Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
File:                     V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft (raw, json)
Hash identifier:          GS+FzaXpVmBxpAEid9eeAkhtdqqmz50YCHAjBmyD/n8=
Subject key identifier:   7D:19:7B:9F:88:D8:FB:EB:42:75:63:96:1D:35:58:6D:5C:35:04:4C
Authority key identifier: 57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D
Certificate issuer:       /CN=5797245d78078985c147dccbe0ec6d168dd9982d
Certificate serial:       019D9AE2B203E5E305A24026625DA22F7950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
Manifest number:          15AD
Signing time:             Fri 17 Apr 2026 10:00:41 +0000
Manifest this update:     Fri 17 Apr 2026 10:00:41 +0000
Manifest next update:     Sat 18 Apr 2026 10:00:41 +0000
Files and hashes:         1: S-Zk0ObYtJMIz656nLDAOtkUtx8.roa (hash: +uIO+SHw3q58WAdHwKwHZ+9+iLe/2WT3m6O2zlQ0zeI=)
                          2: V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl (hash: iJMowu+oIhJhymOtvhW17Kk04AjGC6hVWbh0Mymy0jM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e2:b2:03:e5:e3:05:a2:40:26:62:5d:a2:2f:79:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5797245d78078985c147dccbe0ec6d168dd9982d
        Validity
            Not Before: Apr 17 10:00:41 2026 GMT
            Not After : Apr 18 10:00:41 2026 GMT
        Subject: CN=7d197b9f88d8fbeb427563961d35586d5c35044c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:70:7c:45:1a:b6:9d:20:94:28:56:d7:86:a0:
                    f8:1f:1b:d6:f1:10:c4:01:b6:cf:7c:a8:40:53:9d:
                    c3:68:34:e8:6a:32:e5:83:04:cc:3d:a6:f8:cb:cb:
                    45:af:d0:c6:cf:1a:ed:92:55:85:70:fc:42:6a:7e:
                    22:e4:9c:15:8d:9e:13:ab:cb:d9:40:59:d6:a0:ad:
                    4a:25:3f:ff:19:dd:b3:65:19:79:51:42:cc:01:9d:
                    ed:9f:ac:2c:f7:b4:a3:2e:5b:ae:c0:97:33:c2:77:
                    a8:fb:48:8c:14:8d:42:ef:dc:e5:36:fc:1b:14:5f:
                    24:ef:f2:18:4d:ad:7c:0f:26:07:9b:e8:58:98:b4:
                    71:f2:9c:40:05:26:13:5b:5b:77:d1:e5:0b:15:9b:
                    ff:f5:6c:ba:08:90:1f:fe:27:6b:f9:3d:9e:4e:a8:
                    32:72:5a:8f:a2:93:b3:02:07:db:2b:4f:8d:f1:86:
                    2b:c4:a1:6f:65:f8:00:12:ec:c0:85:bb:3d:b7:c2:
                    c1:5d:f2:f8:c0:93:6b:4c:58:a7:4b:24:76:ca:5d:
                    d5:c1:ef:ae:11:c7:2a:bd:21:7f:b8:46:44:e3:c3:
                    1e:71:d3:0e:48:92:79:dd:a4:02:d5:3d:15:5e:f0:
                    e6:b1:2b:c3:51:1b:50:35:ed:69:98:a7:7e:5d:4e:
                    f7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:19:7B:9F:88:D8:FB:EB:42:75:63:96:1D:35:58:6D:5C:35:04:4C
            X509v3 Authority Key Identifier:
                keyid:57:97:24:5D:78:07:89:85:C1:47:DC:CB:E0:EC:6D:16:8D:D9:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/111579-ae19-4251-9785-73e38cce1383/1/V5ckXXgHiYXBR9zL4OxtFo3ZmC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d6:93:5f:9d:1b:43:90:2a:01:1f:35:77:73:95:ae:4e:bc:
         e6:0c:7c:89:7e:9a:ba:a7:f9:e8:65:57:29:8e:c2:55:c6:4a:
         fc:f0:1c:68:ad:dd:e4:30:be:17:bf:09:85:ca:9b:7a:37:47:
         af:e4:f1:96:39:26:27:35:22:fe:cf:84:73:c6:8d:f5:bf:1c:
         74:7b:07:52:4a:a7:f6:d0:bb:d1:31:d3:4d:d3:b4:fd:0f:ec:
         08:8d:87:38:95:4e:75:e9:9a:cb:37:51:96:9a:39:94:48:18:
         50:e3:46:16:39:66:dd:37:86:65:66:c4:e4:47:83:d7:33:37:
         ee:ea:5a:6b:ca:a2:86:39:70:6c:b8:ce:6f:eb:6b:b5:1b:2f:
         a7:02:ba:b5:b3:18:40:d5:56:8e:b7:df:d7:6f:a9:aa:79:99:
         27:14:7b:ab:70:62:73:e8:33:b9:e5:03:1b:b8:69:40:3b:27:
         bc:8f:44:87:aa:ee:22:89:a0:4b:76:58:66:dc:8a:a2:eb:3c:
         3b:7b:98:d6:d1:bb:13:7b:70:c4:fa:aa:20:bf:ea:2f:08:ae:
         94:61:a9:e2:f5:cd:20:b4:4a:85:48:fc:98:01:f2:0a:98:eb:
         33:75:40:52:50:df:f8:99:be:e8:d0:23:d7:70:c9:01:07:a4:
         32:0d:91:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:11:17 2026 by rpki-client