Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
File:                     5gSc-H3Y8f1MgCS1psnqlPF7b70.mft (raw, json)
Hash identifier:          N/aNh69phwiMjOTzq+BcMRlc1ncQAnnsQQmk2W8/mG4=
Subject key identifier:   4F:58:F7:11:EB:A0:E9:46:73:B9:DE:58:B9:F6:12:0D:FF:A7:78:F1
Authority key identifier: E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD
Certificate issuer:       /CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
Certificate serial:       019D992B222E9B52740BEA8ADDE172C4F384
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
Manifest number:          1855
Signing time:             Fri 17 Apr 2026 02:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:33 +0000
Files and hashes:         1: 5gSc-H3Y8f1MgCS1psnqlPF7b70.crl (hash: TxGiqMpYxYljwWeQdev7rNRYA7EtVsMz4ygTp/wsM3c=)
                          2: t2FHnnEHf_6TSghs3_z2wcfp-bA.roa (hash: 91+RIg0AqSl330cDSTT6P3HSGmorFbL8LnE7d4GsH5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:22:2e:9b:52:74:0b:ea:8a:dd:e1:72:c4:f3:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6049cf87dd8f1fd4c8024b5a6c9ea94f17b6fbd
        Validity
            Not Before: Apr 17 02:00:33 2026 GMT
            Not After : Apr 18 02:00:33 2026 GMT
        Subject: CN=4f58f711eba0e94673b9de58b9f6120dffa778f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:db:69:e8:72:e5:9f:08:27:01:13:3e:ff:9a:
                    c5:0a:0d:62:0b:41:11:43:ba:36:0e:9e:08:24:e3:
                    6b:a3:b0:14:df:79:5e:ef:49:29:2f:31:9c:7b:97:
                    fb:ba:4b:e0:33:4d:d8:e6:40:18:99:35:c3:e5:b9:
                    cb:36:27:f1:da:c4:69:75:09:2d:ea:fe:87:81:cf:
                    35:db:cf:ad:64:9e:50:18:2c:9f:fe:05:3a:a8:36:
                    ea:fd:51:0a:dd:8f:02:c9:95:77:8e:c2:fc:e7:3d:
                    c9:e9:5d:5e:5c:93:48:59:b9:70:7a:30:8f:c8:0e:
                    d7:52:8f:17:58:f2:8f:35:85:f2:56:02:07:48:2f:
                    8a:e2:f3:22:1e:e4:36:a2:cc:59:9d:ae:8a:ad:23:
                    9b:20:b7:53:24:f7:e4:7e:27:5b:e6:cc:bb:97:23:
                    b7:1c:e1:45:19:51:b7:8b:af:13:60:e7:5a:3f:ab:
                    e6:3a:b1:ab:a7:b6:77:fe:ab:8d:c2:fd:ee:f0:82:
                    83:28:25:b5:72:62:bd:9a:77:57:16:66:75:8e:58:
                    bf:29:ef:7b:29:da:c0:57:ad:ca:d0:0e:0b:ff:92:
                    65:62:96:1b:49:dd:71:a7:11:9f:04:62:c1:09:51:
                    34:13:dc:82:71:b1:43:dc:57:cf:51:e2:60:e5:59:
                    84:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:58:F7:11:EB:A0:E9:46:73:B9:DE:58:B9:F6:12:0D:FF:A7:78:F1
            X509v3 Authority Key Identifier:
                keyid:E6:04:9C:F8:7D:D8:F1:FD:4C:80:24:B5:A6:C9:EA:94:F1:7B:6F:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gSc-H3Y8f1MgCS1psnqlPF7b70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/060cea-e920-40de-90da-8d49ebcae9b3/1/5gSc-H3Y8f1MgCS1psnqlPF7b70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:d3:c2:a4:85:b6:34:0c:0c:42:16:ec:89:c4:4b:6d:1c:67:
         4f:23:8c:15:37:e9:19:84:89:41:b1:6e:44:04:03:b4:6b:40:
         e3:17:5c:5d:b7:e3:66:1e:97:1c:c6:8d:c4:44:fe:ef:c1:f6:
         90:57:3c:ff:e9:94:a7:e2:52:28:82:ca:23:29:91:1b:d0:d3:
         0d:d0:64:78:fd:21:b1:fc:8e:97:ed:c7:df:29:8b:b7:8b:2d:
         8c:9b:69:5d:5c:27:98:ce:17:6b:5a:0a:70:c3:09:c5:4d:c0:
         4b:aa:c5:1d:f6:75:d4:2f:50:f1:3c:7c:6b:ce:d3:d8:e0:a2:
         ce:ec:63:66:76:62:03:33:0f:ae:fd:0f:37:e1:21:d0:f9:b7:
         a4:f9:b9:5b:8a:c6:84:38:d2:9d:d8:96:18:5f:6a:f1:b0:f5:
         78:89:0f:c0:d3:06:41:1e:09:8b:7a:37:83:5b:43:a4:ba:ae:
         e5:b8:63:31:61:33:e8:fe:be:4b:c7:bc:8f:58:85:be:36:6a:
         8a:04:a3:85:54:89:88:cf:91:94:a4:d3:1f:68:20:e8:ab:97:
         a5:7e:31:e3:a7:bd:ad:38:dc:a6:13:c5:2c:53:45:63:43:7f:
         9d:e1:bf:a2:e6:60:25:17:d3:44:b0:e8:56:d9:d1:ab:d2:3c:
         86:f8:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:41:17 2026 by rpki-client