Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
File:                     U1sc1e5esD379tQl1peejVNQFbw.mft (raw, json)
Hash identifier:          wlLJkKX1mMZgq1eVbeoAUw5RIkDA7cwKZgxG1rtqkmA=
Subject key identifier:   D3:4A:EC:86:51:41:CC:1F:B8:42:AA:65:84:5F:D2:B7:59:13:BA:A1
Authority key identifier: 53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC
Certificate issuer:       /CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
Certificate serial:       019E1C46D308A4F700D4254CAEE70C9FF269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
Manifest number:          05EB
Signing time:             Tue 12 May 2026 13:01:04 +0000
Manifest this update:     Tue 12 May 2026 13:01:04 +0000
Manifest next update:     Wed 13 May 2026 13:01:04 +0000
Files and hashes:         1: U1sc1e5esD379tQl1peejVNQFbw.crl (hash: FWwpQjvSw4b6iJKUHKuaRThHVIf4mMM6Tzidq/Te40k=)
                          2: gG12zQ9GIzWIe8J-nL_3zIACec4.roa (hash: 7EVnJBXzQgBi1RMypgklddOJkUa6XyxYAb4uWOaA9Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:d3:08:a4:f7:00:d4:25:4c:ae:e7:0c:9f:f2:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=535b1cd5ee5eb03dfbf6d425d6979e8d535015bc
        Validity
            Not Before: May 12 13:01:04 2026 GMT
            Not After : May 13 13:01:04 2026 GMT
        Subject: CN=d34aec865141cc1fb842aa65845fd2b75913baa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c6:87:c3:a5:d9:65:fd:db:dd:c1:0a:3d:cf:
                    17:f1:c7:70:64:50:20:a0:f9:c4:24:aa:4c:69:83:
                    2a:23:12:07:85:38:9f:5f:52:0e:16:56:6c:c2:39:
                    be:ae:01:88:72:bf:ef:2e:89:06:32:cc:0b:ce:f4:
                    1b:26:ef:c4:c7:60:b0:df:bf:ff:bf:3d:82:3d:3f:
                    9f:a9:ba:fd:76:1d:5b:a8:dd:04:16:72:34:11:ba:
                    5c:cd:3f:39:98:28:2b:9a:2c:0c:63:90:26:3e:21:
                    4f:25:d7:18:83:28:89:54:2a:25:7c:47:96:98:fd:
                    d7:13:05:73:65:9d:f7:b3:fb:60:d0:b8:7d:1e:99:
                    29:2f:06:d0:f8:bb:75:c2:ac:a8:95:fe:7e:93:c7:
                    3a:70:7d:dc:24:46:9c:c1:92:e2:0d:f9:3a:27:42:
                    85:6c:c1:6a:5c:06:b4:a3:35:bb:be:9e:59:14:01:
                    e3:8c:e5:6d:22:c3:3a:80:5f:5f:b6:ed:77:4c:2c:
                    3c:e5:2f:ba:43:be:29:23:3b:86:85:72:80:6e:14:
                    a0:32:75:d5:50:2d:91:37:20:bd:7e:5c:0a:9f:24:
                    e7:78:ce:85:17:59:76:4e:d0:a3:79:16:42:d4:96:
                    e2:a1:fb:ff:f1:01:e6:cd:15:c7:b0:60:22:ba:36:
                    e8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4A:EC:86:51:41:CC:1F:B8:42:AA:65:84:5F:D2:B7:59:13:BA:A1
            X509v3 Authority Key Identifier:
