Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
File:                     5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft (raw, json)
Hash identifier:          NbEYPgLD81/km0YYRqKEMEJgAKAu/KEvh/21Mpm1oTg=
Subject key identifier:   0E:B6:BD:0F:9B:36:7E:A3:87:EC:4C:39:8B:61:BA:24:23:AB:5D:35
Authority key identifier: E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA
Certificate issuer:       /CN=e46a3f838688843758d28057007dc6cd2898ecca
Certificate serial:       019CAA21B61B099018CE37BA5D037313C61B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
Manifest number:          1554
Signing time:             Sun 01 Mar 2026 16:01:01 +0000
Manifest this update:     Sun 01 Mar 2026 16:01:01 +0000
Manifest next update:     Mon 02 Mar 2026 16:01:01 +0000
Files and hashes:         1: 5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl (hash: 1czOvt1cdzWbVOcBWGttiZlM0xIJTehY04w5GPczo+o=)
                          2: XSiU7-0SbDMQ_IdA4IB6KriuE3I.roa (hash: yT0rAcntGSaWEZ0ss06gXt5M4fgq/qjh8GeO0S2AMtY=)
                          3: _pR80NWgxj4Gx0LuVsPkMkTDYZg.roa (hash: 1gS4zptz0LFHVLhrqKXAHRNkXnwAvD1HMmz81y59cx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:21:b6:1b:09:90:18:ce:37:ba:5d:03:73:13:c6:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46a3f838688843758d28057007dc6cd2898ecca
        Validity
            Not Before: Mar  1 16:01:01 2026 GMT
            Not After : Mar  2 16:01:01 2026 GMT
        Subject: CN=0eb6bd0f9b367ea387ec4c398b61ba2423ab5d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ad:be:9d:9f:5e:e3:97:fa:26:0f:a2:fe:e0:
                    91:4d:a7:cd:d4:33:59:e4:13:a6:9a:9b:d2:50:b2:
                    85:a6:ba:02:c5:68:7e:17:2f:a9:16:05:51:75:7c:
                    9d:72:c6:dd:2f:28:f9:19:3f:47:45:76:07:6e:e5:
                    08:9f:47:ef:4a:d9:07:b8:7f:8e:41:69:13:d8:9b:
                    88:05:a6:64:a9:2e:35:1b:d5:58:f2:77:f2:e7:3a:
                    f4:91:21:1d:f5:22:e0:1c:3e:14:b1:cb:f4:89:8b:
                    9f:a0:77:6f:1a:af:7e:83:6e:03:82:14:be:da:af:
                    c7:65:90:a4:49:7f:c8:47:eb:df:56:ee:9b:d4:18:
                    1b:2a:b8:9a:b1:5b:d8:33:b6:e2:10:b7:7e:27:f4:
                    8a:2e:9c:b4:d8:eb:5a:be:84:11:fa:fc:18:41:28:
                    3d:b2:a4:92:90:0b:fc:d5:41:86:be:8e:fa:30:48:
                    10:92:48:5f:a1:14:db:bb:96:b1:e2:81:da:e2:2e:
                    1a:58:e4:88:d6:ad:4d:72:ef:54:8c:ae:74:f9:78:
                    38:7e:c3:03:4e:fb:93:b8:43:43:f4:64:62:bb:9c:
                    bc:1e:55:53:77:45:05:b7:70:07:d3:4f:4a:bc:78:
                    bf:be:bd:7d:6f:6f:f4:08:fa:42:48:aa:5b:89:d4:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B6:BD:0F:9B:36:7E:A3:87:EC:4C:39:8B:61:BA:24:23:AB:5D:35
            X509v3 Authority Key Identifier:
                keyid:E4:6A:3F:83:86:88:84:37:58:D2:80:57:00:7D:C6:CD:28:98:EC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/52cf99-e798-4cab-a303-a3b06d4e4775/1/5Go_g4aIhDdY0oBXAH3GzSiY7Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:bf:d8:e2:7b:aa:47:05:ab:51:8b:08:85:a9:c6:8c:d7:f6:
         63:c0:06:77:9e:47:38:de:4b:55:03:47:67:40:37:46:a7:94:
         f4:88:83:89:48:da:b2:0c:c0:e2:a3:df:30:c2:51:3e:f5:fe:
         d3:8e:f0:64:95:2b:f5:b6:51:1e:fe:ee:05:f6:9a:d5:52:57:
         60:d3:84:63:07:dd:dd:6f:32:b8:4d:55:4b:71:af:ec:65:cf:
         b0:3e:9b:ca:de:32:bd:83:20:77:fa:c5:f0:cc:2e:b5:81:0d:
         af:e3:5c:46:52:4c:cb:0e:32:36:95:ca:8e:d5:02:11:7d:cc:
         bf:00:23:de:ef:80:99:08:71:a5:77:ca:29:ef:c6:a5:4a:d1:
         62:59:a5:25:9f:b8:18:a2:44:7e:97:8c:77:b8:bf:f2:45:09:
         b7:a3:ba:a4:f5:cd:44:aa:63:6e:93:dc:43:62:48:e8:b0:0d:
         5f:24:9f:e4:50:d5:d4:23:02:3a:19:c3:e5:7b:27:8f:16:5b:
         c2:62:4a:99:9d:c1:c8:ff:61:58:7c:1e:8c:d1:59:4f:ad:89:
         ca:1c:85:9b:47:55:de:55:c0:33:fe:52:aa:6d:ad:a9:21:8f:
         38:3f:ac:46:97:ce:b9:bf:5f:3a:71:c8:41:21:06:6f:0a:b7:
         bf:ae:25:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:54 2026 by rpki-client