Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
File:                     5ag7QLP019MfszaNr6yhGZpEmJI.mft (raw, json)
Hash identifier:          1E8uz/vzERhY58ZqYV2XdpJy/R7yPSdK6h2PqD2lYQg=
Subject key identifier:   80:4D:08:CD:F3:3B:08:F9:3F:92:C0:69:03:C8:FC:4C:7F:A3:58:EE
Authority key identifier: E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92
Certificate issuer:       /CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
Certificate serial:       019D98502C20BF1269FF127ED344F95837AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
Manifest number:          08D4
Signing time:             Thu 16 Apr 2026 22:01:23 +0000
Manifest this update:     Thu 16 Apr 2026 22:01:23 +0000
Manifest next update:     Fri 17 Apr 2026 22:01:23 +0000
Files and hashes:         1: 5ag7QLP019MfszaNr6yhGZpEmJI.crl (hash: +zrMcS5shp1Qiagf9+3sbRtqfFUbL4RIqlxAbZ0iy2o=)
                          2: 7iwbrMs-D3nTvbzBJVqEDIRq4NI.roa (hash: NOJagwW5QOv6tMhfF2OqRIEJAaU7K3GfJCIh+Pm2aDU=)
                          3: 8AM52ao9n7ZIIGEzs-8YgbfhwPQ.roa (hash: lYKzKODJEnnDJ+KgMuq1pi/8YZEFtPtdvl7coiYrhQE=)
                          4: ABvW-1VqbSDcf540tHClkzOyb9g.roa (hash: tCUTk3vplCMwsVpz24IlWs8R7PpmKQHPhX6E3iUJitU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:50:2c:20:bf:12:69:ff:12:7e:d3:44:f9:58:37:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a83b40b3f4d7d31fb3368dafaca1199a449892
        Validity
            Not Before: Apr 16 22:01:23 2026 GMT
            Not After : Apr 17 22:01:23 2026 GMT
        Subject: CN=804d08cdf33b08f93f92c06903c8fc4c7fa358ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6a:80:47:a6:05:95:3b:a8:9c:90:78:80:a8:
                    98:ea:3a:a7:44:c9:be:97:99:dc:a2:09:ec:54:15:
                    b0:67:a4:8d:f2:34:5e:47:04:d8:7e:68:cd:46:29:
                    2b:55:0c:39:bb:a4:3b:b5:c8:04:a1:ac:00:ae:b5:
                    03:77:3b:5b:9c:70:47:11:7b:ef:eb:b6:cb:0a:d4:
                    00:6f:19:3c:31:fc:ab:62:3e:65:18:a2:9e:56:2d:
                    59:02:ae:4b:c4:73:93:b4:c7:fd:93:9b:65:a5:8c:
                    c4:d4:a3:02:18:fe:00:58:df:f8:01:b0:1b:69:93:
                    a7:34:d5:ca:45:bf:c3:22:f2:03:e4:35:be:ab:1b:
                    88:6d:8e:2b:46:87:fd:a9:9c:de:9b:cc:d5:f4:76:
                    14:f4:1a:98:49:d5:52:97:f2:e2:ae:ab:89:b4:30:
                    e0:2d:52:2b:7e:50:18:91:34:39:35:15:3d:9b:87:
                    38:3a:0e:ca:42:ea:6f:03:90:27:bf:44:88:4a:91:
                    0d:68:f2:1f:6e:18:07:f4:6d:8c:b1:bc:0b:a3:16:
                    17:21:b2:10:63:cb:10:cd:2c:39:b4:23:ae:c6:4d:
                    3d:db:ee:1a:ae:3e:6d:a1:f3:cd:1d:d7:10:aa:b2:
                    6e:d3:4d:19:87:06:88:d7:54:23:77:f8:f8:7e:a2:
                    b7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4D:08:CD:F3:3B:08:F9:3F:92:C0:69:03:C8:FC:4C:7F:A3:58:EE
            X509v3 Authority Key Identifier:
                keyid:E5:A8:3B:40:B3:F4:D7:D3:1F:B3:36:8D:AF:AC:A1:19:9A:44:98:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ag7QLP019MfszaNr6yhGZpEmJI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24cab4-0125-4383-85fa-3d388606da12/1/5ag7QLP019MfszaNr6yhGZpEmJI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:8a:9b:23:fa:da:88:8b:a6:a9:4b:e7:1c:aa:1d:b8:28:71:
         11:5e:9c:44:e2:d1:bb:63:79:96:90:c5:a0:7d:23:7f:fe:32:
         d7:f3:22:bb:8c:32:1a:a5:0e:88:11:b8:40:f0:a9:fe:db:e1:
         b2:ef:f4:bf:0b:fc:6e:8b:95:a7:f1:ba:fa:50:c8:e9:38:76:
         12:99:81:44:bc:33:75:da:36:08:81:29:a7:3e:05:9a:c1:eb:
         26:33:2e:df:f4:f3:ef:ba:72:79:ce:80:14:38:ef:60:10:d5:
         34:c1:d0:bf:07:40:bd:03:95:19:4c:e0:fa:71:c5:68:53:51:
         eb:01:41:5d:03:2d:73:08:64:6c:97:a4:40:5b:cd:4a:4a:6d:
         33:62:54:fe:c5:68:8e:16:4b:55:86:25:ee:47:da:65:e4:74:
         f3:11:06:94:3f:a2:87:e2:3d:9f:6d:59:b9:4f:5d:27:d2:17:
         7a:ad:32:5b:09:2b:b2:22:84:ee:2b:bc:f9:46:44:0b:ba:0a:
         e7:17:45:8b:b8:1b:4d:e3:c1:ee:28:6d:e2:16:0f:b6:e8:90:
         2e:74:f0:76:ea:68:7e:1c:6e:62:98:45:9d:2f:0c:20:58:40:
         cb:27:0d:3c:1c:9c:55:b6:52:40:37:f5:0d:e2:f3:8d:87:20:
         7e:30:76:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:01 2026 by rpki-client