Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
File:                     v141bOg5-NOTBn0fCbfdHFWgHlc.mft (raw, json)
Hash identifier:          R6TGSNwb2QN6P4vR3TrYOH9H3SDfISWZmHbMLsVCTPI=
Subject key identifier:   5A:3C:94:C2:63:A8:CD:62:5C:76:44:6E:A5:4A:1B:A1:34:6C:3B:1D
Authority key identifier: BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57
Certificate issuer:       /CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
Certificate serial:       019E1D907C4BCF399501A550CD96381F819C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
Manifest number:          05FF
Signing time:             Tue 12 May 2026 19:01:08 +0000
Manifest this update:     Tue 12 May 2026 19:01:08 +0000
Manifest next update:     Wed 13 May 2026 19:01:08 +0000
Files and hashes:         1: v141bOg5-NOTBn0fCbfdHFWgHlc.crl (hash: 77fXUJhsUunMu7uur2/lvehGi0ok1gvoeO0vZs7ZTTo=)
                          2: vAouvOE7JSaMC475TpDqm8JvBho.roa (hash: hrbVWv0InqnmWPgkOG3ics28eJAV30J6nL+Bc/a8QUo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:7c:4b:cf:39:95:01:a5:50:cd:96:38:1f:81:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5e356ce839f8d393067d1f09b7dd1c55a01e57
        Validity
            Not Before: May 12 19:01:08 2026 GMT
            Not After : May 13 19:01:08 2026 GMT
        Subject: CN=5a3c94c263a8cd625c76446ea54a1ba1346c3b1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a1:9c:af:9a:2e:0b:7b:f0:d6:d0:42:ec:7e:
                    23:50:2d:49:87:55:6b:1c:d3:57:16:a8:4e:b0:9d:
                    44:3d:71:a7:49:fb:35:7f:1e:0f:aa:e9:13:e9:17:
                    c8:90:db:87:01:49:a6:c1:3f:7b:2d:cd:ff:47:32:
                    41:54:0c:16:a7:7c:09:17:dd:ee:3b:c0:20:ea:b8:
                    df:8e:77:97:b4:4b:a1:6f:7c:57:c8:26:69:ff:6e:
                    cd:37:63:d2:05:aa:8a:a4:af:8b:f7:03:cf:49:32:
                    1b:1a:e8:a3:6e:8f:94:a5:1e:fe:d0:08:1c:0c:bc:
                    6a:72:39:87:61:21:72:a6:1c:81:2d:13:a2:2d:08:
                    1e:10:77:e7:8b:c4:17:f3:0e:2b:75:b1:a6:78:f5:
                    3e:7d:b2:64:00:d0:a6:90:98:c5:aa:ac:21:1f:19:
                    2f:09:73:79:a5:34:6f:ad:21:34:26:e4:e6:64:2a:
                    0f:9d:c8:9f:f0:eb:38:87:90:a2:52:50:26:88:76:
                    bb:cd:d8:81:98:38:3f:28:7e:90:40:e7:64:c1:33:
                    89:7c:2c:2d:41:d6:f6:7c:18:08:fa:6c:91:04:43:
                    e8:01:33:a1:aa:84:4a:74:a9:4e:cc:35:f6:91:d6:
                    d5:72:06:a8:b2:0f:bb:21:d4:dc:57:e0:fa:72:98:
                    43:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:3C:94:C2:63:A8:CD:62:5C:76:44:6E:A5:4A:1B:A1:34:6C:3B:1D
            X509v3 Authority Key Identifier:
                keyid:BF:5E:35:6C:E8:39:F8:D3:93:06:7D:1F:09:B7:DD:1C:55:A0:1E:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v141bOg5-NOTBn0fCbfdHFWgHlc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/7c3b6d-d5a6-4efd-99bf-c9880090e3c5/1/v141bOg5-NOTBn0fCbfdHFWgHlc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:7d:b9:ef:05:7e:40:6a:1e:43:d6:23:03:a5:92:31:5b:73:
         c1:fe:10:38:2f:cb:36:ae:b6:45:55:ac:f1:68:17:4b:37:39:
         79:9b:58:b3:5b:e5:76:4b:fa:ae:ce:02:b5:9d:b0:af:bf:f7:
         d6:d7:84:87:6b:e2:25:c2:7a:6f:fb:d9:c6:b4:44:55:d1:9f:
         f5:c8:e3:bc:ec:66:3f:37:8a:18:56:a7:01:a7:32:c9:d5:72:
         00:30:0e:bb:ee:7b:06:f8:fe:f2:1f:ae:3f:13:fa:f9:ed:1a:
         42:e9:25:1f:6f:72:11:94:24:a0:44:4e:93:45:b0:90:a1:bb:
         9d:6b:93:9f:11:f9:20:42:17:b4:2b:a1:07:7a:f2:27:75:e4:
         9e:b6:35:e8:72:d8:e0:4d:52:30:4c:54:84:e5:7f:fd:fc:ca:
         fc:ea:da:ac:9a:cb:50:29:b0:c8:df:4e:b4:41:79:2c:a0:aa:
         26:c8:27:7d:96:8a:4c:d4:6c:04:11:96:2a:d1:1e:8e:46:12:
         76:a3:e6:63:59:eb:19:5b:1d:18:5e:ce:a8:7d:28:6a:48:04:
         0e:f1:6e:96:7c:62:ad:4c:6d:29:cf:cc:00:2e:e7:87:1e:0a:
         4a:5f:ba:2a:75:b0:82:40:82:c0:19:98:5e:0c:ea:35:f0:1a:
         a2:89:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:03:30 2026 by rpki-client