Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
File:                     5J1E2IEnX8osC2s_fs7i0iIUb9I.mft (raw, json)
Hash identifier:          +9t+i9SSaQhgZf8wytov/QmpTQGjFXW6wRj3zdNI7vI=
Subject key identifier:   E3:FB:08:D8:BA:92:8A:1F:E5:E8:5D:31:F5:4F:B0:87:89:8A:51:2A
Authority key identifier: E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2
Certificate issuer:       /CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
Certificate serial:       019E1D59B765A227EA7E3C80472BB164D44B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
Manifest number:          162F
Signing time:             Tue 12 May 2026 18:01:19 +0000
Manifest this update:     Tue 12 May 2026 18:01:19 +0000
Manifest next update:     Wed 13 May 2026 18:01:19 +0000
Files and hashes:         1: 5J1E2IEnX8osC2s_fs7i0iIUb9I.crl (hash: Hb4xRwMq8Bq38YpGzhFQ5UBBz2omHOnXZ/m5m90Cw0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:b7:65:a2:27:ea:7e:3c:80:47:2b:b1:64:d4:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e49d44d881275fca2c0b6b3f7ecee2d222146fd2
        Validity
            Not Before: May 12 18:01:19 2026 GMT
            Not After : May 13 18:01:19 2026 GMT
        Subject: CN=e3fb08d8ba928a1fe5e85d31f54fb087898a512a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3d:27:e7:c1:d3:70:40:6b:16:3e:8d:1f:cc:
                    23:87:90:65:12:c5:bf:9c:23:59:ba:9d:38:da:ec:
                    e4:12:b9:37:4a:0f:1f:dd:d3:fc:0a:c9:91:59:30:
                    13:97:7c:3c:44:80:37:36:37:64:59:fc:59:6c:91:
                    f9:f6:35:0b:1f:21:08:07:8c:f4:64:a0:11:09:f1:
                    05:81:a8:12:81:cb:16:fe:36:65:aa:eb:f1:86:c1:
                    51:72:1e:fb:9b:ec:a1:3f:28:21:42:88:dd:bc:6d:
                    fa:56:f9:8f:4f:be:7a:7a:ae:c2:61:36:c5:b2:99:
                    e2:03:aa:87:8d:52:9a:50:69:f0:c5:29:ca:a6:69:
                    ac:ee:3a:65:4b:01:8e:ec:53:85:10:8e:bb:da:f2:
                    0d:bb:22:d7:7a:2f:d3:36:5c:84:6a:17:35:d6:ec:
                    5e:b9:0d:8c:e4:2a:90:ea:a7:61:72:0b:f4:5f:b4:
                    2c:6d:f7:23:b4:87:5d:53:27:1b:b7:40:89:f1:3e:
                    6e:b8:0f:2d:2a:79:04:a5:67:99:36:1a:5f:62:4f:
                    5c:c8:21:32:40:35:f8:2d:3b:3c:b7:e0:64:e8:65:
                    f6:6d:26:43:4c:aa:9c:21:49:58:8d:ee:4c:58:74:
                    2c:0e:22:77:a3:c0:64:7c:f0:f6:a0:50:94:26:29:
                    61:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FB:08:D8:BA:92:8A:1F:E5:E8:5D:31:F5:4F:B0:87:89:8A:51:2A
            X509v3 Authority Key Identifier:
                keyid:E4:9D:44:D8:81:27:5F:CA:2C:0B:6B:3F:7E:CE:E2:D2:22:14:6F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5J1E2IEnX8osC2s_fs7i0iIUb9I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/050d7f-8455-465f-b239-c32d10c7ea1f/1/5J1E2IEnX8osC2s_fs7i0iIUb9I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ad:ec:be:b7:ef:94:22:a7:ba:85:45:d5:9e:43:48:07:a3:
         6a:da:72:3e:2c:af:d6:96:27:7a:5b:13:70:fa:23:0c:f0:d5:
         19:5c:7d:8b:77:ed:ec:7a:96:96:7b:b7:97:e5:c0:96:4d:c1:
         b2:2f:39:a4:37:b2:7b:22:38:ff:f5:6f:ef:4b:b7:7b:0d:d2:
         0c:44:ec:94:1a:72:fb:a6:81:49:8f:4e:bc:22:35:7b:1a:a8:
         be:a8:c8:23:cc:0d:7c:c4:21:54:45:42:ca:88:32:d6:c9:78:
         ca:15:cb:66:03:71:e9:58:96:ad:5e:b8:fe:ca:b1:73:36:fe:
         26:ae:fa:01:bf:86:41:9b:14:2d:c3:73:de:1b:06:aa:49:cb:
         6a:18:7b:9c:68:79:fc:13:42:ac:4e:1f:60:7d:8c:02:4d:4c:
         96:5a:9d:c0:3e:92:79:ff:c9:80:28:74:87:72:e8:a1:3a:35:
         69:03:c1:35:87:d1:44:0f:ef:87:8d:ef:11:2c:c6:0e:37:a7:
         68:d3:bf:5c:33:58:a6:b8:8e:bc:60:06:bc:c1:81:b9:8b:21:
         f6:e2:d0:e8:dd:1e:51:ff:fa:6b:68:9d:9a:27:8c:6b:13:6a:
         5e:ba:5a:d1:ba:9e:0f:99:32:8d:e9:ca:e1:2a:ac:ac:86:dd:
         a9:2a:14:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:56 2026 by rpki-client