Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File:                     jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier:          3qnXlITEU4LoB++bPPtNczJ3JVQoWjSHcq56fcUi6eQ=
Subject key identifier:   EE:C7:E6:40:6A:20:1B:96:0F:F9:C0:A4:D0:80:46:F1:26:D1:F4:08
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer:       /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial:       019E1E35F6847354713E92D2321058A9472C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number:          05A4
Signing time:             Tue 12 May 2026 22:01:53 +0000
Manifest this update:     Tue 12 May 2026 22:01:53 +0000
Manifest next update:     Wed 13 May 2026 22:01:53 +0000
Files and hashes:         1: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: vSmznbAnrMUfGoqADrM1Qr1wJyJdIjr6YJzUnFQXBRA=)
                          2: mq6jdAhoY64n-S89EB8sdE29Spk.roa (hash: bvsiwXRJB+1a6z+HtrBRTvbHG/Lsx8kIyh6UkUd8Cek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:f6:84:73:54:71:3e:92:d2:32:10:58:a9:47:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
        Validity
            Not Before: May 12 22:01:53 2026 GMT
            Not After : May 13 22:01:53 2026 GMT
        Subject: CN=eec7e6406a201b960ff9c0a4d08046f126d1f408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:9d:a8:43:42:4c:a0:14:c6:cc:94:07:36:
                    5b:c2:ef:29:c7:1f:f5:8c:5b:8a:87:b8:cc:0b:0d:
                    e2:6c:97:1f:93:2c:c4:c9:22:13:42:48:c6:1a:76:
                    c5:11:71:c5:a7:60:4f:36:db:8a:e1:8e:5d:3b:f3:
                    5c:40:8c:ca:00:98:c5:6f:fc:9b:eb:a9:67:95:c8:
                    aa:7b:8c:06:8d:74:83:53:ab:8d:1a:cd:b7:84:78:
                    d5:f7:b6:35:3d:7a:65:ab:e3:af:11:48:8a:92:73:
                    c6:2e:65:1e:49:ce:77:40:ae:c9:c6:bf:c7:46:5a:
                    6f:54:d9:5e:f0:2b:36:0d:46:12:43:42:58:47:ae:
                    c7:d8:7b:a1:df:17:6f:69:23:61:e9:49:d9:7d:93:
                    8e:ec:e8:a3:a4:15:e1:6f:1a:ee:b3:68:87:1f:06:
                    44:eb:5e:83:37:3f:e3:7c:6f:4d:6b:ee:15:9b:96:
                    a3:f4:f4:a7:f0:94:da:97:87:d8:af:7f:17:d1:35:
                    e1:04:d4:16:8a:46:ee:61:8b:6c:8c:66:76:b0:c1:
                    1d:0d:42:89:1b:84:e3:d6:4b:fd:11:bf:4f:ea:61:
                    73:80:de:4e:8e:e2:0f:f6:aa:18:94:b3:09:ca:6a:
                    90:8f:d9:d9:9c:31:3c:58:82:4f:64:9a:a5:1c:e5:
                    30:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C7:E6:40:6A:20:1B:96:0F:F9:C0:A4:D0:80:46:F1:26:D1:F4:08
            X509v3 Authority Key Identifier:
                keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d9:22:6b:e0:19:f5:6f:df:a3:c8:ee:68:cd:79:1f:32:c1:
         26:cf:e4:5a:4f:90:c1:a1:83:de:d8:e6:8a:34:c2:86:3e:15:
         3d:26:ff:86:e2:1f:aa:b1:ba:23:1c:f2:3a:80:ae:a1:fa:97:
         13:d0:01:33:9c:48:cf:35:75:45:cd:e5:55:f4:42:65:6e:7f:
         49:97:49:e4:fa:3a:0c:6e:59:bb:fa:4a:d3:6d:a7:6c:f9:de:
         46:08:51:cb:92:9f:68:ab:9a:12:37:5d:2a:3c:4f:74:01:41:
         36:ee:91:50:c1:70:1b:a5:94:67:42:c3:d1:97:e0:42:19:53:
         a9:39:88:99:bb:66:6b:39:10:82:82:ef:04:80:44:97:f0:cf:
         28:4c:f9:79:12:86:a6:95:62:23:2f:03:1e:85:b0:03:2a:74:
         63:17:d6:0a:86:8a:d8:82:d3:4a:11:2a:36:27:cd:97:23:02:
         40:9f:f1:51:5c:18:c1:50:44:3a:0c:cf:82:bb:db:48:59:8c:
         25:4c:b9:f5:aa:c5:46:63:e7:a8:89:76:5f:c0:e3:3c:c6:c7:
         50:f4:87:ea:32:d6:22:ab:31:ac:9f:cd:2a:f8:3b:d2:ff:8b:
         5a:a3:22:43:d0:df:93:cc:42:a3:b4:ae:3e:d7:cb:82:f5:6b:
         27:2c:20:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:21 2026 by rpki-client