Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
File:                     5BqMQuzom1-_whDce1VMcupPNUQ.mft (raw, json)
Hash identifier:          ZOD8umHELRmuJRjzbkE4oJGokZYDlxmKzBMXo3vQoIM=
Subject key identifier:   69:C5:FC:11:22:32:53:25:51:E0:5D:32:EF:71:C2:96:00:28:33:04
Authority key identifier: E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44
Certificate issuer:       /CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
Certificate serial:       019E1ED9D1E7B85F069952FCF25C7606B4B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 01:00:51 +0000
Manifest this update:     Wed 13 May 2026 01:00:51 +0000
Manifest next update:     Thu 14 May 2026 01:00:51 +0000
Files and hashes:         1: 5BqMQuzom1-_whDce1VMcupPNUQ.crl (hash: kdyb2691Ox22pHY71Wvwdu8NrC2H5aeIw6vaDgRwSzM=)
                          2: Gdko4-yr_mZQjbgGaX8sC4T_FPQ.roa (hash: 7AxIc/Z01v/Eqc2Dv0cTBhSNHD6F9wR4yoEfob5zH90=)
                          3: kf58GPD5iMVc4BLLn8IhfqKMsCY.roa (hash: Ic5aK1Q6lKzryOBda72Usz/9pqqGz+CIRUBEEUajD8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:d1:e7:b8:5f:06:99:52:fc:f2:5c:76:06:b4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e41a8c42ece89b5fbfc210dc7b554c72ea4f3544
        Validity
            Not Before: May 13 01:00:51 2026 GMT
            Not After : May 14 01:00:51 2026 GMT
        Subject: CN=69c5fc112232532551e05d32ef71c29600283304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:45:fd:d4:5b:16:97:cd:70:8d:c7:b6:b9:2f:
                    b5:6a:5b:bd:e3:fe:ff:d4:cd:88:59:46:b4:51:06:
                    90:a0:f2:27:3d:f2:55:67:58:e6:1d:7c:87:67:98:
                    c2:d2:e6:e9:a1:09:84:08:0a:f2:0e:98:e9:7c:1d:
                    fc:03:d2:e6:0e:66:66:76:f7:4a:50:51:52:13:42:
                    78:df:a7:1f:49:ef:9a:3a:f0:bc:0e:fd:03:67:ae:
                    4b:1e:83:5b:e9:68:c5:58:22:6e:76:7e:be:4f:06:
                    36:94:1c:0b:e4:b0:2c:f4:9a:be:b2:e8:b3:1e:fe:
                    30:72:d8:60:9f:c7:f1:60:99:45:d2:33:73:94:6b:
                    26:0d:7b:10:cc:4a:83:c9:0b:42:10:e2:e5:cb:66:
                    72:f3:ef:0f:42:12:2e:20:45:03:91:e6:79:4d:ee:
                    66:91:b1:3d:f9:e2:0f:ad:db:7b:64:bf:ff:d4:ee:
                    a8:0c:be:59:ab:6c:24:71:a1:51:ab:52:cf:22:33:
                    ee:8b:4d:5d:da:69:b9:bc:93:14:49:65:4f:c4:00:
                    e2:04:8f:a4:4a:b3:01:9a:5e:7e:df:88:2c:43:3b:
                    a2:c3:dc:a2:b9:92:95:5e:3f:f1:ed:67:3b:3f:c4:
                    88:bc:ef:80:7b:15:f7:53:ca:c8:ab:8a:33:9c:66:
                    12:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C5:FC:11:22:32:53:25:51:E0:5D:32:EF:71:C2:96:00:28:33:04
            X509v3 Authority Key Identifier:
                keyid:E4:1A:8C:42:EC:E8:9B:5F:BF:C2:10:DC:7B:55:4C:72:EA:4F:35:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5BqMQuzom1-_whDce1VMcupPNUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d19c2d-38c3-4526-a7cf-1d666c422c6a/1/5BqMQuzom1-_whDce1VMcupPNUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:77:32:1d:bc:bc:c7:6d:21:c5:c1:5c:e8:b0:b8:a8:93:63:
         0c:9f:da:a4:d5:52:5a:3b:37:ca:9f:14:8f:50:40:9e:75:d5:
         39:29:41:ef:97:47:88:fe:ab:99:4f:ef:2a:c7:8c:ff:b2:c5:
         08:e8:74:85:99:fb:98:b0:06:5b:0f:99:c9:ae:86:08:ba:b2:
         7b:c5:b2:4f:dd:e2:9a:4a:51:67:35:f3:e1:cc:c3:4e:65:19:
         c7:5b:9d:d6:9f:1d:c2:d3:ee:96:f1:46:1a:9a:27:d6:d9:4b:
         5c:23:f7:71:ee:bb:f5:e4:60:17:74:89:a0:e6:f9:b7:27:12:
         4b:15:74:9f:a2:7f:3e:d0:d8:a3:01:23:2d:35:67:94:e9:14:
         00:a8:20:fd:a7:cb:1c:2e:89:5c:a6:37:28:6e:fa:fc:c2:52:
         7a:ea:a4:be:58:dd:bb:67:58:4e:31:f0:26:7f:b6:af:65:96:
         21:15:7a:c5:f4:39:42:ef:f2:53:2e:68:48:20:80:eb:d3:c4:
         71:0f:60:7d:7e:7c:34:db:59:59:9c:d4:77:1c:fc:f8:f8:88:
         51:f7:c9:a3:9b:6a:cc:1e:45:b7:ff:ac:fb:29:75:f0:27:6e:
         67:36:b7:f4:cd:21:c4:dc:a9:40:25:e7:53:e0:ec:df:2b:60:
         10:19:ce:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:35:24 2026 by rpki-client