Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
File:                     5U0JIEfb6alooWDzFfq5u5yDVtc.mft (raw, json)
Hash identifier:          N9ipIq6doUvwZxVLDTkP3i1v/zS0+BA8PzNNCMAo6lU=
Subject key identifier:   2C:D8:EE:4A:F1:A1:C7:89:45:5F:A1:77:62:36:E8:DD:59:1B:76:42
Authority key identifier: E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7
Certificate issuer:       /CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
Certificate serial:       019E1DC7A1EC410A8DC3E2488CE247503593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 20:01:22 +0000
Manifest this update:     Tue 12 May 2026 20:01:22 +0000
Manifest next update:     Wed 13 May 2026 20:01:22 +0000
Files and hashes:         1: 3mjUvr0ozA9KcVybdk9dg1L1c6M.roa (hash: l/BbA+peuMfkmg4IEpqF3b3AQLeDvrOYYkuX2oEB8Ko=)
                          2: 5U0JIEfb6alooWDzFfq5u5yDVtc.crl (hash: /788QGz5NbZoo/pYlAy2LEKBJmSwMo2dLIKhKiK931s=)
                          3: Oa_sii1Clbbek1SF0NauE94faXI.asa (hash: YEmLQlVRuHxGBIqwaUaToyDICFpczhTHLQZcRXVFos4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:a1:ec:41:0a:8d:c3:e2:48:8c:e2:47:50:35:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54d092047dbe9a968a160f315fab9bb9c8356d7
        Validity
            Not Before: May 12 20:01:22 2026 GMT
            Not After : May 13 20:01:22 2026 GMT
        Subject: CN=2cd8ee4af1a1c789455fa1776236e8dd591b7642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b0:8b:c1:ad:3d:47:41:0d:2b:7f:d7:1a:15:
                    d2:9e:b3:e9:61:3a:1f:44:0f:6c:4d:44:22:63:d4:
                    1a:1f:23:99:fe:d6:83:7a:35:3f:23:1b:1e:e7:d5:
                    b0:3e:94:8d:ea:aa:9b:18:c6:77:61:44:65:fd:61:
                    51:8f:7a:8f:5c:c7:5c:a9:81:e6:49:9a:ad:c4:fe:
                    51:d2:44:c5:0d:c2:99:aa:e4:49:53:ee:c5:e0:e0:
                    05:36:30:b7:6b:89:f2:d9:d0:8f:29:85:96:0f:94:
                    62:06:c6:65:f4:0c:b6:4f:19:8c:2a:d1:a4:74:8a:
                    7b:de:fb:11:d4:1e:81:ff:63:16:7f:89:39:82:77:
                    0c:87:3c:92:1e:10:77:b8:d7:0c:05:87:7d:5f:7c:
                    c6:e9:6e:87:bb:a3:a0:55:af:59:8d:55:0a:7c:2a:
                    f0:b4:38:05:94:99:77:bf:79:0f:e0:fd:e1:a9:f5:
                    02:a0:60:6a:69:a0:ba:27:8c:57:7b:3b:f4:8e:7d:
                    56:49:f3:6b:91:0e:fe:37:fd:1b:6b:5e:bb:e8:49:
                    ca:59:a0:6b:e0:b7:cb:92:1c:7c:3d:b8:fc:a9:4e:
                    c7:18:e0:2b:fb:77:ee:bf:b9:48:47:bd:31:c5:29:
                    94:c6:74:b7:62:68:f5:4b:13:bf:f6:ac:70:d1:6a:
                    26:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D8:EE:4A:F1:A1:C7:89:45:5F:A1:77:62:36:E8:DD:59:1B:76:42
            X509v3 Authority Key Identifier:
                keyid:E5:4D:09:20:47:DB:E9:A9:68:A1:60:F3:15:FA:B9:BB:9C:83:56:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5U0JIEfb6alooWDzFfq5u5yDVtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f7c636-0d1e-47f3-b05d-a7fd2f9e74cf/1/5U0JIEfb6alooWDzFfq5u5yDVtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ca:ca:28:f8:65:cf:29:09:f5:95:fb:ee:17:8a:04:ad:20:
         d5:6a:56:a8:04:12:43:cc:3e:9e:30:a4:4e:1a:e6:53:f8:33:
         06:52:c4:05:fd:3c:22:82:4a:8e:d2:fd:c1:b3:45:a2:2a:1c:
         cb:75:02:40:1d:da:c8:60:1a:4b:20:14:62:a2:74:59:1f:bb:
         70:92:fa:34:c8:0c:cc:28:dd:87:08:7a:6f:86:f2:74:9f:70:
         54:1e:70:b9:20:80:8b:4b:a8:9d:54:a4:c1:91:03:c6:2e:66:
         50:61:02:bc:23:3c:09:4e:79:6b:35:dd:4f:e0:af:59:13:77:
         9b:6b:0d:8f:d4:f4:44:0f:2f:c7:c9:90:5f:4f:82:ea:90:69:
         39:ab:0d:6b:d3:7d:3e:43:3c:3b:9c:07:00:56:4a:ac:b8:4f:
         4d:ef:62:28:b9:7d:54:26:b6:56:c9:c7:08:51:88:88:aa:71:
         d6:36:b3:55:64:cd:7d:ef:57:7a:63:cc:94:1b:b0:f3:3d:1a:
         92:a1:9e:3c:e9:c8:03:87:22:7b:a4:20:12:13:f7:7c:65:6b:
         e7:fd:73:9e:e2:3d:eb:71:9a:93:5e:93:ce:60:ad:65:2a:9f:
         b4:d1:da:be:44:58:e7:22:52:a6:76:68:f2:8c:a2:8b:9c:e5:
         b0:ca:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:28:35 2026 by rpki-client