Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
File:                     51hSRFn5E1C_OnC93qArt_GY9ic.mft (raw, json)
Hash identifier:          GFMpgBvwxLxPmdMyUo3eOnPBJbKRClG/4ZgyczjxCXU=
Subject key identifier:   6B:E5:1D:26:81:2A:93:37:18:7B:C5:6E:80:84:7B:8A:89:6D:FC:44
Authority key identifier: E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27
Certificate issuer:       /CN=e758524459f91350bf3a70bddea02bb7f198f627
Certificate serial:       019D9A3E253CA03FF424C0CE03E1D9E4C6FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
Manifest number:          0BEE
Signing time:             Fri 17 Apr 2026 07:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 07:00:57 +0000
Files and hashes:         1: 51hSRFn5E1C_OnC93qArt_GY9ic.crl (hash: knxJ4pqg+10nlyI3BxUVEWDZPmztUYpxobZ8/E9VZ34=)
                          2: hIJ7BxSqfQNayGkNVH4Xy86Dhbc.roa (hash: fAcJlzHm8GX5dH8gtKkRjvytkl6PKP9fjOi2EMtY8+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:25:3c:a0:3f:f4:24:c0:ce:03:e1:d9:e4:c6:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e758524459f91350bf3a70bddea02bb7f198f627
        Validity
            Not Before: Apr 17 07:00:57 2026 GMT
            Not After : Apr 18 07:00:57 2026 GMT
        Subject: CN=6be51d26812a9337187bc56e80847b8a896dfc44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:00:25:72:29:91:4b:e8:19:b5:92:1f:60:8e:
                    0f:24:62:c8:4f:28:1f:08:ad:6b:fb:5b:fa:db:af:
                    0f:5d:82:08:a5:f5:06:f4:3b:43:47:5f:0d:a8:e1:
                    dc:c0:34:e6:37:8f:e6:d7:bf:aa:2e:3e:c2:21:d6:
                    30:3b:10:7f:f3:7d:f4:a2:48:bf:25:11:f3:eb:40:
                    e5:54:12:ca:f2:68:1c:79:ba:0b:44:f3:6a:91:a2:
                    95:1b:5d:c6:b9:a4:b8:a8:2a:b8:2d:d4:a4:73:50:
                    7b:b2:10:af:d6:4c:28:94:c6:33:9c:85:54:45:22:
                    54:af:4d:95:ba:e9:b7:ea:1e:3d:5e:fc:89:c6:69:
                    cd:fc:2e:0f:bd:6d:30:4d:89:61:29:46:6e:5f:92:
                    7f:2d:57:94:e5:0a:84:9d:a0:25:65:ee:24:54:72:
                    94:b5:6c:cb:72:86:26:4b:53:33:5f:8f:cc:21:ed:
                    a3:6a:c9:b2:09:45:21:a2:03:68:30:16:ac:ed:5f:
                    6f:bd:17:5e:26:08:53:59:87:75:f4:96:09:64:d4:
                    43:0b:f3:1c:ef:45:2d:2e:12:57:ea:ff:6d:1b:c0:
                    38:6e:d3:6b:10:1c:97:c4:00:e1:08:b9:ae:56:5e:
                    51:d9:fa:7d:40:cd:1f:df:c3:c1:ff:4d:04:35:c3:
                    34:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E5:1D:26:81:2A:93:37:18:7B:C5:6E:80:84:7B:8A:89:6D:FC:44
            X509v3 Authority Key Identifier:
                keyid:E7:58:52:44:59:F9:13:50:BF:3A:70:BD:DE:A0:2B:B7:F1:98:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51hSRFn5E1C_OnC93qArt_GY9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e5a629-8f68-432e-9e5a-c419e7129928/1/51hSRFn5E1C_OnC93qArt_GY9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:91:f7:b8:00:2d:78:27:1e:d5:c7:3f:8c:ee:85:64:4e:37:
         79:bf:bc:4d:2d:39:f4:65:a4:bd:de:89:d1:37:6b:86:28:e5:
         da:f9:ea:e0:52:65:bc:dc:a0:11:20:08:89:98:fc:8c:92:20:
         0e:d4:b8:e8:46:9c:f7:33:5d:18:16:11:a6:fa:4a:a6:04:cd:
         94:ce:b7:02:c3:a0:eb:2b:57:e4:3b:69:bb:32:3a:c9:ab:88:
         a7:be:28:f7:77:74:7c:14:66:90:2f:34:11:f5:e5:1f:1b:d0:
         04:29:9c:9a:9b:3b:72:46:1d:5e:a8:42:be:3e:c5:bd:0f:ad:
         25:bd:af:01:61:c7:0a:1b:5e:fa:83:36:7d:ab:88:5a:e1:6d:
         ac:88:2b:ee:c6:99:dc:6b:2c:f8:09:70:d0:98:5d:d3:06:a1:
         c8:00:55:2e:cc:44:c4:3a:ea:cc:cd:7d:18:6f:3f:26:0f:63:
         64:52:42:56:a9:5f:8b:a0:a7:10:3a:ce:81:68:74:41:d4:c0:
         cc:ed:92:05:02:25:77:01:26:96:4f:db:0d:93:50:a2:e6:a6:
         1f:52:8f:69:80:76:d8:f9:83:8b:18:7d:59:17:4a:6e:45:fe:
         bf:69:50:9d:02:97:48:47:9d:1c:5e:31:41:85:81:b6:8d:46:
         5c:f8:bc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:44:48 2026 by rpki-client