Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
File:                     Srn5ALphi-jnySCWPN91e5BQ5Qk.mft (raw, json)
Hash identifier:          1JdlvwJm4stOLciAK4WqPKeQgDJSDIobTPgTiiN75DM=
Subject key identifier:   53:DE:C3:73:08:83:6C:B4:0D:56:78:F3:CE:CD:10:83:52:80:81:F2
Authority key identifier: 4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09
Certificate issuer:       /CN=4ab9f900ba618be8e7c920963cdf757b9050e509
Certificate serial:       019D99D059A6E15FAEB2BD7F0A5D2F80E3AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 05:01:01 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:01 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:01 +0000
Files and hashes:         1: Srn5ALphi-jnySCWPN91e5BQ5Qk.crl (hash: +lWJVYJODo1xrLqSr38uhXuTxrOSs8AGl2mnEUYG9Fs=)
                          2: TKiySKsrDB9cF93wGZALmPNCai4.roa (hash: tc1pUMByW6R2FInLyIj5FqB3NbTIk6zZRQsKK64hyM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:59:a6:e1:5f:ae:b2:bd:7f:0a:5d:2f:80:e3:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab9f900ba618be8e7c920963cdf757b9050e509
        Validity
            Not Before: Apr 17 05:01:01 2026 GMT
            Not After : Apr 18 05:01:01 2026 GMT
        Subject: CN=53dec37308836cb40d5678f3cecd1083528081f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d6:3a:71:4f:fe:21:ae:c3:82:b6:18:11:cc:
                    2f:6f:dd:93:09:34:52:76:79:8c:53:02:86:82:63:
                    4a:40:02:7d:55:05:6c:c7:2b:45:ee:a4:4e:21:c1:
                    eb:00:7f:63:09:70:6d:b7:04:fe:27:f5:1d:a3:e7:
                    a2:d4:93:7b:58:84:14:74:45:80:be:bd:11:58:b1:
                    8f:14:99:5f:7d:d4:bd:9d:e8:e9:df:b2:08:b3:79:
                    e0:c7:8f:5f:11:33:ea:e9:64:77:df:8f:f8:5d:33:
                    cb:0a:2e:3f:30:ac:48:22:3c:ea:4c:41:0c:f5:25:
                    4c:60:fe:23:ea:73:32:ec:92:d4:5c:fd:75:10:6a:
                    46:57:b0:3d:44:83:cd:8d:04:d4:27:29:50:19:aa:
                    14:30:40:3e:93:ce:55:66:77:53:a3:01:87:7c:fb:
                    e0:9d:78:5b:00:7e:43:e1:b8:c4:cc:0f:da:9f:b5:
                    9b:a4:dd:3f:e3:18:f0:95:77:4e:fc:06:ef:11:08:
                    96:93:4d:fc:fe:a8:db:40:89:87:ab:8c:04:cc:d9:
                    e4:cc:37:db:bb:90:49:16:ec:a6:c2:1d:a6:c0:31:
                    9b:66:8a:fc:85:2b:7c:56:09:85:3b:41:8c:9f:a9:
                    ba:9c:b7:c9:5f:d2:a1:ef:35:16:47:c0:d9:19:0b:
                    46:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DE:C3:73:08:83:6C:B4:0D:56:78:F3:CE:CD:10:83:52:80:81:F2
            X509v3 Authority Key Identifier:
                keyid:4A:B9:F9:00:BA:61:8B:E8:E7:C9:20:96:3C:DF:75:7B:90:50:E5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Srn5ALphi-jnySCWPN91e5BQ5Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/b42027-6637-48e7-a354-9e0b196a0487/1/Srn5ALphi-jnySCWPN91e5BQ5Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:88:9e:da:34:d2:40:6f:fb:3f:00:cc:91:84:c3:99:37:a0:
         b4:7b:e9:04:ea:cd:a4:9f:7c:87:10:bc:b4:e2:8f:c0:4c:9e:
         ef:67:d7:51:82:0b:a3:43:c4:75:df:20:e0:58:c4:c3:3b:62:
         20:f3:fb:8f:ca:fa:b5:6a:a0:3b:4a:65:da:4f:18:12:84:97:
         0b:9c:cf:93:bf:25:6f:09:19:e8:9c:74:c7:5f:56:0e:2d:f1:
         9d:b3:48:1b:6f:a6:53:87:58:c7:fa:b2:a7:c4:44:2a:fc:a9:
         1f:4a:e0:e2:7f:06:00:df:45:95:61:2c:a5:41:1e:65:6c:1b:
         24:c9:13:f5:60:b5:b5:82:cb:52:d7:32:be:9b:61:44:74:66:
         0c:6e:8f:28:44:d5:91:19:5b:f0:8a:4a:8e:4d:6b:97:9d:ae:
         d0:19:7e:fe:66:84:24:e2:85:25:00:f3:70:ee:24:de:2d:13:
         af:1d:fc:3a:88:b5:b8:91:d8:4e:fa:09:f9:b5:eb:c1:5c:d2:
         bc:af:ce:d7:6b:90:db:bb:7c:ea:91:d7:84:b6:8f:23:40:fb:
         17:56:96:30:2b:2e:bc:7d:c9:10:5f:4e:86:21:5e:02:83:b5:
         67:e6:1f:35:d0:c2:f9:22:56:96:1c:00:18:cf:c9:f9:a6:17:
         87:34:5b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:43:53 2026 by rpki-client