Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File:                     5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier:          pkdN+3BjPTOYptCJE8KV6eXZID/O2yQpUmk2TXJhuG8=
Subject key identifier:   D1:EB:7C:49:88:3B:02:AC:1E:FC:37:E6:C9:3D:11:44:B8:CD:B8:4B
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer:       /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial:       019D9999A2713504FC1BDC04553A898276A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number:          0C71
Signing time:             Fri 17 Apr 2026 04:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:15 +0000
Files and hashes:         1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: x4Kz1TvEVPgQnVGFWxS1COhaMz2J6B6sv9F70MX+BxM=)
                          2: cHSnTM0TIgMVZV_Pq7Op9CcRxNw.roa (hash: AyIttbsE/zYFTDAmxKD+ND4Xjn5eOSnndB3Dk5UaIJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:a2:71:35:04:fc:1b:dc:04:55:3a:89:82:76:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
        Validity
            Not Before: Apr 17 04:01:15 2026 GMT
            Not After : Apr 18 04:01:15 2026 GMT
        Subject: CN=d1eb7c49883b02ac1efc37e6c93d1144b8cdb84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:ec:a5:fb:d3:88:0b:8c:ec:59:5c:23:84:
                    9b:a2:ba:c2:d8:63:78:b2:51:dd:60:1f:fa:58:5f:
                    00:08:88:50:f1:75:00:30:ad:b3:69:11:57:fd:ce:
                    ed:e4:c8:ba:a8:fc:20:76:00:48:1d:99:79:70:52:
                    77:f3:a0:aa:58:a8:ff:fd:8c:71:22:47:bc:96:c8:
                    82:6f:db:2f:91:86:ac:a5:60:5e:29:4f:18:b6:6c:
                    d9:53:e4:b9:62:a0:43:1f:e9:f6:ad:2e:c3:93:42:
                    48:8e:db:9b:3c:14:4d:74:8d:8e:df:7c:8d:bc:8a:
                    90:cc:cf:5b:66:72:30:69:19:79:0a:6a:ff:b5:35:
                    af:b6:3a:56:57:d5:c6:92:07:0a:a5:02:19:6c:04:
                    7d:28:09:e8:7c:37:80:1e:1f:1d:40:3b:1c:70:ad:
                    dc:f2:f0:37:0d:34:74:6c:84:16:4a:1c:37:7f:1b:
                    ac:bf:e6:c7:ed:e2:a9:71:21:bb:b2:41:98:df:f3:
                    4e:39:ea:54:10:8e:21:a5:de:48:9c:c7:ba:3a:ea:
                    ab:cb:c6:20:26:e8:64:a5:5b:69:4a:11:9b:be:12:
                    4a:85:2a:28:63:00:71:29:07:c6:15:f4:53:01:01:
                    24:19:f6:21:ec:e7:21:e8:c3:69:80:4c:2f:78:93:
                    a0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:EB:7C:49:88:3B:02:AC:1E:FC:37:E6:C9:3D:11:44:B8:CD:B8:4B
            X509v3 Authority Key Identifier:
                keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:56:c1:ee:44:76:a5:f5:ad:37:5e:b3:dc:33:24:3d:45:24:
         23:e4:e0:04:19:18:14:fc:19:24:2c:f1:fa:6a:e4:39:ed:1d:
         4c:84:19:84:94:e9:c2:7a:fc:90:a4:da:13:f2:cf:0e:64:97:
         11:cd:bc:da:b6:a5:38:02:57:b6:0c:f7:27:50:d3:57:4d:ad:
         1f:13:30:3a:62:cc:ac:41:1b:15:d3:ed:5e:98:8d:27:0c:24:
         a7:41:27:6a:15:4c:ce:6a:8c:93:4d:a6:c2:f2:44:44:57:a0:
         e9:ad:58:6f:38:50:23:25:3e:81:da:4f:66:bd:99:c7:56:32:
         4f:56:b3:f8:f6:52:a7:65:5c:e1:44:92:46:8d:ff:15:21:e6:
         be:2d:eb:0a:c1:75:24:78:af:5d:d2:87:be:cc:53:da:69:74:
         b2:2e:b4:86:26:77:df:d3:3f:2c:af:1c:d3:a2:76:a8:ac:26:
         2a:06:41:c7:e9:f2:f0:1f:84:c0:8a:d2:fb:da:80:a3:1e:c8:
         b4:71:fe:77:8b:78:fd:69:1a:3e:5d:ad:76:58:fe:9d:b2:ef:
         26:bd:0f:89:ef:b5:af:07:8b:79:e8:9b:42:9c:4c:da:79:5d:
         0f:41:14:be:45:ee:15:a6:18:b6:2c:3d:46:3f:26:4a:03:95:
         bf:92:e1:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:59:25 2026 by rpki-client