                keyid:53:5B:1C:D5:EE:5E:B0:3D:FB:F6:D4:25:D6:97:9E:8D:53:50:15:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1sc1e5esD379tQl1peejVNQFbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b60fb5-2fda-4def-96f9-e2b9f6dbe000/1/U1sc1e5esD379tQl1peejVNQFbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:50:82:4e:57:27:ed:5c:7d:7f:42:94:32:26:4a:af:ff:41:
         91:29:3f:7a:22:88:6f:c1:38:82:4c:97:c3:36:1b:1f:dc:28:
         ec:9d:e3:ed:6c:ef:96:06:44:dd:5d:fe:a6:84:ce:92:9b:3c:
         55:e0:e1:c1:be:3e:3f:93:3e:1c:a4:cc:61:c6:9a:f8:ef:e1:
         3c:f3:2c:b0:82:de:cf:f7:b8:35:be:dc:33:13:95:36:0a:7b:
         0b:1a:10:43:6f:20:c9:43:40:22:92:21:8f:1a:54:29:8e:55:
         d0:35:6b:78:8e:20:17:a4:19:d2:bb:b6:99:a6:5f:31:01:de:
         1e:bc:a6:44:41:e9:f2:23:c0:f4:ee:75:16:ba:e5:98:05:fc:
         22:cc:b0:57:6d:21:5b:34:25:2a:f7:67:42:6d:f3:38:0b:b9:
         82:d8:40:ef:c7:65:64:36:e9:62:a4:d9:c3:34:34:65:69:ea:
         1e:e8:85:73:60:07:3d:9a:34:17:dc:93:da:18:c3:0f:2b:c5:
         a8:f3:3f:d7:1a:01:78:05:53:71:9c:1e:9f:21:2a:8b:02:eb:
         0d:55:d2:1c:b7:48:18:e6:8c:7b:0c:fa:be:68:73:ff:2c:c7:
         1f:97:dc:52:36:c4:52:f7:e6:a4:0e:8f:65:7a:ac:06:ec:82:
         51:be:bd:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRtMIpPcA1CVMrucMn/JpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNWIxY2Q1ZWU1ZWIwM2RmYmY2ZDQyNWQ2OTc5ZThkNTM1
MDE1YmMwHhcNMjYwNTEyMTMwMTA0WhcNMjYwNTEzMTMwMTA0WjAzMTEwLwYDVQQD
EyhkMzRhZWM4NjUxNDFjYzFmYjg0MmFhNjU4NDVmZDJiNzU5MTNiYWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsaHw6XZZf3b3cEKPc8X8cdwZFAg
oPnEJKpMaYMqIxIHhTifX1IOFlZswjm+rgGIcr/vLokGMswLzvQbJu/Ex2Cw37//
vz2CPT+fqbr9dh1bqN0EFnI0EbpczT85mCgrmiwMY5AmPiFPJdcYgyiJVColfEeW
mP3XEwVzZZ33s/tg0Lh9HpkpLwbQ+Lt1wqyolf5+k8c6cH3cJEacwZLiDfk6J0KF
bMFqXAa0ozW7vp5ZFAHjjOVtIsM6gF9ftu13TCw85S+6Q74pIzuGhXKAbhSgMnXV
UC2RNyC9flwKnyTneM6FF1l2TtCjeRZC1Jbiofv/8QHmzRXHsGAiujbo6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNK7IZRQcwfuEKqZYRf0rdZE7qhMB8GA1UdIwQY
MBaAFFNbHNXuXrA9+/bUJdaXno1TUBW8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iNjBmYjUtMmZkYS00ZGVmLTk2Zjkt
ZTJiOWY2ZGJlMDAwLzEvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9iNjBmYjUtMmZkYS00ZGVmLTk2ZjktZTJiOWY2ZGJlMDAw
LzEvVTFzYzFlNWVzRDM3OXRRbDFwZWVqVk5RRmJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB1CCTlcn
7Vx9f0KUMiZKr/9BkSk/eiKIb8E4gkyXwzYbH9wo7J3j7WzvlgZE3V3+poTOkps8
VeDhwb4+P5M+HKTMYcaa+O/hPPMssILez/e4Nb7cMxOVNgp7CxoQQ28gyUNAIpIh
jxpUKY5V0DVreI4gF6QZ0ru2maZfMQHeHrymREHp8iPA9O51FrrlmAX8IsywV20h
WzQlKvdnQm3zOAu5gthA78dlZDbpYqTZwzQ0ZWnqHuiFc2AHPZo0F9yT2hjDDyvF
qPM/1xoBeAVTcZwenyEqiwLrDVXSHLdIGOaMewz6vmhz/yzHH5fcUjbEUvfmpA6P
ZXqsBuyCUb69fw==
-----END CERTIFICATE-----
Generated at Tue May 12 23:18:27 2026 by rpki-client