Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
File:                     5zqbo56LjiuL9OiCUq-_3czN0aE.mft (raw, json)
Hash identifier:          Ruiya2oAxwNr2WzXwN5srUXd3pYzMOMdKs4ea/gZB9s=
Subject key identifier:   DC:A8:C3:02:5A:C6:AF:08:05:AE:1C:2F:84:48:12:62:D8:DD:27:16
Authority key identifier: E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1
Certificate issuer:       /CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
Certificate serial:       019E1E360C292CFF488F93743685BB3255C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
Manifest number:          122D
Signing time:             Tue 12 May 2026 22:01:58 +0000
Manifest this update:     Tue 12 May 2026 22:01:58 +0000
Manifest next update:     Wed 13 May 2026 22:01:58 +0000
Files and hashes:         1: 5zqbo56LjiuL9OiCUq-_3czN0aE.crl (hash: zrkmY2CG3V1mxHSLTXPiTMojfZ9HyMrl2G85evxk3Z0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:36:0c:29:2c:ff:48:8f:93:74:36:85:bb:32:55:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73a9ba39e8b8e2b8bf4e88252afbfddcccdd1a1
        Validity
            Not Before: May 12 22:01:58 2026 GMT
            Not After : May 13 22:01:58 2026 GMT
        Subject: CN=dca8c3025ac6af0805ae1c2f84481262d8dd2716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:dc:97:93:fe:fe:79:af:6a:03:34:9d:a1:
                    c4:cc:d1:da:38:2d:96:02:80:13:61:df:f1:48:66:
                    72:55:07:c6:c5:08:6a:b3:a8:d5:d4:c2:81:a1:48:
                    1e:60:77:97:09:49:21:93:fc:83:e2:25:71:1d:80:
                    86:25:06:27:21:09:b1:10:0f:f3:bd:f1:df:a0:bf:
                    63:c0:ad:91:e9:4a:fd:35:38:40:76:da:25:b0:e9:
                    c2:63:5c:84:e7:63:56:b1:c6:98:c7:39:1d:aa:42:
                    20:c6:83:dc:63:75:aa:70:54:1a:81:17:fd:e6:99:
                    35:ab:28:d9:48:a2:89:98:99:38:5a:99:2e:c1:18:
                    dc:7e:9c:07:77:68:b3:ef:64:b9:d9:66:c0:a4:9f:
                    db:97:bb:e0:aa:f2:9f:65:31:a4:09:9f:80:80:e4:
                    c8:9e:5a:fa:61:a7:b0:0f:6f:fc:e9:17:93:7f:ab:
                    fb:ab:56:fd:79:49:6c:f3:f2:09:91:c5:fa:e4:8e:
                    f9:a4:43:36:b7:90:8b:2a:06:b6:6a:26:e2:98:40:
                    49:f7:8a:9a:d9:5d:2e:8b:25:9c:0d:d5:6e:65:44:
                    a5:53:9c:42:d5:32:4d:60:99:2f:41:04:59:02:d1:
                    6d:e5:c1:48:6e:53:9c:6a:79:01:2d:2f:cb:05:e0:
                    a6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:A8:C3:02:5A:C6:AF:08:05:AE:1C:2F:84:48:12:62:D8:DD:27:16
            X509v3 Authority Key Identifier:
                keyid:E7:3A:9B:A3:9E:8B:8E:2B:8B:F4:E8:82:52:AF:BF:DD:CC:CD:D1:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zqbo56LjiuL9OiCUq-_3czN0aE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/2f503d-6cc1-435e-871a-7fa4f58c4fb9/1/5zqbo56LjiuL9OiCUq-_3czN0aE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:b9:1f:f8:aa:8c:7d:27:84:8f:1d:3c:ee:53:c1:42:77:ba:
         f5:ba:c7:78:52:15:52:77:a0:1b:91:9b:16:ba:40:a8:f5:d9:
         06:72:20:fb:c6:e0:5f:e7:54:ae:0d:76:c1:8c:a6:2e:94:7b:
         28:14:f6:c6:76:ba:b3:57:50:63:5c:11:73:9d:f9:3b:b5:65:
         53:5d:f1:26:c3:fe:df:f5:cb:5a:30:84:6a:fb:c1:a9:ef:b1:
         25:04:21:09:03:b8:e0:f2:87:df:fb:26:7c:e4:08:28:a6:45:
         17:c7:1e:e8:cb:78:18:62:4d:a2:b9:08:b4:b7:e2:61:c5:d8:
         92:b0:1c:e2:7d:3d:9f:a5:2d:e3:ee:0e:e4:c5:cc:cc:5d:25:
         f6:f9:35:ec:69:a3:c6:03:fb:6a:56:50:f3:30:70:a3:b2:8a:
         96:10:30:82:fb:9d:88:ed:c5:ec:e1:97:3e:4f:ab:2a:ed:a0:
         ea:2f:c9:78:09:b5:4f:a2:0e:e9:1c:63:85:8c:63:57:b0:35:
         bb:f0:cb:78:00:6b:69:be:25:91:71:00:c0:b6:17:54:1c:92:
         a0:81:08:d3:0b:74:01:5b:ac:2c:e8:83:69:be:17:6c:2d:1f:
         02:a1:9d:1f:17:07:8d:66:86:68:4c:92:1e:5d:62:af:36:4b:
         16:ea:1b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:21 2026 by rpki-client