Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
File:                     Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft (raw, json)
Hash identifier:          LwasYiygryORN+vRIbZt+37dr+sHm9G1QOWj3bim+5Q=
Subject key identifier:   94:34:89:E7:96:D1:92:FC:AC:F5:D1:70:F4:36:E9:BA:8D:92:1C:15
Authority key identifier: 05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A
Certificate issuer:       /CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
Certificate serial:       019E1C0FEC136734ED1E4AD3BAF40AD68424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
Manifest number:          05F7
Signing time:             Tue 12 May 2026 12:01:05 +0000
Manifest this update:     Tue 12 May 2026 12:01:05 +0000
Manifest next update:     Wed 13 May 2026 12:01:05 +0000
Files and hashes:         1: Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl (hash: oWhXHpwwWC5OPX7ngkyKMWIZ1Y3UFu/Z2cfGCkKKMjo=)
                          2: hcqZCPDvPSfZpsnstBmJSYUoG0E.roa (hash: 2rsfgP2jZdPy9F0m+kXCLPK5gqhv9//1FnvVgzLaUiw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:0f:ec:13:67:34:ed:1e:4a:d3:ba:f4:0a:d6:84:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ce4dd28801b283bf851b5c00d00eb8b514a55a
        Validity
            Not Before: May 12 12:01:05 2026 GMT
            Not After : May 13 12:01:05 2026 GMT
        Subject: CN=943489e796d192fcacf5d170f436e9ba8d921c15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7d:81:1b:db:4b:4a:9a:69:6c:12:69:01:8d:
                    56:ba:a0:1f:1c:a9:d2:60:2b:31:a8:c1:a6:4c:42:
                    9c:f9:8e:da:e9:ba:b4:96:14:f1:17:b7:ad:ec:db:
                    c1:27:3b:5e:15:86:b2:56:63:f8:38:f7:ef:00:2e:
                    e4:e8:02:91:0d:53:0e:03:fc:40:12:ca:8b:f3:66:
                    17:b4:35:1c:fc:e0:90:c7:55:75:b0:29:60:75:8a:
                    d3:b2:3c:b3:59:fa:e5:d8:63:43:86:c6:bd:e6:99:
                    38:91:c0:0a:5f:5f:bf:82:22:40:42:c2:02:2a:5b:
                    f2:34:ae:4b:2f:9b:79:14:1d:83:eb:73:1b:55:8e:
                    7f:3c:82:9f:00:46:09:70:20:68:8f:1b:0d:57:73:
                    04:d4:23:f9:54:a8:dc:db:a0:55:e1:9b:59:e4:7a:
                    c4:32:f3:2e:48:eb:55:b7:e0:4a:f8:e8:bd:fe:67:
                    1c:a1:4c:a4:23:6f:f3:6a:7f:af:a5:52:8f:dd:97:
                    30:d6:d3:9b:45:22:35:06:15:a0:31:f0:6e:bd:a6:
                    65:46:a0:59:42:39:fd:37:49:73:06:06:93:b4:36:
                    4d:6f:ce:ab:b7:1e:69:b9:ef:81:67:77:ef:04:b4:
                    cc:97:9d:20:e6:d6:4b:0e:53:5e:09:3f:b7:2f:10:
                    f7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:34:89:E7:96:D1:92:FC:AC:F5:D1:70:F4:36:E9:BA:8D:92:1C:15
            X509v3 Authority Key Identifier:
                keyid:05:CE:4D:D2:88:01:B2:83:BF:85:1B:5C:00:D0:0E:B8:B5:14:A5:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc5N0ogBsoO_hRtcANAOuLUUpVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/ef6461-a0ef-4c19-9e1d-f223dacb6017/1/Bc5N0ogBsoO_hRtcANAOuLUUpVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:aa:b6:c6:52:f7:2d:46:d0:2a:cb:1a:8b:c9:e4:23:50:e8:
         37:54:db:12:f6:84:57:b2:07:33:04:b0:62:89:10:72:52:05:
         d6:61:8e:81:97:e3:be:23:b9:fb:df:95:d9:0b:1a:02:cc:5a:
         fa:68:a2:90:15:33:b6:e2:bd:00:9b:70:22:42:95:a1:e8:53:
         dc:6c:74:f2:cd:f8:27:ab:a0:eb:72:02:0d:b4:49:96:4a:c1:
         3b:98:bf:e5:c7:25:07:92:93:0a:fa:13:9c:77:88:03:68:f0:
         b3:56:07:3a:d2:68:b3:74:32:2f:30:ab:d4:4f:d4:ea:2f:1a:
         50:e1:b4:d6:f4:f7:f2:a4:5e:95:83:96:3d:b1:e6:7e:39:f8:
         e7:4a:6a:e8:15:17:1c:ac:63:c8:a7:03:fb:ec:96:51:c3:0c:
         c8:ea:bc:4e:a9:fb:b9:98:98:f6:86:3e:0a:cf:a9:57:5c:19:
         b5:46:c9:90:8e:b3:53:74:8f:04:20:b4:d5:4e:96:9a:7f:e3:
         e3:ee:d5:2a:ba:b6:e9:92:99:b1:97:46:07:13:c1:cb:dc:8a:
         ab:43:84:75:6c:bf:da:3a:e1:d1:52:3e:ae:22:b1:97:46:d9:
         86:aa:13:b1:d8:86:14:db:6e:2d:5f:23:ad:4b:0b:81:d4:b4:
         11:0d:b3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:05 2026 by rpki-client