Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
File:                     5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft (raw, json)
Hash identifier:          lQnyM4qgFLhWJZZzdLaJfiX9qSeWi5wnjQl4LlQUf5k=
Subject key identifier:   93:DC:FF:FF:F4:99:42:E9:A6:55:7D:1C:98:92:E1:4E:E8:6D:52:2E
Authority key identifier: E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94
Certificate issuer:       /CN=e6157528a9cce92518f36bf0a81b7901a650ae94
Certificate serial:       019E1CEBECEEB6C029085B0DA6C51047163F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
Manifest number:          1894
Signing time:             Tue 12 May 2026 16:01:24 +0000
Manifest this update:     Tue 12 May 2026 16:01:24 +0000
Manifest next update:     Wed 13 May 2026 16:01:24 +0000
Files and hashes:         1: 5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl (hash: cLGLY564V59M2/UK24smMtExJbQ/FPAssANvpAxfopw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:eb:ec:ee:b6:c0:29:08:5b:0d:a6:c5:10:47:16:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6157528a9cce92518f36bf0a81b7901a650ae94
        Validity
            Not Before: May 12 16:01:24 2026 GMT
            Not After : May 13 16:01:24 2026 GMT
        Subject: CN=93dcfffff49942e9a6557d1c9892e14ee86d522e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:8a:1e:c1:1c:88:c3:5c:9f:85:0c:0f:5c:
                    c7:4f:b8:a0:16:7c:8e:76:45:c0:38:09:26:ec:98:
                    f1:86:71:b1:af:87:74:64:60:c2:49:68:30:7f:79:
                    3e:ba:ba:15:1d:04:0a:49:c2:8e:a6:e7:13:e0:28:
                    62:52:9b:4a:43:b8:1d:f4:9e:25:78:14:89:e7:f7:
                    64:22:fe:33:86:4e:93:bb:bb:81:83:c6:83:ec:a5:
                    b5:2b:61:d3:bc:b4:09:46:59:b1:53:5b:56:db:4b:
                    78:aa:48:2b:79:b1:b1:39:63:72:f3:c8:00:6b:21:
                    00:04:7c:67:4d:e1:9c:b1:86:69:dc:e7:b9:fb:0a:
                    b9:c5:39:2c:c0:14:bf:c1:f3:d8:44:a0:a3:26:f1:
                    df:47:52:a2:93:f4:ba:5c:d0:02:34:6a:39:e3:b9:
                    3c:f8:b4:49:2f:8e:05:43:77:be:b9:81:73:43:3b:
                    30:16:fa:5f:ff:f2:09:7d:39:b2:38:d0:e3:5d:4b:
                    79:5f:bd:24:b6:e2:ef:0f:85:62:06:f0:fc:6b:62:
                    64:ab:73:de:17:a8:d2:a3:37:de:9d:43:cf:60:e0:
                    90:61:3c:01:ce:20:99:6e:42:c2:60:da:79:09:ea:
                    a7:5d:0d:29:8b:17:f5:5b:c8:48:14:77:17:44:b2:
                    87:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DC:FF:FF:F4:99:42:E9:A6:55:7D:1C:98:92:E1:4E:E8:6D:52:2E
            X509v3 Authority Key Identifier:
                keyid:E6:15:75:28:A9:CC:E9:25:18:F3:6B:F0:A8:1B:79:01:A6:50:AE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hV1KKnM6SUY82vwqBt5AaZQrpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/eb8484-893f-400d-9081-7d1b2d9a2405/1/5hV1KKnM6SUY82vwqBt5AaZQrpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:88:cb:e4:d1:6b:c9:3b:fc:f4:27:fc:89:ba:7b:44:a2:
         ec:21:a4:16:16:61:b9:38:8e:a5:1b:08:d1:8b:56:c2:3e:97:
         8b:2e:b4:84:bc:03:9e:6c:42:35:bb:b6:82:7d:08:2c:30:da:
         04:5a:09:62:6a:3c:48:63:75:22:8f:85:c0:79:c5:01:e4:9e:
         1b:99:0e:86:84:be:e7:fd:5a:2c:e7:2d:07:ee:c6:45:13:dd:
         2a:43:5e:c0:0c:b6:76:fc:e6:4a:e9:1a:e4:35:fc:51:f3:8d:
         d0:18:62:8e:fd:ae:1d:57:cc:e8:e9:d6:43:57:67:85:bf:2e:
         be:fd:e3:4a:d4:ed:af:d0:69:dc:9e:eb:58:7d:ae:05:8e:e3:
         b8:4c:e1:84:dd:3e:41:9d:76:01:6a:7a:55:38:d8:c5:8b:24:
         12:db:4d:e2:57:64:58:2e:20:0b:4e:52:4d:7c:f5:49:a0:2a:
         97:cf:58:f2:9a:cf:3d:23:3f:43:71:76:f8:37:0c:e3:db:4e:
         5d:31:f6:0b:ba:68:61:0a:28:f7:46:5f:5c:4f:2c:94:a6:bd:
         30:e9:27:c1:ea:1b:5f:ea:fb:15:25:75:f9:90:23:47:65:f0:
         7f:18:00:22:49:37:12:e8:ab:8f:a7:d8:16:0d:38:6c:0d:05:
         9c:9e:4a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:12 2026 by rpki-client