Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
File:                     5HbpsSF9PIXySHce9G2zprVr-EY.mft (raw, json)
Hash identifier:          apRyEaxUtt78x5q2rVmhuH+LlYbFCeQZlvKA0NarZzo=
Subject key identifier:   67:A7:8D:A7:0C:6B:02:B5:C4:F7:16:75:D7:B1:1B:F8:E3:29:80:E6
Authority key identifier: E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46
Certificate issuer:       /CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
Certificate serial:       019E1C7DB7CBBBA653CF6996DF02D1E879AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
Manifest number:          91
Signing time:             Tue 12 May 2026 14:01:01 +0000
Manifest this update:     Tue 12 May 2026 14:01:01 +0000
Manifest next update:     Wed 13 May 2026 14:01:01 +0000
Files and hashes:         1: 5HbpsSF9PIXySHce9G2zprVr-EY.crl (hash: hYhF3juqYwnF/7HI9Z3FixLS+TKC4WRDZA9Z/7H58PY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:b7:cb:bb:a6:53:cf:69:96:df:02:d1:e8:79:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e476e9b1217d3c85f248771ef46db3a6b56bf846
        Validity
            Not Before: May 12 14:01:01 2026 GMT
            Not After : May 13 14:01:01 2026 GMT
        Subject: CN=67a78da70c6b02b5c4f71675d7b11bf8e32980e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:3e:b6:f6:86:ae:31:a9:ff:1f:75:65:61:fc:
                    32:67:38:6a:de:0e:d4:4d:9b:b7:ae:c6:06:a1:72:
                    ef:d0:44:c0:77:33:3c:ab:df:e4:5f:19:31:c0:3d:
                    9d:12:bf:b6:77:b5:9b:7a:d9:13:45:39:05:2d:68:
                    c3:2e:d2:82:15:b0:a5:76:50:d1:e7:1c:b8:a9:21:
                    0e:3c:f8:a4:8d:22:54:1b:f8:d4:6c:6e:b7:63:80:
                    05:55:3a:37:bb:95:96:2f:fa:37:1a:d4:31:9f:a2:
                    79:f8:20:22:60:d9:2f:da:7f:3e:c5:55:ff:fb:1c:
                    60:79:0c:39:c1:6d:7d:5c:81:b6:77:95:00:df:67:
                    f2:cc:0a:72:d2:51:ad:09:9c:53:83:4e:71:c1:6c:
                    62:cc:66:4a:7d:a4:87:07:1d:a3:25:19:d5:ac:e8:
                    dd:f0:e7:dd:d0:9a:9b:1b:c2:f9:06:b1:92:a9:d8:
                    80:a5:14:96:55:70:b5:f6:3e:59:b9:c3:2d:10:9f:
                    f8:d7:8b:2f:9c:1a:4f:79:2a:3e:75:fe:90:b9:23:
                    26:69:19:d3:c7:ee:78:5a:47:fc:06:46:98:16:c6:
                    2c:fa:aa:60:90:f2:08:15:1d:15:97:35:74:64:18:
                    5b:f1:51:da:9d:0e:0a:5d:9e:5c:ba:dd:4a:a7:95:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:A7:8D:A7:0C:6B:02:B5:C4:F7:16:75:D7:B1:1B:F8:E3:29:80:E6
            X509v3 Authority Key Identifier:
                keyid:E4:76:E9:B1:21:7D:3C:85:F2:48:77:1E:F4:6D:B3:A6:B5:6B:F8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HbpsSF9PIXySHce9G2zprVr-EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/17f634-fbbc-4f8f-b6d2-e32e36d51e12/1/5HbpsSF9PIXySHce9G2zprVr-EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:28:75:6f:79:d0:8c:ce:7b:f0:3c:63:63:2c:19:bd:40:b9:
         f7:69:e9:ad:f1:8c:20:16:a6:b5:c5:bd:2c:2c:9a:1b:e1:5a:
         ca:14:2c:33:49:1d:88:a1:67:3f:0c:1b:08:5e:e1:93:21:98:
         11:0f:9c:b6:ff:97:12:b9:c9:6a:0a:6c:3b:8d:80:f2:8c:42:
         c8:56:2a:1f:5d:8c:1c:d2:a3:3d:6f:a7:52:e5:bd:6a:96:76:
         ac:e8:1a:d7:09:28:dc:3f:06:4b:e7:45:4e:8a:71:ed:2e:f7:
         79:71:ca:46:73:db:13:ee:07:a4:03:cc:41:a3:f9:28:06:82:
         dc:4a:71:f8:7c:ad:ad:14:0a:11:8a:53:46:ed:b5:32:f9:c2:
         1b:00:da:6a:04:d2:b3:3b:34:ad:18:b5:22:26:40:a8:14:41:
         b7:c5:3c:c3:51:4e:bc:79:d6:af:b8:74:e7:c5:5f:46:94:cd:
         71:29:ff:42:ca:b0:e1:d1:de:5d:f4:b5:12:f8:fb:b0:cb:44:
         47:03:f0:4a:c2:d7:66:dc:7f:85:c8:c6:12:d8:7b:4f:6d:0f:
         85:a9:24:5b:2e:fd:f5:4a:1d:b9:e9:99:cf:a1:65:c6:fd:d4:
         d3:af:c4:c8:75:7f:2f:72:49:31:d1:51:f2:dd:45:7d:9e:66:
         91:e9:f2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:53 2026 by rpki-client