Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
File:                     5oClYQES3yA5h_MvDl4VrTXnENI.mft (raw, json)
Hash identifier:          lBHH4j1c3RU2UDYlNyd15sHa2VQf49erLBZnLX2+0a8=
Subject key identifier:   B3:89:B0:3B:E6:37:67:DD:70:18:DF:12:F1:21:5D:DF:4B:AC:97:60
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Certificate issuer:       /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial:       019D9BF5CF71679A641292D687024512B1E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
Manifest number:          089D
Signing time:             Fri 17 Apr 2026 15:01:10 +0000
Manifest this update:     Fri 17 Apr 2026 15:01:10 +0000
Manifest next update:     Sat 18 Apr 2026 15:01:10 +0000
Files and hashes:         1: 5oClYQES3yA5h_MvDl4VrTXnENI.crl (hash: DRBuAphHQQiTFFxXPra5wZU9kYr3Y/IQRm3hHCMX4y8=)
                          2: HALUJ8HMBpoHzskaJCYqZgHex5U.roa (hash: cOZhNR9S9Fv/MNqYDNuqDaMlzhNl0rBxxMK0bBBrUJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:f5:cf:71:67:9a:64:12:92:d6:87:02:45:12:b1:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
        Validity
            Not Before: Apr 17 15:01:10 2026 GMT
            Not After : Apr 18 15:01:10 2026 GMT
        Subject: CN=b389b03be63767dd7018df12f1215ddf4bac9760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0c:e8:ba:b7:c6:bb:41:7d:81:66:14:ae:53:
                    b5:85:b8:8a:b5:d8:ab:18:24:24:d4:01:0e:ae:8e:
                    90:8a:b8:76:8a:02:1b:fb:58:22:18:d0:53:d9:79:
                    11:1a:d5:ac:26:a3:3c:57:ad:e5:22:a6:7d:5d:a8:
                    28:f0:a6:db:c8:28:93:a3:17:72:6a:cf:dc:ee:9a:
                    0c:4a:63:ad:2b:c9:a8:a6:96:f4:19:0f:a6:73:60:
                    58:cb:2b:a2:c1:bc:bf:fc:8e:44:b9:31:dd:cf:10:
                    4b:88:f0:a7:3b:9d:f6:eb:c4:dc:fa:0b:9c:c0:22:
                    a0:3e:f1:89:9c:fa:ee:66:ac:9b:47:7b:34:00:7c:
                    c0:cf:24:54:17:8e:78:d0:20:72:7e:8b:82:75:0a:
                    d6:88:a5:77:6b:32:e0:2f:1f:64:87:11:5f:41:9d:
                    01:f9:d0:4d:e0:87:a2:8b:e4:94:5d:48:49:3b:5f:
                    f5:ef:6a:3f:b4:45:08:22:ee:dd:91:24:58:60:db:
                    39:ac:23:8e:7b:4f:a6:4a:01:51:91:fb:65:ae:d2:
                    4f:99:0c:ba:15:05:5d:7b:3d:d2:1f:d0:18:2d:e6:
                    e5:5d:d7:9d:2e:1a:a9:59:20:c7:b9:ec:5d:af:83:
                    30:b9:5f:12:d5:d5:d6:e1:89:b0:d5:da:42:a4:64:
                    98:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:89:B0:3B:E6:37:67:DD:70:18:DF:12:F1:21:5D:DF:4B:AC:97:60
            X509v3 Authority Key Identifier:
                keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:41:0f:d7:82:3a:95:ea:53:23:cb:da:5a:97:5c:6f:e8:14:
         66:6c:27:ef:25:d1:c2:7c:fe:a2:da:0b:31:8d:7c:b1:24:80:
         6d:e1:20:b2:7d:3c:7d:62:1b:82:fe:1c:e0:2c:d0:e9:b2:33:
         5a:20:a4:5e:76:bf:61:10:9c:37:57:1e:78:dd:6a:43:06:56:
         db:5a:6f:77:3a:ad:a8:e6:f4:8f:cf:fe:33:c5:61:06:9f:eb:
         6f:d0:fc:51:7b:52:eb:65:cf:6b:e8:4a:3f:81:26:38:c2:69:
         10:f1:8a:d2:28:f1:52:f9:4b:87:01:16:01:2f:e5:8b:bd:78:
         37:bf:8b:ff:9f:8a:72:c1:b5:4a:75:7e:70:79:d8:b0:de:c5:
         b0:5b:c6:ab:7e:8b:78:0e:f4:cd:ba:36:18:2d:30:a7:a5:5a:
         3b:4f:92:9b:53:4d:51:12:fe:b5:a5:18:5c:75:de:99:1c:32:
         a8:b6:5e:7f:25:71:40:f0:16:da:a3:a3:dd:6c:8c:b4:d4:1d:
         b9:56:9d:20:52:87:9e:fb:72:4c:37:e0:98:25:d2:de:26:b2:
         48:43:5c:98:7a:20:85:c2:e5:ae:28:c6:30:7c:f0:01:b6:83:
         cc:b8:e9:85:62:eb:ee:8d:5b:a4:90:29:fd:2b:84:6b:da:41:
         6a:27:5b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:07:22 2026 by rpki-client