Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
File:                     5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft (raw, json)
Hash identifier:          HBBfW5HyWSKnU41hsZTJwhzworkafaH6KEYtXfUJoFY=
Subject key identifier:   E4:4A:44:67:E0:80:7E:6E:2E:C2:75:2E:77:DC:88:03:31:5F:40:C5
Authority key identifier: E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA
Certificate issuer:       /CN=e6e2575267ff832d979e38ddaf3dd67420162cda
Certificate serial:       019CAC4775A15155DF13C6D3E80CD717FB64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
Manifest number:          045C
Signing time:             Mon 02 Mar 2026 02:01:30 +0000
Manifest this update:     Mon 02 Mar 2026 02:01:30 +0000
Manifest next update:     Tue 03 Mar 2026 02:01:30 +0000
Files and hashes:         1: 5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl (hash: adrV8+z/elUzJl1bIub7gaNFYjjVqDmbQKuvCjwAEc0=)
                          2: EYjq5PTntQ_pzWKcs1u7ceeGxQY.roa (hash: V6IVhgWxUM0HbEed6VcScjqL3JGVYEaJss+a2Pf1dk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:47:75:a1:51:55:df:13:c6:d3:e8:0c:d7:17:fb:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e2575267ff832d979e38ddaf3dd67420162cda
        Validity
            Not Before: Mar  2 02:01:30 2026 GMT
            Not After : Mar  3 02:01:30 2026 GMT
        Subject: CN=e44a4467e0807e6e2ec2752e77dc8803315f40c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1c:b7:b3:f4:54:38:95:90:1a:07:c5:6a:0d:
                    f3:3f:41:f7:21:df:e4:b0:0a:63:cc:b7:9a:f7:02:
                    8f:5e:5f:18:d3:8e:62:03:69:91:ef:4c:ef:22:c1:
                    41:d4:c7:f8:78:b2:06:b5:25:db:9d:b5:92:24:ff:
                    9c:11:4f:5c:7e:24:f6:b3:88:12:78:14:64:f2:96:
                    b0:7c:a5:33:5a:ab:6f:c0:7e:95:b2:da:b1:b7:a4:
                    c3:34:c2:9e:dd:f5:53:02:bf:50:53:d3:82:78:d1:
                    7b:27:c8:e4:a8:8d:7b:9d:f1:21:1a:99:05:ac:a4:
                    1c:a5:f7:95:60:b5:0c:a6:54:a9:bb:75:17:14:f8:
                    95:16:2c:14:b1:06:88:89:2e:8f:e1:13:30:1f:9b:
                    2f:ea:ba:8c:2d:62:c4:a8:36:d5:8b:9a:08:72:c2:
                    1a:0a:39:75:c6:6e:06:b5:82:30:3a:96:a5:14:71:
                    a0:0a:fc:df:34:07:ce:ff:a1:1d:8d:e0:75:63:6c:
                    a1:4f:b8:a2:bd:33:87:b4:6e:9f:86:4d:0b:e5:8c:
                    8f:e8:4e:97:52:85:e0:a6:82:4f:5b:65:d8:4b:65:
                    0d:e0:d8:9e:6b:42:38:19:92:ac:1c:9f:af:1d:29:
                    5a:a4:b8:d6:6c:db:bc:07:4b:cb:5d:7c:ce:69:07:
                    b2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4A:44:67:E0:80:7E:6E:2E:C2:75:2E:77:DC:88:03:31:5F:40:C5
            X509v3 Authority Key Identifier:
                keyid:E6:E2:57:52:67:FF:83:2D:97:9E:38:DD:AF:3D:D6:74:20:16:2C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/dd5032-94b9-43f5-9dbb-782cf71c82cc/1/5uJXUmf_gy2Xnjjdrz3WdCAWLNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:00:50:de:19:40:88:a6:32:07:ce:10:f3:14:2f:6b:7b:be:
         9c:f9:e8:a0:d1:e6:c6:5f:e5:dd:4c:54:65:d4:e2:e6:06:d0:
         4e:02:04:30:0f:47:de:cd:af:70:f9:76:62:8b:d0:0f:4c:8e:
         6b:a5:ac:86:49:50:2a:7c:b8:bc:02:64:fd:56:5c:1c:54:46:
         1f:46:5f:ab:2e:8a:f7:fe:b8:29:04:39:d5:8f:d1:a8:19:06:
         c9:87:bb:76:35:6b:be:50:26:11:43:c2:b2:4d:6e:ef:ad:ca:
         10:58:3c:79:cc:97:85:f2:1a:f7:bd:27:3a:0f:ee:57:0c:4b:
         cc:f0:f3:8e:c6:f8:dd:60:67:b4:44:4e:25:12:21:26:a9:60:
         8a:8c:d9:93:ef:d5:ba:93:08:8f:c9:78:24:fb:ff:82:31:cb:
         14:17:8d:67:13:a3:eb:b6:c5:81:1c:33:45:24:3e:45:60:f5:
         07:f2:5a:1b:92:b4:17:7e:30:9c:17:bb:75:33:78:55:5a:db:
         fc:01:9e:73:fe:ac:6d:88:f7:a6:14:66:e1:40:4a:46:2f:24:
         16:85:c1:c8:7b:ab:f7:83:d5:d0:16:3b:75:8a:ab:64:09:38:
         cd:66:9b:e3:ba:b6:a1:70:6f:c6:29:42:ff:8a:21:84:71:1c:
         63:34:de:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:23:30 2026 by rpki-client