Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
File:                     5H78nMPZxL0porvBVVH4LyXPEbo.mft (raw, json)
Hash identifier:          VrpO56z4YTqFouYrJpfim/hwb+Psaz/KMDdzqscJQpc=
Subject key identifier:   EA:CC:C0:CF:B4:9C:17:6F:56:F2:9A:A0:0C:5F:B3:10:6F:F4:91:B3
Authority key identifier: E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA
Certificate issuer:       /CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
Certificate serial:       019E1FB5F8D9AD49C43A5BF9D12DD6DC2FB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
Manifest number:          10BA
Signing time:             Wed 13 May 2026 05:01:19 +0000
Manifest this update:     Wed 13 May 2026 05:01:19 +0000
Manifest next update:     Thu 14 May 2026 05:01:19 +0000
Files and hashes:         1: 5H78nMPZxL0porvBVVH4LyXPEbo.crl (hash: L+9jc/5up8jx4UP3fQrFl1YV5hwGA7ESKOjO+2raLZk=)
                          2: vfg-SAjuqUJDpM-dI7gV1uCQ2uw.roa (hash: R/EtSB73ZGWrRnb/Gf2BJqZ0RYrtTKAiO9HiXzdMKyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 05:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:f8:d9:ad:49:c4:3a:5b:f9:d1:2d:d6:dc:2f:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47efc9cc3d9c4bd29a2bbc15551f82f25cf11ba
        Validity
            Not Before: May 13 05:01:19 2026 GMT
            Not After : May 14 05:01:19 2026 GMT
        Subject: CN=eaccc0cfb49c176f56f29aa00c5fb3106ff491b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0e:ad:70:e1:9d:86:02:f7:f8:dd:4d:d5:47:
                    00:85:fb:1d:3a:c4:21:34:0f:f6:f4:e3:98:56:7a:
                    91:40:9a:e0:3d:21:7e:cc:7b:36:14:b3:72:99:af:
                    c3:34:9d:5d:1b:da:a5:5d:69:20:77:65:66:b7:4d:
                    d6:80:94:0c:c6:1f:f4:57:a1:aa:49:36:5b:a6:3f:
                    09:c7:7d:9c:23:73:7d:4f:0f:b6:bd:03:a4:91:37:
                    43:87:40:02:25:74:1c:52:7a:6b:e2:60:c2:39:4c:
                    c8:a2:87:5f:66:7e:5a:4f:e8:30:ed:1c:ae:e4:77:
                    94:5e:db:df:a7:92:aa:88:ea:13:fd:32:ae:49:43:
                    5c:c0:b9:20:c8:41:b4:98:06:4e:38:f5:92:f9:e7:
                    be:ff:6b:26:f0:37:2f:88:bb:79:08:3d:62:15:07:
                    3d:7d:66:61:38:22:01:85:30:2a:b6:e0:76:dc:41:
                    7c:4d:bf:3a:97:e4:e1:49:b6:ed:90:13:24:9f:4c:
                    81:82:2f:c5:6e:f5:a6:f9:01:fb:ac:53:cf:35:22:
                    ad:a7:71:c9:28:9c:1f:ec:61:50:3a:4a:f5:0b:ee:
                    08:cf:01:92:90:b7:a2:3f:6c:6d:04:75:1d:74:b9:
                    b2:05:b9:30:8b:89:42:9e:7b:12:ed:e1:74:21:90:
                    3e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CC:C0:CF:B4:9C:17:6F:56:F2:9A:A0:0C:5F:B3:10:6F:F4:91:B3
            X509v3 Authority Key Identifier:
                keyid:E4:7E:FC:9C:C3:D9:C4:BD:29:A2:BB:C1:55:51:F8:2F:25:CF:11:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H78nMPZxL0porvBVVH4LyXPEbo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/248133-8670-4167-a195-6e2f588c0c7e/1/5H78nMPZxL0porvBVVH4LyXPEbo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:05:16:4e:45:46:bd:5d:45:a9:cc:ae:48:2f:04:60:ed:0f:
         7d:38:e4:19:fd:1a:c6:d6:2b:aa:6d:cd:eb:82:56:0c:36:27:
         ff:14:2d:19:a0:7d:c6:13:7d:07:2d:f1:23:2b:5d:01:03:34:
         aa:d7:9d:b9:f6:0c:90:7e:40:0f:51:7a:56:2f:76:8e:16:c1:
         c4:0a:2d:7d:76:6b:c1:0c:cd:f3:61:d2:34:e0:49:c6:63:d4:
         99:a5:3f:fe:42:0e:e3:38:81:26:1e:5d:3f:af:d0:95:50:93:
         77:06:bf:8b:dd:fd:f2:48:94:9d:2b:a9:f1:00:e3:3f:47:41:
         1e:2c:69:4a:ce:8e:55:d4:3f:2c:29:46:96:75:12:3c:d1:a3:
         3e:0b:6d:dc:8a:27:0a:c4:ec:1d:0d:61:b4:e7:76:78:00:6b:
         5b:27:66:6e:67:e9:9d:b1:70:ec:a3:18:f1:be:5e:ed:75:78:
         04:e9:b6:c5:6b:0c:4b:8a:fa:5a:4e:e3:b4:9d:cb:d8:a4:63:
         c0:67:5b:39:c2:d3:2c:50:74:35:bc:d6:46:24:d8:fd:be:e1:
         43:46:fe:2a:0d:ff:0f:60:e0:22:ba:f7:f9:51:18:4f:b5:eb:
         7c:c5:a0:cd:d9:d9:0e:9f:e9:1c:c3:b3:7f:5b:16:3e:0a:63:
         a6:38:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:48:49 2026 by rpki-client