Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
File:                     5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft (raw, json)
Hash identifier:          mZCD+aGRvouTeZxbsrQdJJ8TyEmfVcJywmUda5b0eE0=
Subject key identifier:   78:92:53:37:80:3C:D5:16:DF:21:24:20:95:1C:9F:5D:66:60:15:19
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Certificate issuer:       /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial:       019E205A79308B7BD4FCE9879DBD1B7F5022
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 08:01:00 +0000
Manifest this update:     Wed 13 May 2026 08:01:00 +0000
Manifest next update:     Thu 14 May 2026 08:01:00 +0000
Files and hashes:         1: 5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl (hash: 2aDi9xySh8IYNw8o2de8PuhqWomckGS+ZwdVat3ehSY=)
                          2: cPmuXHtpdWHOv_IohN-yvdSZh00.roa (hash: uWWYQC9FttyGHNgD7wIoeeDy1sX/WMjKSFeXWzNylw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:79:30:8b:7b:d4:fc:e9:87:9d:bd:1b:7f:50:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
        Validity
            Not Before: May 13 08:01:00 2026 GMT
            Not After : May 14 08:01:00 2026 GMT
        Subject: CN=78925337803cd516df212420951c9f5d66601519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:14:6e:fb:aa:1f:68:5e:b0:f0:7a:9a:9c:
                    cd:4e:ea:cb:0f:40:d0:ca:f7:f6:5d:52:03:eb:9c:
                    a7:d8:a0:ab:f7:0b:12:90:69:e6:83:96:b9:46:58:
                    7b:43:31:dc:72:09:63:4a:39:fc:b3:fc:59:7a:5f:
                    fa:42:9a:39:6c:49:64:24:e5:c2:6f:47:57:54:51:
                    e1:01:ee:95:e6:f0:9e:56:b3:10:0d:94:2d:06:f0:
                    bc:cd:16:5b:52:0f:0a:da:9a:c9:ab:ad:fd:17:44:
                    45:71:46:76:99:f1:b5:7c:29:1f:e8:7b:cf:bc:b7:
                    64:77:96:03:ea:cf:5f:2f:06:88:42:6a:43:1b:6e:
                    cf:14:05:2b:90:75:e0:8a:00:0c:6b:b9:22:80:8f:
                    70:55:11:86:2a:dc:27:2e:0a:f9:53:45:be:9f:fb:
                    3c:1f:c9:74:29:0d:0a:25:d2:31:29:25:ab:61:9d:
                    65:87:8d:0f:ea:53:46:fe:9a:42:16:f6:06:e2:a4:
                    20:ee:b4:0c:b5:64:fa:b9:d6:9f:b9:2c:46:2a:63:
                    f4:52:30:86:21:eb:e2:6b:18:18:45:ec:6d:38:9e:
                    d0:5e:58:27:97:a7:8e:35:b7:d8:f7:fc:5e:e1:f5:
                    54:06:ce:8a:ab:97:19:e2:55:0a:b6:82:32:46:07:
                    90:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:92:53:37:80:3C:D5:16:DF:21:24:20:95:1C:9F:5D:66:60:15:19
            X509v3 Authority Key Identifier:
                keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b7:64:2b:f9:9e:ae:5e:46:1a:5c:a1:e1:bc:62:57:64:a7:
         76:14:55:62:fa:e7:83:0f:31:c2:f2:d8:69:36:49:4f:c1:d6:
         fd:d2:8c:32:5a:98:66:e6:46:4f:ae:34:dc:a2:3e:ce:7b:8b:
         7b:9d:13:cc:7e:c4:66:74:21:7f:d9:28:be:c1:8f:fb:9e:0b:
         0f:14:52:bf:aa:d7:76:ee:2e:c7:4f:5c:8d:57:d6:0a:9e:ed:
         0d:f4:48:c4:18:c2:89:ae:70:22:46:91:f8:9f:42:b4:41:84:
         83:95:2e:1b:e9:ac:1e:db:25:36:67:72:a9:08:0d:6f:a2:ae:
         b3:dd:0c:df:33:33:9a:18:fa:4e:69:4c:f2:24:21:fd:b0:d9:
         66:91:ef:20:81:65:67:6d:76:8a:fa:50:eb:22:aa:cd:71:7d:
         bc:a5:2c:43:ae:58:b1:33:6f:ac:62:1a:00:ae:18:95:4c:95:
         6e:06:f6:7d:62:6f:ef:6a:ae:43:ff:6b:70:43:39:ec:1d:07:
         e1:cf:19:23:40:c0:f0:8d:67:87:2a:d3:a7:5d:86:3b:0f:6f:
         15:58:54:a3:84:78:1b:73:e9:84:4b:e4:4c:b5:bb:00:83:59:
         98:e9:e6:78:ba:75:9a:52:ff:e3:a1:af:9b:6f:6d:68:51:1a:
         d6:10:0c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:26:01 2026 by rpki-client