Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
File:                     b5NgtvWDmq_c4hzW3nY72qJr-_A.mft (raw, json)
Hash identifier:          tAWPQddLtlTgyxWSqq6RRQV/Z/pSubbhhHNaWPj3ulc=
Subject key identifier:   CB:BE:B2:17:19:0B:AE:79:E1:83:5C:DA:63:75:D4:45:55:CB:E8:67
Authority key identifier: 6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0
Certificate issuer:       /CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
Certificate serial:       019D9AE3248023DF22E5300C3125559A18E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
Manifest number:          0CD0
Signing time:             Fri 17 Apr 2026 10:01:10 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:10 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:10 +0000
Files and hashes:         1: 0sNShrDJmnaMM666_lqvw34kSbc.roa (hash: JvACNJqo5Kvs6tRWY9dKRk+H6pDjvw63onqZeKb1aGk=)
                          2: b5NgtvWDmq_c4hzW3nY72qJr-_A.crl (hash: SYiOE2QREwL0+dIfA/6/bEeh32TmRpkr7yfuw6kTN6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:24:80:23:df:22:e5:30:0c:31:25:55:9a:18:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9360b6f5839aafdce21cd6de763bdaa26bfbf0
        Validity
            Not Before: Apr 17 10:01:10 2026 GMT
            Not After : Apr 18 10:01:10 2026 GMT
        Subject: CN=cbbeb217190bae79e1835cda6375d44555cbe867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f7:7b:81:0a:58:f0:13:f9:b5:29:6d:6e:e2:
                    55:28:81:28:38:6c:10:a9:2c:ad:51:7d:98:f8:11:
                    f1:9c:c2:f2:ef:8d:16:a3:79:81:5b:5f:5e:ff:a0:
                    16:64:93:8f:fa:c6:99:48:08:a8:78:ac:dd:7d:fd:
                    cb:a7:00:ef:0a:cc:eb:a4:8d:b3:6e:9e:0f:81:95:
                    b2:5e:9f:33:a5:0d:fd:e4:e4:4d:3f:75:77:b6:8e:
                    4f:d1:f9:53:2e:fa:72:04:6c:2b:4a:66:0e:9d:fd:
                    44:fe:e4:e4:7c:b9:dc:60:9b:1a:04:c7:c7:49:3a:
                    be:69:65:de:12:be:20:35:7d:4a:c5:8e:b8:67:c1:
                    eb:c7:bf:44:3a:a8:96:b5:f5:22:00:32:dc:6c:5a:
                    b7:36:16:d5:ba:f7:f2:bb:71:42:fc:4f:08:50:d8:
                    f7:aa:93:8e:f1:29:12:38:96:1e:1a:68:bc:a9:54:
                    c8:d6:95:90:fc:e3:20:94:56:67:9e:77:3c:f7:80:
                    57:6a:a6:39:75:aa:1d:f2:a8:7d:8c:45:9a:e6:18:
                    60:37:e8:4f:4f:58:39:b5:09:d7:7b:c0:12:11:5c:
                    e7:02:e3:39:e8:e6:c7:91:4e:1e:86:c7:8b:a0:e8:
                    52:e8:d6:b0:68:d8:01:55:21:50:3c:44:3b:e2:07:
                    f7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BE:B2:17:19:0B:AE:79:E1:83:5C:DA:63:75:D4:45:55:CB:E8:67
            X509v3 Authority Key Identifier:
                keyid:6F:93:60:B6:F5:83:9A:AF:DC:E2:1C:D6:DE:76:3B:DA:A2:6B:FB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5NgtvWDmq_c4hzW3nY72qJr-_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e05614-2824-4298-be0c-e3a7ff11c631/1/b5NgtvWDmq_c4hzW3nY72qJr-_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:fe:bd:d3:01:68:b9:38:fd:6e:70:be:e0:fd:d1:32:ba:e9:
         65:4c:b4:8c:56:cb:d6:f1:53:9c:81:a0:80:06:bd:fd:14:10:
         d8:5e:2b:9d:84:fb:02:f1:1c:af:cf:4d:ed:b8:b2:c6:65:be:
         ac:85:c9:da:18:f0:2a:cf:7c:38:05:56:8b:68:55:66:35:36:
         59:e7:a3:ea:ff:47:8b:6a:1a:86:b0:0a:a9:91:91:28:5d:bc:
         bf:72:74:a6:ea:56:c2:13:7b:76:68:3a:74:da:02:31:a3:28:
         9a:94:4b:63:eb:61:5f:e3:5b:05:22:a3:7c:30:26:eb:8a:c6:
         37:3a:8f:3e:77:96:b8:d8:c3:1a:92:98:3f:e9:1c:43:76:0d:
         7f:98:f5:a3:6b:f6:7f:a6:d2:d8:a4:3f:16:88:36:02:b5:83:
         14:0e:d2:ff:e3:01:ef:21:00:88:44:23:cb:21:fb:32:78:8c:
         4d:2a:63:95:a2:0f:81:0e:5d:cd:cb:ad:74:8e:b3:e1:c3:17:
         2d:a2:93:c4:6e:5f:e9:81:38:77:53:9a:d8:c6:af:85:2e:bb:
         36:2e:2d:53:f5:2d:fe:8d:f3:0c:3e:e7:1f:62:bf:a0:9e:2a:
         e7:2b:f8:cd:24:1e:b0:4a:92:45:55:48:7a:4b:c9:03:de:98:
         47:38:ae:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:04:25 2026 by rpki-client