Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
File:                     5KVOQra3iNjki0iEQt2RiySFrDU.mft (raw, json)
Hash identifier:          PMs4pQBYdTg2I4mPkD9T93L7vDxzpUNk3mpuD1oeJ5U=
Subject key identifier:   8F:79:EC:F9:2F:AF:BE:4B:6E:11:36:30:7B:29:2B:D3:B5:02:FB:54
Authority key identifier: E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35
Certificate issuer:       /CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
Certificate serial:       019D99620703B7B7769E99F694309380F00E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
Manifest number:          0308
Signing time:             Fri 17 Apr 2026 03:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:31 +0000
Files and hashes:         1: 5KVOQra3iNjki0iEQt2RiySFrDU.crl (hash: KSAthpp2xQOOyleBVNCN73DpylISComA6BtayoG8eqs=)
                          2: v2rVsh0dCI0ULQlOGc8HMoLg5uo.roa (hash: 6uedt+3d7jJXVdMAyo0QQWrH7s27rp7WpYCrWtYVZzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:07:03:b7:b7:76:9e:99:f6:94:30:93:80:f0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a54e42b6b788d8e48b488442dd918b2485ac35
        Validity
            Not Before: Apr 17 03:00:31 2026 GMT
            Not After : Apr 18 03:00:31 2026 GMT
        Subject: CN=8f79ecf92fafbe4b6e1136307b292bd3b502fb54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:02:1a:83:5a:40:34:52:02:86:8c:d3:62:95:
                    ba:e3:a5:5c:8f:d9:fc:a1:e1:6d:76:43:36:d5:eb:
                    c3:bb:5a:19:8f:c6:21:a0:76:64:d2:4b:67:31:7e:
                    c9:df:cd:28:af:c9:39:24:f9:a9:d6:21:40:80:59:
                    59:52:2b:ed:6e:97:01:a0:0a:94:4f:55:7a:6c:e7:
                    44:6d:bd:a1:dc:04:04:a8:f3:e8:8b:2b:c4:1a:b6:
                    9d:9e:16:55:48:d6:d3:ef:84:fb:e3:bf:d4:e0:26:
                    60:f4:61:74:c5:f6:ea:12:c0:b0:fb:d9:bf:b7:6a:
                    83:c7:74:0f:01:4d:3d:e4:79:65:b1:48:c2:f5:9d:
                    a5:a9:c4:6a:ef:5b:a4:7e:db:d2:ae:2a:47:2b:92:
                    46:8b:3c:09:61:45:bc:87:db:58:57:60:c1:90:ed:
                    26:2a:de:2a:f1:37:aa:05:95:af:39:3f:69:ab:8b:
                    69:0c:55:86:06:e5:6d:90:61:00:9d:26:3b:e7:c6:
                    1c:2d:88:e0:1c:13:4c:fc:c4:5c:a6:30:f9:c3:3a:
                    75:9b:cd:ff:a3:b6:3b:42:c7:22:2e:df:32:42:31:
                    e1:8a:d7:0a:69:91:45:7c:03:f0:d4:7c:d4:0a:99:
                    fd:da:cb:97:96:af:cc:c0:99:87:9e:96:85:ec:e4:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:79:EC:F9:2F:AF:BE:4B:6E:11:36:30:7B:29:2B:D3:B5:02:FB:54
            X509v3 Authority Key Identifier:
                keyid:E4:A5:4E:42:B6:B7:88:D8:E4:8B:48:84:42:DD:91:8B:24:85:AC:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KVOQra3iNjki0iEQt2RiySFrDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0a567c-af6b-461a-a7a0-dcfbc28f4731/1/5KVOQra3iNjki0iEQt2RiySFrDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:55:52:ce:4d:8d:d0:28:cd:02:2a:25:1a:f5:e0:ae:35:38:
         21:c1:0c:45:84:22:cb:ae:08:08:cf:5d:ba:d5:26:5c:24:c1:
         f8:d6:8c:5b:71:99:f0:2c:17:52:a5:80:72:cf:e7:1c:d4:68:
         ba:24:0a:4d:cd:d7:a5:fe:e6:96:c4:34:2b:9f:00:36:f6:06:
         a3:a1:80:19:fb:2d:36:8d:6f:39:47:53:26:db:57:cb:11:68:
         40:6b:40:1c:18:e0:2a:8c:a1:e5:0c:a8:a2:ed:ec:de:80:c8:
         d5:f6:63:be:60:0f:27:42:40:9b:d6:ad:69:e7:a1:c9:63:d3:
         fe:27:93:62:65:38:a8:93:8d:ac:0c:4b:99:a8:e0:de:c1:d7:
         ff:65:d6:37:71:cd:cd:57:6f:eb:03:2a:0b:10:62:9f:ab:8c:
         87:c5:01:ca:46:39:eb:d2:3f:54:8e:29:ac:d1:1a:b9:ef:f6:
         c6:25:67:d0:20:93:05:1c:ed:b7:d5:5b:19:d7:dd:64:5f:ef:
         98:c5:a7:49:71:4d:c6:37:1b:d3:3f:a5:d4:b1:10:b3:0a:5d:
         c4:05:d4:41:dd:25:e6:f3:3c:6c:51:6b:8f:b3:59:06:44:fa:
         32:bf:b5:8c:fd:b9:01:14:68:9d:f3:13:b8:ce:35:97:f6:c1:
         52:86:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:46 2026 by rpki-client