Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
File:                     5PFY7_xrOIKiWQweaQasoQjhjsI.mft (raw, json)
Hash identifier:          swZ8nO8jNxVIcvySkLTVflsywxESTI3azOAa6XDMBWM=
Subject key identifier:   09:9B:87:34:EA:1C:F0:57:8F:F2:26:2F:14:B4:73:F7:8B:50:4A:01
Authority key identifier: E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2
Certificate issuer:       /CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
Certificate serial:       019CB05AEA3F5E88CDE937628A6D50BAD85A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
Manifest number:          0E50
Signing time:             Mon 02 Mar 2026 21:01:14 +0000
Manifest this update:     Mon 02 Mar 2026 21:01:14 +0000
Manifest next update:     Tue 03 Mar 2026 21:01:14 +0000
Files and hashes:         1: 5PFY7_xrOIKiWQweaQasoQjhjsI.crl (hash: 0d3UhQqvV6xUwR0vYxjWrwa0lHLn+DWlcTjKAEI2XLc=)
                          2: FWnshijOb2oWucJC3yydoFuicl8.roa (hash: 2lTRHLJOIG5W8kGboAw1P9Vclv6xoLbOBwTEH/U1Buo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:05:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:b0:5a:ea:3f:5e:88:cd:e9:37:62:8a:6d:50:ba:d8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4f158effc6b3882a2590c1e6906aca108e18ec2
        Validity
            Not Before: Mar  2 21:01:14 2026 GMT
            Not After : Mar  3 21:01:14 2026 GMT
        Subject: CN=099b8734ea1cf0578ff2262f14b473f78b504a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1c:b2:d0:b9:75:d4:d0:b4:77:54:dd:10:8c:
                    f6:ab:ef:33:cd:b9:e1:5a:fb:32:e7:14:51:2a:92:
                    7b:69:c1:6b:0c:fb:fb:89:ff:99:27:1d:f3:b2:23:
                    e3:b0:08:95:99:af:54:a1:d3:96:c9:06:3d:af:d3:
                    4f:90:47:77:f6:46:bb:95:dd:c2:b4:48:95:e3:5a:
                    02:25:a9:e7:8d:27:89:f1:5f:33:2b:9b:94:67:60:
                    6a:61:5a:f0:71:28:0e:2b:99:32:44:69:06:db:05:
                    f9:05:85:3d:27:76:15:71:b4:f5:44:3a:45:e3:4d:
                    15:20:7a:db:1a:f4:a5:d4:b6:c7:2b:c3:bb:f2:06:
                    cd:91:05:f6:44:45:6c:04:04:2b:ee:34:2a:84:63:
                    9f:aa:68:95:40:de:8e:eb:a1:cf:f6:84:18:33:9f:
                    6c:ac:74:1d:7e:7d:86:10:96:05:4b:d8:15:b3:5b:
                    6f:8d:58:d8:41:c3:f3:4b:2c:fa:40:cd:e1:36:8b:
                    e2:4b:df:15:17:5b:fd:75:d4:2e:02:34:28:5a:54:
                    ac:53:6d:c1:e8:dc:a3:ed:66:61:55:09:7f:1f:c0:
                    f0:9b:03:1d:47:49:cd:36:92:98:77:be:2d:85:2c:
                    6a:a6:a9:93:34:92:67:88:f1:4f:84:8b:b7:8c:3a:
                    9e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9B:87:34:EA:1C:F0:57:8F:F2:26:2F:14:B4:73:F7:8B:50:4A:01
            X509v3 Authority Key Identifier:
                keyid:E4:F1:58:EF:FC:6B:38:82:A2:59:0C:1E:69:06:AC:A1:08:E1:8E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PFY7_xrOIKiWQweaQasoQjhjsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/83c00e-f414-489d-9470-c693249651d5/1/5PFY7_xrOIKiWQweaQasoQjhjsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:46:1f:d5:6d:06:4d:e5:53:9d:e1:ea:e2:5e:39:9b:74:c2:
         f4:f3:72:3a:fd:02:dc:03:85:c8:cf:ac:67:94:25:18:f3:9d:
         04:83:d0:aa:6b:a6:16:db:5b:18:0c:07:fb:88:97:c9:c4:0e:
         47:c7:8d:06:ed:35:e6:10:1d:aa:af:a1:6f:da:19:a5:f1:66:
         fc:ee:43:3e:bd:1e:41:de:8f:c3:39:3a:9f:15:98:68:2f:4d:
         50:a0:53:75:38:86:81:4b:40:d3:c3:36:d7:65:b7:6e:29:7a:
         d3:38:30:31:40:05:ec:b9:b9:68:3c:6f:c5:4e:40:2b:04:00:
         5e:94:c5:31:c7:28:4a:68:34:d0:4d:41:56:24:a1:93:78:e1:
         e0:96:35:63:a9:0d:2d:b3:6a:56:5f:f1:00:4f:94:1a:f3:27:
         88:9e:bf:dc:8a:6e:cb:21:29:3f:71:17:9b:5b:ba:8b:9a:2f:
         8b:7a:17:17:64:0e:a0:da:72:80:42:62:83:83:bc:7b:fe:b5:
         4e:93:05:ef:57:78:4f:18:78:56:19:d8:e0:93:2f:5f:8c:b6:
         c6:7d:e3:a8:ed:00:8c:41:39:98:1e:7f:4a:4a:ad:04:e1:cb:
         f5:c2:f8:2d:ef:d3:14:71:5a:86:18:4e:22:49:63:0c:f8:29:
         48:a0:5e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 00:06:33 2026 by rpki-client