and hashes:         1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: Cnyv0Ll03fRyuN2vo8nK1iK5aKFkouQh23KMa79NgWE=)
                          2: MwjqyVMrj31F474MSeKkhNXzvoI.roa (hash: m7bqaTX59YwG3k1du3WuNAO3cJYKNz+DJfHgg5XKNsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:6a:8d:c7:a7:fb:88:ee:58:a2:5a:2c:b6:37:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
        Validity
            Not Before: Apr 17 15:00:45 2026 GMT
            Not After : Apr 18 15:00:45 2026 GMT
        Subject: CN=ac72b4592a40626cbcb80a4e65b25e1e303c2292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:51:0b:f0:42:a0:a4:6d:8d:3c:d3:09:e2:4d:
                    48:b4:5d:cb:a5:62:b5:e0:74:a7:db:a0:ce:84:82:
                    94:f6:14:ef:fa:00:1e:e3:af:41:6e:67:62:4c:74:
                    37:28:45:ec:7d:b5:8b:4d:9f:d8:e4:6e:38:81:ab:
                    9d:c4:0c:db:5c:44:82:71:00:64:02:8b:86:a3:1b:
                    af:37:af:6d:27:b3:b6:3f:75:56:48:da:ce:47:58:
                    e5:7e:bd:c6:ad:57:42:2f:ba:8a:33:d3:ac:2a:b3:
                    e7:f8:e5:a2:bd:8c:4a:b3:e9:78:57:69:10:e1:e9:
                    22:75:78:78:c1:4f:07:76:31:d3:d0:01:dc:7a:4d:
                    6d:90:36:ca:af:e9:8d:ee:81:e7:47:2c:74:9d:9b:
                    c6:6d:c0:7a:6c:b8:c8:ca:db:4a:f9:3a:a1:9f:7c:
                    11:fa:b3:d5:a5:4a:3b:1c:05:da:b9:77:43:bb:91:
                    02:7a:8f:36:47:10:eb:09:39:fb:f0:ff:ad:d8:22:
                    88:9f:2f:1f:6e:16:9f:ac:fc:14:6c:ad:78:78:63:
                    a2:c1:79:13:35:75:76:4e:c3:ff:67:f0:9e:4c:19:
                    d6:c8:0b:ac:d9:f2:41:75:b5:f2:28:99:3d:b6:41:
                    a5:f8:35:86:c3:b1:8d:c6:1e:2b:f7:73:64:bc:f1:
                    18:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:72:B4:59:2A:40:62:6C:BC:B8:0A:4E:65:B2:5E:1E:30:3C:22:92
            X509v3 Authority Key Identifier:
                keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:5a:50:93:35:46:d9:07:30:0a:35:9d:56:54:23:ed:80:92:
         f6:98:e1:ff:c0:c3:b2:70:05:46:64:14:26:e4:4b:34:1d:78:
         0c:80:57:b7:33:af:56:71:19:75:ed:99:32:a7:10:13:b8:e1:
         93:34:15:3c:f8:71:78:bd:3d:61:82:dc:33:f1:f3:67:46:b1:
         ae:f0:e8:11:1a:17:f5:4a:07:60:6b:b6:8a:d5:42:51:43:a6:
         b5:e9:af:59:d5:bd:d2:ab:14:28:36:69:6b:9e:07:e7:3f:0f:
         bd:8b:21:9b:1a:9d:e8:d8:19:6f:34:00:6d:b0:fd:29:84:4f:
         a3:9a:14:e2:d0:3a:59:91:c4:ad:b6:32:82:7c:54:cf:50:67:
         ba:d1:4d:52:bc:2f:fe:c0:78:03:ab:05:68:7a:3e:60:da:fd:
         b6:d0:2d:79:17:c4:d7:06:b2:4b:f2:01:98:d7:7b:29:70:8e:
         ed:75:df:59:87:c2:ca:8b:e2:bc:dc:19:51:0d:6a:b8:69:53:
         70:d9:02:ee:fc:14:ac:63:e2:a8:e6:f7:91:77:74:12:5c:ef:
         aa:d5:26:a7:a1:d3:db:1f:07:bc:02:13:7b:42:22:3f:c0:db:
         ff:b3:f7:69:a6:e9:1b:9d:38:49:1c:72:3b:f6:c9:f1:f8:32:
         42:fa:c9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:15 2026 by rpki-client