Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File:                     5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier:          lKefR7M56fNdDQuvLaWrvAmImNUc2cxUHPBvrjC5ZPg=
Subject key identifier:   F8:29:A9:15:21:30:0D:A2:7F:12:2E:07:18:D6:BD:BF:43:D3:E7:3B
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer:       /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial:       019D99625A452D34C5BD10496457C836C109
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number:          13A7
Signing time:             Fri 17 Apr 2026 03:00:52 +0000
Manifest this update:     Fri 17 Apr 2026 03:00:52 +0000
Manifest next update:     Sat 18 Apr 2026 03:00:52 +0000
Files and hashes:         1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: bZA3+qFyKHjVXWEreygfPAOX1CPht8b6oiFgboiU25k=)
                          2: 9wxon_jSPGs29d0oz5cGIJC4nyg.roa (hash: Xz4cE3NQ80mMRNxOjLbkBn+IL5J1nET+/jUfxtIVjP8=)
                          3: GR0moaidu9mIStt-zm-cvuX-WDg.roa (hash: RV/X/dbPCJTmst6CLCu9ZvlvMnLGaT8HGpULXJtWGI0=)
                          4: KbTR7aHwwLpZYX34f5JnyinWFjs.roa (hash: SB5fokkBufwe+kAeEHnmUVt4YkIfxrCsr/69Y8UsTR8=)
                          5: mO6Fb7S41xAj_RDQIm69ljJKwSs.roa (hash: mzwHry2L+FiTcVlvwHZhbyETQYyjQEIEkkpwQQwfOpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:5a:45:2d:34:c5:bd:10:49:64:57:c8:36:c1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
        Validity
            Not Before: Apr 17 03:00:52 2026 GMT
            Not After : Apr 18 03:00:52 2026 GMT
        Subject: CN=f829a91521300da27f122e0718d6bdbf43d3e73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ec:28:a0:86:83:ff:f2:8f:b7:7a:8c:6d:5e:
                    ae:75:5b:d0:45:b4:00:51:2c:66:7d:60:52:3c:fb:
                    c2:68:c5:1c:64:f6:8a:ab:ee:85:62:50:39:6b:d1:
                    28:6f:cf:98:c8:48:8c:5f:65:e9:d0:b4:d9:0e:57:
                    ff:5c:42:4e:9b:a3:38:fa:25:44:01:b3:ed:c7:8d:
                    ac:ff:a5:fa:ab:87:43:96:48:82:0f:67:30:0c:09:
                    31:21:16:cd:12:c7:f5:3f:cb:0f:e9:e2:bd:94:8f:
                    fd:2a:b9:26:72:f2:13:01:bc:4f:3c:6f:35:04:54:
                    5f:a9:d0:9d:f2:ea:20:34:54:a1:a9:aa:b2:cd:ca:
                    41:6f:5c:ee:88:1a:28:67:e5:06:9f:f3:79:f3:2e:
                    96:c6:59:7b:2e:0a:f3:7e:f7:4b:61:39:35:6b:b6:
                    77:5e:14:d8:71:bf:e7:0d:e7:04:03:dd:e8:9c:af:
                    d3:8a:9c:9c:09:73:ea:6c:e8:7c:53:2d:b0:e6:78:
                    5f:5f:76:4b:51:7d:fb:86:d9:d4:f4:03:09:d2:79:
                    48:24:86:70:76:8d:ca:f2:06:94:3a:2d:ce:9e:c3:
                    d8:4a:44:ab:27:5e:f6:59:30:58:55:79:c2:dd:a2:
                    eb:49:93:22:9d:d1:34:11:a8:40:4f:60:61:a0:e9:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:29:A9:15:21:30:0D:A2:7F:12:2E:07:18:D6:BD:BF:43:D3:E7:3B
            X509v3 Authority Key Identifier:
                keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:1f:66:35:61:e8:57:d1:49:66:94:32:c7:f8:f0:f5:86:16:
         f2:cb:3b:8e:31:70:72:af:a8:9b:c9:38:5b:fc:5d:40:ed:42:
         d8:18:3d:0a:d8:49:bd:48:8d:b7:1b:70:5d:61:e6:d5:5e:38:
         0d:34:0f:60:db:a5:ca:97:76:9b:f7:89:30:02:bc:be:5d:7b:
         c0:14:97:84:c6:5b:43:f5:9c:cb:8e:75:79:11:a7:11:1f:15:
         c8:ab:1a:64:85:83:6d:84:1f:93:7b:97:67:7e:0c:e8:a0:6e:
         0c:b0:2b:a9:ad:3d:bd:ae:0b:23:60:15:a5:7c:5e:c6:14:31:
         a4:63:46:50:9e:60:fe:81:9d:66:76:dc:e6:a0:88:39:33:47:
         2c:b2:c3:c4:63:dd:ee:3b:a8:d8:d5:67:5b:2c:1c:c0:5f:9a:
         37:e9:51:36:ae:55:3e:53:ef:47:f1:f6:55:d5:c8:39:ea:83:
         93:3e:ee:06:99:d0:38:b1:ed:8a:11:e9:99:b0:71:60:d4:c1:
         2d:22:0a:d9:e0:74:77:e7:6f:3a:d3:5a:cd:3c:b8:f9:30:d8:
         69:c8:45:92:7e:30:db:57:f3:2c:43:5d:30:c3:41:77:4c:77:
         f1:fe:64:12:4a:16:b8:c5:11:85:be:8d:89:57:d6:97:f6:08:
         31:29:eb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:42 2026 by rpki-client