Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
File:                     5jRhbtvWAVT6Pax36pDb18aKEy0.mft (raw, json)
Hash identifier:          V6rFfyZgdPaXMkSE+a4Fx/vfSIx0m7UfLxsQifVebyk=
Subject key identifier:   E0:15:DE:F9:77:AF:BF:3D:01:FC:C2:32:FA:D3:03:11:10:87:41:51
Authority key identifier: E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D
Certificate issuer:       /CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
Certificate serial:       019D9818B34CA582A9D6E5B8AB725D7B4856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
Manifest number:          164F
Signing time:             Thu 16 Apr 2026 21:00:48 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:48 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:48 +0000
Files and hashes:         1: 5jRhbtvWAVT6Pax36pDb18aKEy0.crl (hash: Hdjha4vnawb/oRXeZyYYD9BlpEPitAE4iLHeFKxjxos=)
                          2: Htdodj1EnLAQWvHL9dfSRXWphBY.roa (hash: 4qm2iqRXbtgb8aQs2u9Qec4WCWSDsvZanKGj3hNNhZs=)
                          3: qUbS3fckMBwSjTB5lnxF3fZbp3s.roa (hash: KAFzjWDg92Eqz8mPAygaN1C2exNmJZnhRSrRBX3vbQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:b3:4c:a5:82:a9:d6:e5:b8:ab:72:5d:7b:48:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e634616edbd60154fa3dac77ea90dbd7c68a132d
        Validity
            Not Before: Apr 16 21:00:48 2026 GMT
            Not After : Apr 17 21:00:48 2026 GMT
        Subject: CN=e015def977afbf3d01fcc232fad3031110874151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:af:dd:cf:c6:b3:18:ae:e1:e6:2e:17:e6:
                    18:e7:ee:fb:95:88:78:b1:e4:6c:b7:47:ad:00:bd:
                    8d:e1:2a:82:b9:7e:c5:9b:90:a3:6c:51:5b:55:52:
                    e8:6a:f4:02:48:6d:5c:77:d0:b4:c0:ab:3d:fa:17:
                    75:91:51:67:2d:43:9d:2f:21:69:2f:6d:eb:73:be:
                    18:25:c1:31:94:78:fa:8f:00:21:47:5a:88:e2:87:
                    ba:fc:03:b1:0c:e2:42:bd:68:1a:8c:e2:69:8e:f9:
                    e1:c3:c0:3b:90:1b:99:15:0b:eb:c7:68:69:4e:83:
                    ac:98:26:bd:d8:31:33:17:35:10:05:b3:dd:d6:1f:
                    1c:af:ca:5f:7c:85:3a:87:a6:24:96:f8:ed:b9:0e:
                    fa:fd:ef:57:4d:88:35:4c:98:ac:4b:67:25:f0:05:
                    6e:ed:7f:eb:8e:30:8d:4f:3b:6e:03:fc:c4:6e:64:
                    8e:fa:38:05:de:50:46:51:a0:b5:95:6b:77:7c:06:
                    67:b9:36:e4:f5:4f:28:24:0a:a4:c9:8d:0f:77:15:
                    1b:ec:f3:67:05:7e:3a:8d:dd:bd:3a:1e:54:6e:a1:
                    c3:75:85:23:a1:50:96:de:93:2e:a9:da:ce:71:e8:
                    63:fe:c9:ff:ca:c3:61:57:ca:db:d6:ff:ed:c4:da:
                    85:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:15:DE:F9:77:AF:BF:3D:01:FC:C2:32:FA:D3:03:11:10:87:41:51
            X509v3 Authority Key Identifier:
                keyid:E6:34:61:6E:DB:D6:01:54:FA:3D:AC:77:EA:90:DB:D7:C6:8A:13:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5jRhbtvWAVT6Pax36pDb18aKEy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/f29268-2c6a-4e9d-aa2d-d99231e46457/1/5jRhbtvWAVT6Pax36pDb18aKEy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:68:26:06:ee:12:58:3f:2f:5a:5e:5f:4c:08:52:1f:63:44:
         44:27:aa:cb:76:39:e8:5c:2a:2e:b5:ed:51:55:d7:a7:aa:c7:
         4f:94:0a:7d:64:fb:7b:a3:43:02:b7:14:44:ed:44:08:13:a6:
         7e:a1:97:b0:6b:51:14:0c:23:4d:2a:7a:30:52:bf:16:29:f9:
         7f:dd:0b:dd:3e:46:f7:ea:b1:05:5e:db:d4:72:45:ac:05:0d:
         83:63:36:e8:e6:0a:a1:ba:33:69:1c:5b:64:1c:f5:c1:c9:ef:
         23:39:f7:fd:db:f1:89:ba:b8:ab:f3:7f:01:6e:5c:84:87:c8:
         54:36:2d:ce:03:04:a7:cc:c9:6c:ed:f9:91:c4:70:ff:ce:ad:
         24:c4:65:6e:2f:8f:e5:0f:e3:03:3a:07:89:ce:83:71:95:be:
         98:3f:3d:8c:88:8c:bf:c1:eb:1a:4b:78:96:87:c2:a9:a1:86:
         8b:79:29:c3:28:e8:cd:d2:d1:f7:34:e9:67:d9:b3:bc:2e:60:
         a9:b6:ad:8d:29:a7:42:4a:01:78:e0:f3:f8:32:15:53:7e:bc:
         2e:67:1d:ca:63:35:12:71:91:f6:90:0f:3e:7f:7d:6c:47:15:
         9a:be:dd:b4:68:b7:6a:e7:ad:9e:36:44:9e:0a:be:ba:e2:32:
         cc:76:92:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGLNMpYKp1uW4q3Jde0hWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MzQ2MTZlZGJkNjAxNTRmYTNkYWM3N2VhOTBkYmQ3YzY4
YTEzMmQwHhcNMjYwNDE2MjEwMDQ4WhcNMjYwNDE3MjEwMDQ4WjAzMTEwLwYDVQQD
EyhlMDE1ZGVmOTc3YWZiZjNkMDFmY2MyMzJmYWQzMDMxMTEwODc0MTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/Sv3c/Gsxiu4eYuF+YY5+77lYh4
seRst0etAL2N4SqCuX7Fm5CjbFFbVVLoavQCSG1cd9C0wKs9+hd1kVFnLUOdLyFp
L23rc74YJcExlHj6jwAhR1qI4oe6/AOxDOJCvWgajOJpjvnhw8A7kBuZFQvrx2hp
ToOsmCa92DEzFzUQBbPd1h8cr8pffIU6h6YklvjtuQ76/e9XTYg1TJisS2cl8AVu
7X/rjjCNTztuA/zEbmSO+jgF3lBGUaC1lWt3fAZnuTbk9U8oJAqkyY0PdxUb7PNn
BX46jd29Oh5UbqHDdYUjoVCW3pMuqdrOcehj/sn/ysNhV8rb1v/txNqFGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAV3vl3r789AfzCMvrTAxEQh0FRMB8GA1UdIwQY
MBaAFOY0YW7b1gFU+j2sd+qQ29fGihMtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWpSaGJ0dldBVlQ2UGF4MzZwRGIxOGFLRXkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9mMjkyNjgtMmM2YS00ZTlkLWFhMmQt
ZDk5MjMxZTQ2NDU3LzEvNWpSaGJ0dldBVlQ2UGF4MzZwRGIxOGFLRXkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9mMjkyNjgtMmM2YS00ZTlkLWFhMmQtZDk5MjMxZTQ2NDU3
LzEvNWpSaGJ0dldBVlQ2UGF4MzZwRGIxOGFLRXkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmgmBu4S
WD8vWl5fTAhSH2NERCeqy3Y56FwqLrXtUVXXp6rHT5QKfWT7e6NDArcURO1ECBOm
fqGXsGtRFAwjTSp6MFK/Fin5f90L3T5G9+qxBV7b1HJFrAUNg2M26OYKobozaRxb
ZBz1wcnvIzn3/dvxibq4q/N/AW5chIfIVDYtzgMEp8zJbO35kcRw/86tJMRlbi+P
5Q/jAzoHic6DcZW+mD89jIiMv8HrGkt4lofCqaGGi3kpwyjozdLR9zTpZ9mzvC5g
qbatjSmnQkoBeODz+DIVU368LmcdymM1EnGR9pAPPn99bEcVmr7dtGi3auetnjZE
ngq+uuIyzHaSKA==
-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:03 2026 by rpki-client