Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
File:                     R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft (raw, json)
Hash identifier:          07m96kKc1+GZI0gZEKOd+t7dIR22GjKUXz3B082uvpk=
Subject key identifier:   8F:8A:43:F0:92:C5:E8:BF:E8:73:CB:E3:BA:E2:07:42:BC:DD:19:78
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Certificate issuer:       /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial:       019D99D0CED942FD26D0289C27B39148E849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
Manifest number:          130E
Signing time:             Fri 17 Apr 2026 05:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:31 +0000
Files and hashes:         1: DpOMCYeoEFCfPd4BCOC7ze9jGAQ.roa (hash: OOgXzfysjVkL+7heZlt7KwaUVEvk1p9KU0fRwZotWCk=)
                          2: R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl (hash: TDD9Zo0oL0CSBJgwbZutkLPYBVkAVYyIaGpScfpVtsY=)
                          3: X_ToRWHY2cWSKfb50-DFaa8o0oM.roa (hash: SzgSGTl4m6DpdjK/TPbLIKkkCLRq126cbU6uLGRTydk=)
                          4: XuSlumrwrkZbRH5BoN1dVcCYWOY.roa (hash: VIFbEGJSRhE0l9Itky/zbl7aHo5M6a4eOekzZMGZzxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:ce:d9:42:fd:26:d0:28:9c:27:b3:91:48:e8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
        Validity
            Not Before: Apr 17 05:01:31 2026 GMT
            Not After : Apr 18 05:01:31 2026 GMT
        Subject: CN=8f8a43f092c5e8bfe873cbe3bae20742bcdd1978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:c6:fb:fb:b1:91:c7:be:ea:2a:53:8c:7f:
                    49:fe:44:a1:d5:cd:83:ce:3d:db:c1:50:c0:6a:28:
                    fb:dd:e8:05:ff:30:59:fb:99:a9:d2:d4:a7:ba:a9:
                    83:1a:5e:ea:ea:47:e2:29:2b:be:6e:ef:7b:4a:31:
                    be:2d:a6:96:9c:c6:f7:25:43:6a:6d:3d:34:25:d1:
                    26:89:9f:4c:f9:c5:03:af:ad:b4:39:d4:be:44:0a:
                    9d:1d:f6:0e:b1:f2:26:4d:9f:14:8b:3e:c0:f3:65:
                    5d:d7:53:db:a5:cf:53:96:b3:e5:eb:8d:8a:ff:c7:
                    fe:79:56:af:f9:08:43:40:51:08:f1:12:ca:dc:f8:
                    32:f2:dc:f2:cc:53:70:08:6c:10:7d:27:8f:fe:21:
                    e9:06:6c:a8:0c:82:9f:df:4d:57:9b:e2:e1:70:ee:
                    c0:3a:b8:45:32:12:eb:ae:5f:f8:dc:0a:5b:c2:26:
                    5c:c6:d9:c4:fb:a0:c6:9d:f1:b5:27:39:0e:9a:f9:
                    02:df:92:34:76:ad:38:54:9f:43:0d:88:b9:87:07:
                    ac:66:2f:c1:ec:ed:cc:bc:34:bc:fc:5e:a6:98:52:
                    ca:7c:e8:08:39:9e:1d:27:09:2f:9b:08:30:eb:19:
                    0c:df:63:95:53:f0:9e:ac:c5:71:18:95:bd:cd:44:
                    db:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8A:43:F0:92:C5:E8:BF:E8:73:CB:E3:BA:E2:07:42:BC:DD:19:78
            X509v3 Authority Key Identifier:
                keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:5e:0b:2a:a8:55:6d:48:14:39:48:41:4b:05:80:e7:a1:b5:
         e0:f0:e5:cc:3c:73:58:bf:a3:3f:84:05:a8:73:ed:8a:dd:99:
         c2:3b:ea:88:d1:cf:de:23:c6:46:c3:65:4f:ac:32:e3:95:83:
         a3:c0:14:5e:40:63:ff:94:fb:13:38:6b:73:e8:69:90:da:19:
         1f:eb:2d:ae:a8:28:d7:3a:c3:0c:3e:c9:a5:60:c3:53:be:2d:
         93:d4:e9:ca:b1:75:ef:ca:3b:37:5a:f7:27:2a:80:42:dc:81:
         33:c2:60:81:bd:0c:8a:50:6d:a5:8c:62:31:08:f7:e6:2a:57:
         50:97:ad:21:61:19:22:3c:a8:3e:49:b9:06:8a:4a:eb:ae:c7:
         79:b7:f1:c2:83:01:39:70:6d:6d:47:82:b0:3f:71:e7:f0:2c:
         4b:32:7d:e6:b4:35:0a:b1:77:dd:a4:05:ca:ae:91:a1:f6:4b:
         15:e7:ec:b3:f6:9c:ef:31:1a:3d:c6:d5:fd:c8:16:da:15:01:
         1c:01:75:77:9b:1e:5d:15:f1:fa:11:47:bc:d7:f5:00:b7:13:
         eb:87:0f:76:63:2e:43:a0:29:a0:16:0b:8b:67:7a:08:95:4e:
         97:3d:b9:75:5d:52:1a:20:33:e3:28:00:86:29:8a:b8:86:b2:
         c7:cb:13:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:57 2026 by rpki-client