Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
File:                     5jGwgNTqb9Bham5wHHyBXW_4fAA.mft (raw, json)
Hash identifier:          l2bKpf6W0O1o0QqByMUAeCzsz/mUmuhetoMZbYxEgho=
Subject key identifier:   91:71:29:8F:58:CF:65:88:B4:4C:6F:2E:49:32:F6:ED:F2:CE:4F:05
Authority key identifier: E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00
Certificate issuer:       /CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
Certificate serial:       019D98501E4F1E37D3A1B4E3A75345D75A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
Manifest number:          0A8F
Signing time:             Thu 16 Apr 2026 22:01:20 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:20 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:20 +0000
Files and hashes:         1: 3Uu6-Km0t7pl2GLMEbSI9_TLxag.roa (hash: hXLyK65nAY5+Ut+o0gb/BjxofeYx4PkadbFG04BKn8s=)
                          2: 4RhMZahyPAwo146TEpPKu9ePT2I.roa (hash: tBGvizwGCjR2IcH4F8OLjMl+yMIqhcGRdbR2C5pIbnk=)
                          3: 5jGwgNTqb9Bham5wHHyBXW_4fAA.crl (hash: x9GHhVqEx/CVAO9yka9punr0/BCIhggWSYMCFxs7d70=)
                          4: H4QLFR4-VWtTH3wvuaow12NPB4c.roa (hash: bdQlsc3BPSHO6Zn9QaadsNsV4OnEPV5+i5GaKzval08=)
                          5: VqQ8LXtIPe1fQZeq9wCKCKkt2vk.roa (hash: ZjsRHcqnbmBi1pKtOmtj/GMa3B6D/+8G+2zRtMncp6A=)
                          6: p3_p0oefeCWIGWl--B6scwMOl68.roa (hash: TzUMNS4PCBQmbQd3CE8J49kK3X/KRKK4UzkYkcKRrPc=)
                          7: x1IDat6YDBdzEhpue2RnoEodHRk.roa (hash: GNbqBnSl6BYmQm/dEuII/J8pPs8l3TWXFnBRJpdqWP0=)
                          8: zPofNoaI2RS9IpHftjHCFMeYgVg.roa (hash: GrlWnZ81qO00EP6m7P5v1VXEnw8zBrYaQ+SSPFWD5L0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:1e:4f:1e:37:d3:a1:b4:e3:a7:53:45:d7:5a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e631b080d4ea6fd0616a6e701c7c815d6ff87c00
        Validity
            Not Before: Apr 16 22:01:20 2026 GMT
            Not After : Apr 17 22:01:20 2026 GMT
        Subject: CN=9171298f58cf6588b44c6f2e4932f6edf2ce4f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:cc:9a:1c:83:c1:63:0c:8b:0f:c2:52:fa:6c:
                    22:2c:c5:a7:ff:ea:ea:38:83:d9:79:fb:80:5a:dd:
                    12:8f:9b:cd:c6:16:26:62:ed:25:12:98:0d:48:10:
                    b1:1d:0c:c1:35:2d:9c:3a:1f:44:ea:72:99:8a:5d:
                    96:af:1b:8b:67:5c:40:e8:08:6a:36:0e:bf:aa:16:
                    a0:7a:4c:42:91:b9:5f:1d:3b:bb:e9:a8:b9:a3:c2:
                    f4:ee:85:64:f1:41:66:97:d2:0f:21:4e:72:63:f1:
                    34:66:48:4d:42:70:61:d2:05:9d:64:ec:63:c9:83:
                    02:ac:81:4b:dd:25:57:92:83:1b:2f:04:85:7f:a7:
                    99:66:3e:de:54:5f:71:de:cd:3d:ca:3a:6c:2e:05:
                    8a:c7:51:44:4e:14:55:05:2f:4a:1b:8d:9b:5b:7a:
                    38:07:69:eb:5a:e8:13:48:d9:44:10:85:5e:43:86:
                    f8:df:54:b4:eb:6e:e6:97:87:7c:9b:de:b2:40:c5:
                    74:9e:b5:11:64:d2:14:75:f6:fc:04:43:97:f1:58:
                    20:ac:58:49:1c:db:00:d8:0b:56:86:5c:de:69:f5:
