Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
File:                     5pySw7nuYLoBPZQYIgQvJQBMlew.mft (raw, json)
Hash identifier:          SE7iiErHsIQrskhaWyMfIBrKgh3jfUAfL0s/fQNUGWY=
Subject key identifier:   33:42:28:D7:9C:22:D2:33:C5:F4:27:81:C9:4C:77:54:1C:60:64:B4
Authority key identifier: E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC
Certificate issuer:       /CN=e69c92c3b9ee60ba013d941822042f25004c95ec
Certificate serial:       019E1C479455B6AE656C673E9DA40EF68719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 13:01:53 +0000
Manifest this update:     Tue 12 May 2026 13:01:53 +0000
Manifest next update:     Wed 13 May 2026 13:01:53 +0000
Files and hashes:         1: 5pySw7nuYLoBPZQYIgQvJQBMlew.crl (hash: cSMA8qbDXv3ME3lzMJhEGbMz2wRtyBYe4kE0H0skWdE=)
                          2: zK7MrHgxjsLskIcafxYh3JdxNEE.roa (hash: JFbMIHqLCbVbpI4VRFmIo8CC2nBPdhcZqjjlHz94hCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:94:55:b6:ae:65:6c:67:3e:9d:a4:0e:f6:87:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e69c92c3b9ee60ba013d941822042f25004c95ec
        Validity
            Not Before: May 12 13:01:53 2026 GMT
            Not After : May 13 13:01:53 2026 GMT
        Subject: CN=334228d79c22d233c5f42781c94c77541c6064b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:15:37:1d:0f:6b:48:90:db:a1:b1:2f:6f:86:
                    f5:af:41:09:53:93:82:80:63:b4:44:1c:c5:c6:cd:
                    7e:7d:4b:e3:28:ac:1b:15:41:5a:a8:42:68:0f:53:
                    fb:49:f6:56:ee:a8:7b:5c:69:04:20:89:f7:39:75:
                    8a:c9:c0:37:52:04:14:b3:cc:4c:6b:e6:0b:a3:3a:
                    0a:5a:43:28:22:0c:e2:cf:e4:fc:62:a6:00:90:c1:
                    98:10:a2:50:66:be:55:16:7d:ff:b1:c2:e7:43:1b:
                    5e:e9:83:98:9f:54:44:b1:14:0e:67:8b:9e:74:8b:
                    25:60:96:a5:9b:45:1e:1f:98:37:84:e0:47:8b:1d:
                    c9:68:59:71:be:6b:e4:6b:70:a6:ff:c8:b2:ee:b1:
                    51:55:f8:a4:7a:5f:62:de:d4:95:02:77:61:a1:6c:
                    c3:0d:cd:c0:5c:86:74:58:4c:ab:07:5a:5d:2f:d9:
                    bc:5c:0e:4e:e1:ad:5a:9d:b2:6e:a7:56:43:6d:f2:
                    9e:58:ee:b8:28:37:4b:9a:29:a9:a6:fc:8b:a9:99:
                    94:39:04:99:0e:b6:6d:dc:23:1f:16:f6:99:ec:c9:
                    23:b4:ab:96:da:98:1c:00:9a:d0:45:e2:4f:b5:ac:
                    86:56:aa:a8:eb:2a:77:97:d0:c2:13:e6:28:00:72:
                    3b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:28:D7:9C:22:D2:33:C5:F4:27:81:C9:4C:77:54:1C:60:64:B4
            X509v3 Authority Key Identifier:
                keyid:E6:9C:92:C3:B9:EE:60:BA:01:3D:94:18:22:04:2F:25:00:4C:95:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pySw7nuYLoBPZQYIgQvJQBMlew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9b84c3-d7fd-43d8-a8f1-9137103c93ef/1/5pySw7nuYLoBPZQYIgQvJQBMlew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:c9:71:cc:1b:d2:75:93:03:08:31:71:f5:11:76:2d:5c:a2:
         b0:b0:73:b9:5b:1b:f1:36:d5:75:95:2d:1c:8b:32:5b:76:cd:
         d4:90:12:51:8d:74:63:27:aa:d4:ea:18:dd:41:50:80:6d:60:
         9d:07:9b:59:b3:5d:cf:68:79:28:e9:83:36:17:32:e9:d5:a8:
         ce:52:fb:79:20:08:a9:e8:9f:ed:58:fb:fd:16:1f:83:3a:ee:
         65:ff:b7:34:fb:7d:02:4e:b6:a1:f9:ca:7a:ad:56:fc:bc:de:
         1f:6c:37:7f:16:6e:d2:52:61:70:e9:27:65:fb:98:05:37:07:
         bb:97:1a:61:32:aa:1f:ee:9c:26:82:85:f8:f8:9f:40:f2:77:
         c4:c2:40:15:18:83:16:c0:7c:e1:f4:29:dc:b2:fd:2d:4a:a8:
         b8:69:58:21:bf:c3:e8:02:db:3b:d1:75:dc:88:3e:23:f1:22:
         9f:5b:13:e8:36:fd:d5:6f:31:30:ca:76:0e:64:75:b0:40:3f:
         b1:24:68:14:25:d6:ca:d4:6f:6b:de:aa:e1:ff:12:30:c0:dc:
         60:ce:0c:55:37:d7:99:b0:39:c4:80:91:3f:86:8b:5d:13:e9:
         c4:8e:da:5a:90:da:62:b2:83:d3:50:1c:89:12:38:4b:9b:73:
         a0:f2:82:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:35 2026 by rpki-client