Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
File:                     Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft (raw, json)
Hash identifier:          e6sjjd8aCWVuybOAybnE7iTIvhSS4JCIYz395xq1/CI=
Subject key identifier:   5E:0D:37:08:9F:17:4C:7B:D2:6E:F8:DB:2D:3D:FE:75:EF:9B:A1:72
Authority key identifier: 06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F
Certificate issuer:       /CN=06edfd28350f73d39855c475a1516ae0b7791a0f
Certificate serial:       019D98F40F36608113F8DE6CC109A7C3036A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
Manifest number:          18C5
Signing time:             Fri 17 Apr 2026 01:00:24 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:24 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:24 +0000
Files and hashes:         1: 7i0rCeFLYOfrWMrFd0FDjA_1uy8.roa (hash: jd+NyNAswzvZX584xQrQEmV3Udo0JMPIWH1l9hHAcA8=)
                          2: Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl (hash: HcuUxP0q9KP/81gKJf+NS1Hcb8LPEyui7NK8sdHRTDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:0f:36:60:81:13:f8:de:6c:c1:09:a7:c3:03:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06edfd28350f73d39855c475a1516ae0b7791a0f
        Validity
            Not Before: Apr 17 01:00:24 2026 GMT
            Not After : Apr 18 01:00:24 2026 GMT
        Subject: CN=5e0d37089f174c7bd26ef8db2d3dfe75ef9ba172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3f:1d:64:cb:b3:66:a5:ef:bf:e9:11:7e:b4:
                    0a:07:66:ef:7d:45:11:77:1f:b9:2d:89:d2:ca:e9:
                    3f:85:90:6a:e6:3f:92:10:c3:25:1e:d3:89:3a:80:
                    72:64:92:45:33:63:65:22:9f:dd:60:5d:e5:ba:7e:
                    0f:80:16:69:c3:33:12:76:92:25:c2:3e:95:f6:fb:
                    69:d6:d1:4d:68:86:5a:97:f6:ce:85:76:03:26:e3:
                    a8:6c:9b:21:a0:8e:5a:90:f5:63:a2:97:b7:7c:61:
                    71:fe:b1:77:af:89:72:1a:bc:9c:87:6e:d2:62:89:
                    f7:75:25:12:63:c3:e5:de:a0:9d:ba:d3:0b:16:77:
                    ce:d6:bd:c9:63:e5:a8:25:1c:d7:db:51:b7:e2:58:
                    4b:80:c4:a2:3a:a6:6e:ff:62:e2:0b:0b:c8:47:07:
                    51:1a:9c:1b:1b:ac:86:9d:7a:ca:9e:b4:6e:9b:ec:
                    bf:e4:e3:5d:1e:09:11:d5:82:a5:40:5a:f8:09:0b:
                    75:b0:8a:8d:e2:d3:ed:bd:69:0b:82:c4:91:0a:da:
                    96:0d:53:63:62:ad:2d:1e:ad:5e:2e:65:ef:8d:b4:
                    04:7b:56:33:60:c9:94:4a:39:fa:11:20:52:54:17:
                    a8:91:51:4b:4c:39:74:d2:97:46:cf:1d:df:23:8b:
                    e4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0D:37:08:9F:17:4C:7B:D2:6E:F8:DB:2D:3D:FE:75:EF:9B:A1:72
            X509v3 Authority Key Identifier:
                keyid:06:ED:FD:28:35:0F:73:D3:98:55:C4:75:A1:51:6A:E0:B7:79:1A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/613fb4-8a00-4b2d-8d1c-f6d729a93ec8/1/Bu39KDUPc9OYVcR1oVFq4Ld5Gg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:c4:74:19:87:dd:30:b4:e4:52:bb:b8:11:2f:3c:e8:cf:56:
         3c:61:3f:86:d3:08:68:1c:fb:1e:80:b9:f8:5d:a4:cc:5c:23:
         50:60:7a:ad:00:f9:66:b7:ec:91:9f:38:f9:35:e9:a2:8a:68:
         ab:28:35:77:44:f8:48:25:f7:f4:ba:97:41:9e:6c:a5:5b:9c:
         41:f4:96:01:4a:6f:0e:e2:c7:47:66:ca:19:80:f5:ca:10:6d:
         ea:86:85:14:2b:2e:a4:83:40:89:64:d6:e0:09:15:5b:71:55:
         86:d9:fb:28:61:cb:4c:1e:46:eb:4a:8d:9b:f2:3c:7a:ff:3a:
         da:f3:5f:f4:09:fe:30:b4:ae:9e:d5:1d:1b:c4:98:8e:f8:6d:
         5b:fe:8d:f9:1b:bb:f5:8f:b8:d8:95:c3:07:b6:10:a6:b7:10:
         4b:13:8d:73:8f:a0:da:2e:f4:90:12:0a:84:a3:46:c3:d8:58:
         76:25:c0:9a:9f:64:ba:46:99:9f:31:9f:e8:70:e5:5f:7d:55:
         85:e4:21:cd:7b:ee:25:80:95:f7:5f:70:df:3f:6b:dd:f1:a8:
         28:eb:86:61:b4:6b:d9:f6:15:e3:d1:f5:b3:01:06:a8:12:87:
         c2:52:e1:4b:03:c9:c5:0d:bc:44:88:51:5b:0d:3d:cc:3a:f6:
         c2:16:6b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:26:30 2026 by rpki-client