Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
File:                     5J_xmt1LshEp7ogjFL5zy3jM7bM.mft (raw, json)
Hash identifier:          JCrgol+JwAYBiDcCM/DN5gcXCo4Ft12kAAo5Ak8rFkk=
Subject key identifier:   1D:B8:4A:D4:C3:70:66:17:01:6C:A5:1E:C1:F5:AC:01:E0:45:B8:22
Authority key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Certificate issuer:       /CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Certificate serial:       019D9A06DA67C32634988D1FE1460D17D563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
Manifest number:          09B3
Signing time:             Fri 17 Apr 2026 06:00:33 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:33 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:33 +0000
Files and hashes:         1: 5J_xmt1LshEp7ogjFL5zy3jM7bM.crl (hash: hCexR5T3J7A5NezIPcnjIK8riKRjOjMqOr6PJwID3tE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:06:da:67:c3:26:34:98:8d:1f:e1:46:0d:17:d5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
        Validity
            Not Before: Apr 17 06:00:33 2026 GMT
            Not After : Apr 18 06:00:33 2026 GMT
        Subject: CN=1db84ad4c3706617016ca51ec1f5ac01e045b822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f1:d6:37:95:49:bd:45:69:00:6a:c5:43:ce:
                    67:03:ad:11:a3:2e:12:14:4a:54:9b:88:63:ab:bc:
                    6e:ce:2c:10:00:fa:80:1e:7f:0f:ed:81:38:d7:26:
                    a5:5d:3f:51:64:50:46:8e:f9:7e:9d:d9:68:a9:47:
                    6d:c8:28:18:c6:e9:51:ac:62:18:e1:1b:0e:ba:c2:
                    55:ba:c9:eb:da:0b:e3:95:45:81:99:25:6c:9e:b9:
                    9a:53:08:a3:cc:4f:61:fd:cb:32:4d:6a:95:b1:67:
                    d1:18:01:6c:96:34:ae:48:b7:b3:23:b0:e6:d9:1c:
                    24:7c:82:73:c2:0c:d0:a1:e7:1a:95:97:22:39:a6:
                    7e:bc:85:f2:b3:ec:3f:ed:a9:02:4d:94:89:8e:f1:
                    3b:59:b1:b5:74:50:32:75:45:82:1c:c7:47:c4:da:
                    ba:5f:5f:0a:0d:d6:c5:6f:2a:81:fc:d0:91:4b:40:
                    03:ee:be:2b:80:6c:c5:b3:73:6b:ea:ff:bf:d5:01:
                    f8:d7:77:5c:a8:27:e1:e1:7a:e3:71:45:31:03:50:
                    3c:4a:d2:24:fd:89:3b:97:3d:9a:43:a8:e8:ed:01:
                    3d:53:32:6e:4e:a8:10:5b:d3:2b:ea:be:11:3a:33:
                    8b:a2:38:3e:88:5c:94:ce:24:54:c0:40:0d:56:70:
                    ca:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B8:4A:D4:C3:70:66:17:01:6C:A5:1E:C1:F5:AC:01:E0:45:B8:22
            X509v3 Authority Key Identifier:
                keyid:E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:27:30:28:2d:43:79:73:ad:44:72:32:44:43:a8:33:28:6b:
         12:25:b3:eb:eb:36:83:03:02:76:77:4b:c6:6f:0e:4d:d6:b1:
         cc:21:23:5c:2b:6f:26:c8:f3:34:9e:bd:1b:af:4c:2f:ea:b0:
         f8:79:43:fb:78:f0:8a:35:e9:d5:63:e1:bb:81:33:8c:4a:66:
         ed:b7:23:00:53:be:41:a6:99:a6:01:56:50:06:57:e6:22:08:
         28:47:f0:c6:ec:f2:8c:08:da:0f:0d:f3:ce:eb:59:c3:97:2b:
         c2:e7:4b:a8:a7:80:6d:60:27:36:49:93:8a:30:3f:3e:2a:8e:
         07:be:7c:e7:be:6f:05:fc:7e:15:f9:d3:cb:31:d3:0b:09:0a:
         7d:50:77:cc:72:bb:e6:5f:fe:09:18:f5:19:e7:22:4e:a9:04:
         dd:43:c9:27:c1:1b:44:d7:fe:a7:66:01:fb:f5:5c:5a:af:b1:
         79:f0:42:56:fe:08:ef:fc:b5:ee:2f:e0:45:77:ed:35:f1:e6:
         da:4e:53:c1:e8:af:6b:93:73:42:8f:7d:51:16:b7:8b:5c:07:
         be:f6:a9:37:b7:fa:46:6b:4b:9f:94:b1:9f:c8:76:ff:91:2b:
         17:ca:9f:4a:77:b9:36:50:da:26:51:8f:2a:ea:34:34:0e:6b:
         90:71:ea:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:29 2026 by rpki-client