Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
File:                     5YBcX-NFAofc3mreDZyVWLphXjI.mft (raw, json)
Hash identifier:          Bavynebw4GB9EdOnmqH+rYrCvH9Hitx0TJVpL78eHWc=
Subject key identifier:   1D:C2:7D:E7:36:45:2F:C0:B7:64:29:DA:30:4F:A3:18:04:F4:9B:AF
Authority key identifier: E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32
Certificate issuer:       /CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
Certificate serial:       019D9999189B2D1093FBE5EF20AC86DBD395
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
Manifest number:          1404
Signing time:             Fri 17 Apr 2026 04:00:40 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:40 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:40 +0000
Files and hashes:         1: 5YBcX-NFAofc3mreDZyVWLphXjI.crl (hash: 6uNli+mX9SIAnxg6aW7aOhGwwAsWy08O3KHyXI/+Q3w=)
                          2: A1D00v3A4CQZLEI4nsAImmP-iFw.roa (hash: E/3ao48NIzK+YhB3GFzpFI3pAlwXP3xA9O+zTwVZIJ0=)
                          3: GJZc_gLiiRe7OqjNr9x1ky7xXpg.roa (hash: 8nJXVrKq22+Fo+U1/ucjOBB+qvYDFNRUhH11zvrhaPE=)
                          4: iH5XJxRHMuZplPHXUVXS4UztXoc.roa (hash: 0SYvVBVFyUSv31vxwNANiF5Kj2haBl2zGv3sJ7c90/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:18:9b:2d:10:93:fb:e5:ef:20:ac:86:db:d3:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5805c5fe3450287dcde6ade0d9c9558ba615e32
        Validity
            Not Before: Apr 17 04:00:40 2026 GMT
            Not After : Apr 18 04:00:40 2026 GMT
        Subject: CN=1dc27de736452fc0b76429da304fa31804f49baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:d5:15:c1:fb:f2:ac:59:0c:fb:52:b9:a7:
                    32:f0:02:7b:7b:4c:19:08:48:4a:62:63:41:f9:49:
                    2d:f1:99:69:73:47:fb:2d:c8:ef:e5:d2:79:95:2e:
                    a8:9c:3a:1c:3e:84:4c:2d:ac:e8:b6:c5:6c:05:2f:
                    4a:8c:a5:59:56:0c:3f:59:61:ca:a3:8e:9b:47:ff:
                    b5:7f:fe:79:96:5d:4b:f2:c2:62:e2:fd:87:70:f4:
                    f2:ab:da:f0:9f:fa:b1:48:8b:ef:59:61:ac:58:15:
                    d1:9b:69:31:bf:70:f6:74:c4:80:86:e8:e1:e5:df:
                    86:5f:a0:7e:67:2e:7d:9e:98:22:e9:f6:e2:98:c6:
                    75:de:37:bb:45:68:69:47:e7:7b:a2:1a:ea:a6:40:
                    26:57:3d:ec:9f:92:8d:29:7d:0e:10:62:13:b5:cf:
                    fd:f7:4d:5b:8f:8c:b9:ef:69:85:77:01:1e:17:5c:
                    1c:3a:dc:8e:d3:9c:91:a0:c4:66:52:79:a9:d1:1d:
                    45:23:21:d4:d9:f1:88:87:be:d3:ce:54:94:ad:a8:
                    eb:72:ec:2c:33:fb:d6:cb:a7:c0:4d:10:d5:2a:7e:
                    3e:19:be:04:fc:a6:25:13:4e:04:10:f2:ea:e2:5e:
                    9b:88:ff:84:d2:85:46:5d:ad:4d:5d:84:6d:ce:60:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:C2:7D:E7:36:45:2F:C0:B7:64:29:DA:30:4F:A3:18:04:F4:9B:AF
            X509v3 Authority Key Identifier:
                keyid:E5:80:5C:5F:E3:45:02:87:DC:DE:6A:DE:0D:9C:95:58:BA:61:5E:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YBcX-NFAofc3mreDZyVWLphXjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b4dc3c-ecab-436d-ac52-595307f47110/1/5YBcX-NFAofc3mreDZyVWLphXjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:64:ac:9a:53:5d:e6:6b:76:c2:f1:0a:99:c1:86:82:64:77:
         3b:5b:fa:81:a3:6f:65:f0:40:e7:5e:1e:18:f0:6f:41:d5:46:
         36:ae:cd:c0:c2:1c:a7:44:8c:7c:76:1e:c5:f2:e5:3a:aa:36:
         b8:32:76:e5:66:e3:c7:4e:91:04:84:72:86:30:72:16:54:db:
         ea:cc:06:2d:c9:24:5d:a0:3a:b4:4f:ac:05:9e:e7:9e:ce:97:
         03:ba:a3:0c:16:8b:b7:eb:b6:16:32:7e:86:d8:c0:5b:0c:49:
         ad:d4:46:2c:f5:e8:ae:f3:24:bf:a5:71:68:4d:7f:e8:7a:4d:
         81:31:51:cf:8a:ac:0d:de:1b:4f:3b:de:d7:4d:57:5c:e9:ff:
         50:67:4a:2e:45:9b:d8:b8:d3:1d:b8:68:88:33:be:24:d1:4e:
         1d:5f:92:e3:d6:54:31:64:cf:2f:e5:d3:5c:9f:89:82:e1:ac:
         c4:94:3a:9f:e9:19:73:8e:b9:61:12:ee:94:43:00:6f:4b:85:
         51:7d:f6:ed:8a:81:24:36:05:47:dc:72:d8:ab:c0:8b:e4:38:
         bb:ea:34:44:a0:1e:1b:71:fb:91:6c:78:aa:7f:8c:45:74:68:
         4d:42:73:ee:4b:26:c8:87:69:c2:cc:19:9a:4c:ed:46:55:7b:
         28:9f:b4:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:13 2026 by rpki-client