Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
File:                     5_X6RuHGsFy_7JdpIQyxUUer4jE.mft (raw, json)
Hash identifier:          LKTtoKuPTBUb9IZlVzP/pt6jBwflKFldZ5zd2wg6nU0=
Subject key identifier:   B0:49:35:66:20:46:EA:96:9B:9C:60:05:C9:F2:54:E5:1A:BB:33:18
Authority key identifier: E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31
Certificate issuer:       /CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
Certificate serial:       019D98F47FBC2416AD54B1749F20E00F6E6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
Manifest number:          184F
Signing time:             Fri 17 Apr 2026 01:00:53 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:53 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:53 +0000
Files and hashes:         1: 5_X6RuHGsFy_7JdpIQyxUUer4jE.crl (hash: C4Klizvt4GE5W9Ho8gP8GQci/GSkNh75uJK5iJACtDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:7f:bc:24:16:ad:54:b1:74:9f:20:e0:0f:6e:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5fa46e1c6b05cbfec9769210cb15147abe231
        Validity
            Not Before: Apr 17 01:00:53 2026 GMT
            Not After : Apr 18 01:00:53 2026 GMT
        Subject: CN=b04935662046ea969b9c6005c9f254e51abb3318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d2:5d:43:35:89:25:cc:92:b4:32:e5:fe:13:
                    9e:2e:8e:d1:6e:f3:64:80:bd:59:fd:33:5f:e0:13:
                    bb:84:65:7c:c6:95:aa:2b:d4:bf:d1:42:b9:fb:f7:
                    3c:52:60:60:f2:ac:2b:a6:08:29:42:23:c2:13:fd:
                    82:f1:89:ac:87:27:31:f9:f1:91:b2:8c:f2:07:fd:
                    c2:91:0a:72:40:4e:3d:2d:e8:c3:d3:09:06:bc:92:
                    e8:69:fe:a5:3d:29:a2:51:0a:e8:5c:13:3e:1f:48:
                    f0:87:71:24:a0:1b:81:05:c8:6e:f7:a4:ee:0b:15:
                    14:e7:80:03:f0:ca:4f:c9:bb:60:fe:c1:0d:96:75:
                    37:ba:d3:3a:6f:6f:9c:d8:06:a8:d3:28:54:af:cb:
                    e5:03:91:61:93:7b:87:68:0c:f7:92:2e:3c:14:3d:
                    6b:57:33:26:53:4f:7f:c8:d3:e8:8a:96:04:c8:94:
                    2b:8d:84:cd:64:3e:75:59:92:7a:c8:6a:24:7b:89:
                    f3:13:fd:a3:a7:87:59:d4:40:18:79:d5:1e:a8:7c:
                    d6:f4:f0:ca:ab:15:1c:e9:a4:67:5a:46:ec:3b:32:
                    e3:cc:b2:a7:5c:e5:9b:fe:09:98:83:07:f7:b5:40:
                    27:46:39:d3:d5:d5:e5:f3:6b:80:da:9b:98:ea:95:
                    f3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:49:35:66:20:46:EA:96:9B:9C:60:05:C9:F2:54:E5:1A:BB:33:18
            X509v3 Authority Key Identifier:
                keyid:E7:F5:FA:46:E1:C6:B0:5C:BF:EC:97:69:21:0C:B1:51:47:AB:E2:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_X6RuHGsFy_7JdpIQyxUUer4jE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/804322-6f8a-44bb-892c-0c417eff4720/1/5_X6RuHGsFy_7JdpIQyxUUer4jE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:d2:45:56:b7:2b:e8:6a:79:75:28:a6:67:cb:3f:49:27:f6:
         de:95:cc:c6:1b:46:82:01:3b:2b:87:1a:44:94:e3:bc:f0:b1:
         02:02:bc:86:a3:54:e5:47:54:0d:4f:c4:b1:f3:6c:f2:ef:47:
         2f:63:dc:7c:26:92:d1:90:c2:58:07:da:51:32:83:17:79:0f:
         b6:2f:de:63:d4:71:64:fa:11:5c:4a:b1:57:88:c2:8c:30:7b:
         a0:b4:e7:c9:35:38:ee:84:93:aa:be:ea:0f:b3:fe:a5:6c:25:
         62:c9:1a:10:f3:94:0e:74:b0:62:37:cb:cc:0c:d2:6b:34:03:
         08:15:7c:9d:4b:6d:4d:ce:68:85:37:af:ef:c0:60:1e:5e:a3:
         7f:21:52:f3:78:a1:bb:d5:9e:2d:9a:a2:dc:87:98:6c:1b:1c:
         a6:65:02:59:d8:97:a2:30:40:36:b9:99:19:24:b7:5c:95:d1:
         c6:8f:ab:6e:05:dd:23:d4:ab:a0:52:95:60:b1:3c:75:9c:48:
         5f:d0:e3:f5:43:1d:ac:64:fb:7e:9e:72:f6:24:0c:52:16:00:
         36:7b:f1:f7:96:d6:d0:75:cd:9c:78:49:c3:b6:e4:82:31:38:
         59:5d:e9:59:f8:5f:98:60:94:8e:80:b8:19:af:40:de:52:3e:
         a9:72:5b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:10:37 2026 by rpki-client