Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft
File:                     5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft (raw, json)
Hash identifier:          5crpo8ZuwGArPgv1qzZ5/qBpsAXuJDoftDnOxXoaNQg=
Subject key identifier:   38:AF:D7:17:79:0B:6E:41:82:75:9E:54:46:D8:DD:A4:A3:DD:B3:2A
Authority key identifier: E6:F1:4F:F2:DC:79:59:85:69:96:06:7F:D8:E9:87:BE:6A:11:7F:E9
Certificate issuer:       /CN=e6f14ff2dc7959856996067fd8e987be6a117fe9
Certificate serial:       019E1CEB6AEAD438A344AADCE480180D56F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vFP8tx5WYVplgZ_2OmHvmoRf-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft
Manifest number:          02FA
Signing time:             Tue 12 May 2026 16:00:50 +0000
Manifest this update:     Tue 12 May 2026 16:00:50 +0000
Manifest next update:     Wed 13 May 2026 16:00:50 +0000
Files and hashes:         1: 5vFP8tx5WYVplgZ_2OmHvmoRf-k.crl (hash: y2AhCiixY11BuGKRFSu6hwseM2NfUAvcSmWmIqixTqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5vFP8tx5WYVplgZ_2OmHvmoRf-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:6a:ea:d4:38:a3:44:aa:dc:e4:80:18:0d:56:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f14ff2dc7959856996067fd8e987be6a117fe9
        Validity
            Not Before: May 12 16:00:50 2026 GMT
            Not After : May 13 16:00:50 2026 GMT
        Subject: CN=38afd717790b6e4182759e5446d8dda4a3ddb32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9d:5b:b4:cf:de:9d:ca:09:2c:75:17:06:b5:
                    3e:85:6e:99:fd:3c:da:70:91:05:16:f5:3c:54:be:
                    89:9c:f0:e1:b8:32:3c:8f:76:5f:6c:79:1c:08:4e:
                    e7:7c:43:a3:b5:9a:10:9a:08:1d:5f:2f:0a:9c:ef:
                    03:e8:52:1f:f3:ab:d2:b1:6e:18:bf:5f:61:58:3b:
                    e3:f6:d3:9d:d4:db:34:f7:8d:f1:8c:e1:2a:d9:be:
                    90:62:86:5d:24:f9:d2:80:81:e4:d4:aa:7e:a6:99:
                    6e:37:0c:7e:05:81:da:32:53:e7:19:e6:5c:5c:4d:
                    52:4b:d6:bc:aa:1b:1b:4a:d2:aa:e9:a2:f0:6d:b5:
                    e5:8f:4c:72:49:16:82:1c:73:c1:f5:d9:a9:7a:86:
                    91:fa:48:c5:c4:35:7b:05:6a:d9:cf:5a:c2:be:0a:
                    5e:0c:f5:a4:6a:99:f9:c9:33:4e:a2:eb:d2:b1:13:
                    97:d2:a8:21:68:b4:5d:c8:07:98:6c:66:d6:3c:a1:
                    fb:7b:c8:ae:a7:0c:ba:8a:30:fc:ae:09:39:54:fb:
                    52:c6:b2:ae:b0:f7:ea:e5:f8:17:51:03:22:e4:43:
                    b9:da:1d:74:db:82:0e:d1:c4:51:f5:c9:cc:6a:f9:
                    88:3b:57:e8:05:7d:3d:9e:b5:1a:09:65:1b:8d:83:
                    53:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:AF:D7:17:79:0B:6E:41:82:75:9E:54:46:D8:DD:A4:A3:DD:B3:2A
            X509v3 Authority Key Identifier:
                keyid:E6:F1:4F:F2:DC:79:59:85:69:96:06:7F:D8:E9:87:BE:6A:11:7F:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vFP8tx5WYVplgZ_2OmHvmoRf-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f8e315-05d9-4e9d-ab2c-a5326f65e90c/1/5vFP8tx5WYVplgZ_2OmHvmoRf-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:93:96:d5:b5:d5:4d:97:de:f4:b3:9c:3a:d6:f6:e9:39:3f:
         b1:ac:67:5e:88:7b:dd:8c:9c:a0:c9:a8:4b:6a:0c:1b:ba:83:
         1c:2c:5b:d5:2a:d6:36:c5:99:eb:f3:c5:e5:f7:e6:d9:1c:b5:
         0d:ef:bb:23:78:30:90:f0:25:ad:80:c8:50:29:86:ad:37:21:
         1e:b3:21:52:99:ea:72:b5:05:ce:f6:b4:32:02:d2:fa:88:90:
         cf:57:30:8f:26:e2:76:6e:8a:d3:7f:ad:85:43:26:58:46:5c:
         89:a2:76:6c:d6:4a:50:10:35:13:9a:3c:37:96:48:0f:68:7c:
         24:a4:d2:11:17:60:db:40:4e:67:8f:ac:2d:f4:38:b8:af:ba:
         f3:29:c5:10:f2:5d:ae:b0:9c:84:c5:f8:c0:5f:02:ee:db:45:
         8a:20:24:38:c5:9b:e0:5e:65:97:c9:69:0a:4c:13:b2:15:7a:
         47:0c:e5:f5:92:74:07:d2:7a:3a:bf:5f:db:bb:62:3d:29:57:
         e8:00:3f:c0:5d:b8:f9:80:ce:93:4e:28:35:e9:5c:b0:80:ff:
         c7:18:5b:ea:b5:52:66:ec:7f:58:5f:2e:4f:65:f6:39:27:46:
         43:2b:f3:69:76:e9:75:30:08:2f:80:e8:5d:6c:f8:71:86:ce:
         38:d9:cb:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:49 2026 by rpki-client