Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
File:                     5i7oJCK3hJkSKWNhQEZJp__smOU.mft (raw, json)
Hash identifier:          dxw3v2zY+owDrURVyGcmOQ4vwefRU3IaVK9kOcJJo4M=
Subject key identifier:   3D:F8:88:51:A5:3A:FE:71:F4:7D:74:4F:1F:A9:FF:C1:C2:17:25:C1
Authority key identifier: E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5
Certificate issuer:       /CN=e62ee82422b7849912296361404649a7ffec98e5
Certificate serial:       019E1E3572AABE200AC30250765906C1F379
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
Manifest number:          0FC6
Signing time:             Tue 12 May 2026 22:01:19 +0000
Manifest this update:     Tue 12 May 2026 22:01:19 +0000
Manifest next update:     Wed 13 May 2026 22:01:19 +0000
Files and hashes:         1: 5i7oJCK3hJkSKWNhQEZJp__smOU.crl (hash: b67+4QTXTUQP9z36JYFrxDfdy+Bn53FR/iaOMx+ACFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:72:aa:be:20:0a:c3:02:50:76:59:06:c1:f3:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e62ee82422b7849912296361404649a7ffec98e5
        Validity
            Not Before: May 12 22:01:19 2026 GMT
            Not After : May 13 22:01:19 2026 GMT
        Subject: CN=3df88851a53afe71f47d744f1fa9ffc1c21725c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:9a:44:d1:d9:42:ea:d1:55:15:70:bf:3b:
                    c0:81:9e:88:f5:ce:6f:2a:ec:06:c0:25:b6:05:4b:
                    62:34:65:20:64:04:fd:da:f4:28:ba:e4:39:9e:9e:
                    78:05:ad:66:d6:4a:6a:bb:ce:44:98:04:4b:93:c9:
                    3f:89:e0:d1:90:25:ef:33:02:76:43:73:fe:a9:83:
                    41:cf:e4:50:6e:a1:e5:de:af:1f:e4:fa:a0:c8:41:
                    75:4c:5b:42:55:75:15:05:ff:81:e3:0a:83:53:fc:
                    41:be:8b:51:52:d3:41:69:18:bf:0d:5e:de:e7:08:
                    23:fc:ef:f7:74:c8:38:7b:ff:d9:08:14:c7:ee:f2:
                    80:1a:5e:00:60:fc:31:fc:06:b3:53:b9:d7:58:dc:
                    89:93:1b:e0:17:42:cd:fb:bd:10:99:ee:a0:0e:88:
                    c6:55:43:73:b5:c8:29:cd:7f:fb:69:50:30:8e:8b:
                    49:35:cf:ae:27:c3:3c:c7:6a:58:ab:c4:18:f7:e7:
                    28:3d:06:da:74:79:2b:35:2b:44:2b:4d:85:e9:d6:
                    9c:9b:d8:6e:8a:ad:ce:cc:6b:9a:ab:3f:4a:88:69:
                    cd:79:7f:83:6f:ea:52:c5:5a:b4:86:39:ed:c9:d5:
                    ca:d9:be:7d:f0:32:d4:5b:59:fb:f0:a1:e9:f6:45:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F8:88:51:A5:3A:FE:71:F4:7D:74:4F:1F:A9:FF:C1:C2:17:25:C1
            X509v3 Authority Key Identifier:
                keyid:E6:2E:E8:24:22:B7:84:99:12:29:63:61:40:46:49:A7:FF:EC:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5i7oJCK3hJkSKWNhQEZJp__smOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/bd311e-c901-4aef-b185-ffb1bec32721/1/5i7oJCK3hJkSKWNhQEZJp__smOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:09:94:e2:5f:e4:39:18:51:03:ec:52:f9:83:93:88:b5:71:
         0e:7b:34:73:71:9e:cf:d3:35:48:3b:7c:38:b4:30:5c:02:50:
         6b:b6:60:63:30:ec:c0:d9:5a:7e:bc:05:75:1f:b7:93:ee:bf:
         13:10:b6:61:0b:08:80:c1:08:44:6d:b4:00:d6:b5:19:80:17:
         d7:ae:e0:ac:b3:05:bd:2e:1a:28:0e:31:e9:97:88:5e:20:15:
         1d:2c:75:93:63:07:82:01:88:20:19:e6:e8:18:bc:7a:1e:2a:
         f2:20:e5:11:28:9d:c9:ed:7b:a4:ad:f7:04:00:1b:1c:e7:57:
         26:0a:3f:e6:51:8f:75:82:4e:45:87:48:20:9a:16:c8:18:58:
         fa:6e:f2:6a:11:9c:df:ed:f7:e9:d2:00:ab:75:e9:fa:75:4f:
         80:83:73:04:51:3d:d0:62:76:2c:e7:cf:3e:6a:d4:97:7c:85:
         ba:d6:d7:00:bc:32:29:46:40:c5:11:14:50:4b:3c:3c:70:b7:
         60:8c:fc:3e:57:85:1e:9a:a1:79:ed:61:a2:84:61:24:86:b7:
         85:ba:1a:ef:86:0a:30:ac:0f:08:0e:74:56:43:0f:35:02:66:
         51:6b:ef:bf:8c:ff:fd:b5:e7:f2:61:25:c5:75:45:ee:65:18:
         e0:c4:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:25 2026 by rpki-client