                    b8:f9:b6:95:69:38:25:2d:17:ff:bb:46:52:d6:dc:
                    e8:0e:da:0e:19:15:95:53:97:9d:1f:18:f2:e9:ca:
                    f3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:71:29:8F:58:CF:65:88:B4:4C:6F:2E:49:32:F6:ED:F2:CE:4F:05
            X509v3 Authority Key Identifier:
                keyid:E6:31:B0:80:D4:EA:6F:D0:61:6A:6E:70:1C:7C:81:5D:6F:F8:7C:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jGwgNTqb9Bham5wHHyBXW_4fAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/dcdae6-d695-4266-ba9b-93b3a3696d96/1/5jGwgNTqb9Bham5wHHyBXW_4fAA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:64:bf:4d:7b:4e:05:98:24:12:8b:a5:9e:c8:3f:6e:9a:75:
         c5:96:52:a0:ea:fa:63:e0:a4:6f:d6:22:66:9e:56:5c:5c:37:
         1b:b3:6f:ee:c2:a0:a6:8b:af:7b:61:9b:66:f0:97:f3:ac:3b:
         36:7f:6d:86:b7:85:f3:e3:ed:c2:82:97:79:60:8a:f0:b4:92:
         05:28:94:7d:cf:87:2a:88:70:1b:25:92:54:46:13:fd:f4:55:
         fa:15:18:27:60:d3:45:16:65:96:aa:5b:27:84:d1:31:d6:72:
         e3:8b:61:9e:13:97:2c:84:fc:3d:9e:3d:f4:84:6c:2c:d9:d6:
         29:56:a3:81:97:ca:52:59:db:6f:8a:97:51:df:65:07:f8:d4:
         a3:60:79:7c:2c:2a:7e:ae:ab:f0:ed:fa:c9:57:f7:b2:ab:54:
         fe:1d:46:47:dc:12:25:e1:bc:ae:d8:ab:ab:a9:09:b0:d5:de:
         f4:31:30:4d:bf:52:52:21:e6:94:a5:67:b8:9f:16:1e:5d:cd:
         98:29:6c:ed:aa:53:a6:3e:8b:a6:fd:e7:28:51:72:4e:73:f4:
         56:4e:dc:da:9f:a0:62:55:a8:63:fc:2a:80:69:66:67:36:93:
         4b:cc:f0:6d:94:63:18:3e:88:5d:45:4f:ab:58:fd:3c:6f:de:
         3c:24:b5:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YUB5PHjfTobTjp1NF11oQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzFiMDgwZDRlYTZmZDA2MTZhNmU3MDFjN2M4MTVkNmZm
ODdjMDAwHhcNMjYwNDE2MjIwMTIwWhcNMjYwNDE3MjIwMTIwWjAzMTEwLwYDVQQD
Eyg5MTcxMjk4ZjU4Y2Y2NTg4YjQ0YzZmMmU0OTMyZjZlZGYyY2U0ZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1syaHIPBYwyLD8JS+mwiLMWn/+rq
OIPZefuAWt0Sj5vNxhYmYu0lEpgNSBCxHQzBNS2cOh9E6nKZil2WrxuLZ1xA6Ahq
Ng6/qhagekxCkblfHTu76ai5o8L07oVk8UFml9IPIU5yY/E0ZkhNQnBh0gWdZOxj
yYMCrIFL3SVXkoMbLwSFf6eZZj7eVF9x3s09yjpsLgWKx1FEThRVBS9KG42bW3o4
B2nrWugTSNlEEIVeQ4b431S0627ml4d8m96yQMV0nrURZNIUdfb8BEOX8VggrFhJ
HNsA2AtWhlzeafW4+baVaTglLRf/u0ZS1tzoDtoOGRWVU5edHxjy6crzxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFxKY9Yz2WItExvLkky9u3yzk8FMB8GA1UdIwQY
MBaAFOYxsIDU6m/QYWpucBx8gV1v+HwAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWIt
OTNiM2EzNjk2ZDk2LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9kY2RhZTYtZDY5NS00MjY2LWJhOWItOTNiM2EzNjk2ZDk2
LzEvNWpHd2dOVHFiOUJoYW01d0hIeUJYV180ZkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmS/TXtO
BZgkEoulnsg/bpp1xZZSoOr6Y+Ckb9YiZp5WXFw3G7Nv7sKgpouve2GbZvCX86w7
Nn9threF8+PtwoKXeWCK8LSSBSiUfc+HKohwGyWSVEYT/fRV+hUYJ2DTRRZllqpb
J4TRMdZy44thnhOXLIT8PZ499IRsLNnWKVajgZfKUlnbb4qXUd9lB/jUo2B5fCwq
fq6r8O36yVf3sqtU/h1GR9wSJeG8rtirq6kJsNXe9DEwTb9SUiHmlKVnuJ8WHl3N
mCls7apTpj6Lpv3nKFFyTnP0Vk7c2p+gYlWoY/wqgGlmZzaTS8zwbZRjGD6IXUVP
q1j9PG/ePCS1wQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:09 2026 by rpki-client