Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
File:                     5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft (raw, json)
Hash identifier:          13SMikdw4Gy4vgfgRsFrRvc2nEmfxzlnkxB2u6EUO/A=
Subject key identifier:   E9:5D:CA:97:AF:7F:C7:57:00:FC:FC:95:B0:CF:A2:67:7C:62:EE:9B
Authority key identifier: E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E
Certificate issuer:       /CN=e443fc203f706f9731412761b27a1a4b395cfc1e
Certificate serial:       019E1DFE2BE83990188649B2E7CEEBFDE803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
Manifest number:          18A0
Signing time:             Tue 12 May 2026 21:00:57 +0000
Manifest this update:     Tue 12 May 2026 21:00:57 +0000
Manifest next update:     Wed 13 May 2026 21:00:57 +0000
Files and hashes:         1: 5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl (hash: keGXRoze9s55Ib4q1gINDw+K/6mmFElrorbayRra3BE=)
                          2: AS-661G75-znuPlEcg291RY_YW8.roa (hash: tryrPTL4snW84NvT9kdcp6puokqa439kxN3NLW6DORc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:2b:e8:39:90:18:86:49:b2:e7:ce:eb:fd:e8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e443fc203f706f9731412761b27a1a4b395cfc1e
        Validity
            Not Before: May 12 21:00:57 2026 GMT
            Not After : May 13 21:00:57 2026 GMT
        Subject: CN=e95dca97af7fc75700fcfc95b0cfa2677c62ee9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:3e:b5:d7:2a:2d:e0:ec:bb:04:26:6d:70:
                    0f:9d:e8:c2:c9:9e:e9:94:01:e2:6d:61:c8:fc:4e:
                    c0:4f:5a:9a:44:c5:89:f3:40:77:cf:42:15:c8:7e:
                    8b:85:11:31:4b:68:d9:11:09:5d:bd:0d:67:c4:7a:
                    ac:4b:80:fa:16:8b:b0:24:b9:d6:f5:f7:5e:28:4d:
                    d2:18:84:9b:5f:af:67:7e:05:6c:e1:4d:d2:46:b8:
                    2e:fd:8a:fd:a8:35:4d:a9:87:99:50:e2:1d:f0:5e:
                    0b:cf:be:6e:2c:cf:d2:e3:94:3d:c1:d7:bb:70:5a:
                    f4:47:3c:72:9b:82:f6:69:1a:d7:8b:06:4d:d0:af:
                    f8:d3:42:2f:c9:63:10:cf:e8:24:27:03:0a:4f:99:
                    ce:8c:13:09:b2:a9:43:4c:cd:22:f5:29:1c:bf:17:
                    c1:64:5a:f1:e7:08:cc:fc:ca:9c:7f:00:0c:fd:40:
                    95:25:d2:95:9b:a1:d1:a5:dc:ce:18:a6:a0:a5:53:
                    bc:cf:3b:58:7c:99:40:cb:34:66:8e:c1:de:41:13:
                    fa:45:7f:a0:49:bc:b0:4a:8d:4e:20:3d:d6:61:1d:
                    be:9c:42:b7:79:c8:2b:9a:fd:45:d0:90:59:49:15:
                    de:35:58:63:44:7e:a0:df:56:63:b9:f3:d0:8d:6c:
                    1e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:5D:CA:97:AF:7F:C7:57:00:FC:FC:95:B0:CF:A2:67:7C:62:EE:9B
            X509v3 Authority Key Identifier:
                keyid:E4:43:FC:20:3F:70:6F:97:31:41:27:61:B2:7A:1A:4B:39:5C:FC:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5EP8ID9wb5cxQSdhsnoaSzlc_B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0689ea-cdd9-4790-9f9b-c0f9d087fc10/1/5EP8ID9wb5cxQSdhsnoaSzlc_B4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:82:d9:37:c3:b3:5d:7b:82:d9:e7:18:e9:d8:b3:c1:2f:c6:
         f6:66:c0:b8:98:46:c6:90:3e:d2:93:5f:c9:2a:d4:77:d1:0f:
         3f:28:d6:f5:2a:cd:8d:28:b5:73:f6:78:0f:2c:63:a4:3a:90:
         50:e4:10:d5:63:c7:bf:f1:3a:5b:8c:c5:55:39:bd:38:df:ca:
         a8:67:45:ce:f4:f7:29:f3:51:f7:e3:83:8e:c6:93:01:fb:81:
         8a:b7:56:a7:99:c0:1e:2a:71:ad:ef:79:02:d7:37:49:5f:29:
         16:c1:d6:95:da:a9:be:b2:7d:a0:a2:05:4c:a3:9b:69:25:46:
         b5:b7:36:a9:11:c1:23:d1:87:e3:2e:02:a3:a9:68:be:7e:75:
         2e:cb:a8:74:20:ce:f4:b0:29:d7:33:ca:ee:06:19:f3:5c:58:
         f2:ca:13:85:8c:a7:ff:3b:34:b0:76:48:0a:7c:16:74:97:ae:
         77:5d:9d:54:8f:34:50:eb:2c:32:76:84:29:f9:56:cc:bb:36:
         db:37:b7:ba:a6:51:a2:c6:49:39:b4:84:e3:5f:71:f5:dc:80:
         e7:33:d3:d8:e4:fd:07:bb:e8:e0:87:57:c8:4a:40:3f:58:5d:
         97:24:26:bf:3e:f1:45:90:7b:53:28:8e:2b:fc:c5:23:dc:7a:
         ac:8b:fc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:09 2026 by rpki-client