Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
File:                     5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft (raw, json)
Hash identifier:          lxmtHtthXgie2TdwkAMfYgJl0VEELKDMB1JDQpsi4vw=
Subject key identifier:   78:4D:B5:BE:FA:7F:E2:2F:AC:B9:A4:DE:E2:77:24:28:73:71:CF:B9
Authority key identifier: E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD
Certificate issuer:       /CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
Certificate serial:       019E1DFE9858BBC49CF7DB6D62A4015FDC0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
Manifest number:          190C
Signing time:             Tue 12 May 2026 21:01:24 +0000
Manifest this update:     Tue 12 May 2026 21:01:24 +0000
Manifest next update:     Wed 13 May 2026 21:01:24 +0000
Files and hashes:         1: 5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl (hash: 6SnajydyoZBj1/n/edQEeiuSN+jQUET+skl2k4fA+S4=)
                          2: pGPIjgXbqa3E4qtB9K-nnRy5nwE.roa (hash: r9BkXCN77JVUwf1Rk1CC7NUcp98tk3M5Xo6C9+zBv3U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:fe:98:58:bb:c4:9c:f7:db:6d:62:a4:01:5f:dc:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4673e6d6e1cf6f60115e30508be15bbbfe5eaad
        Validity
            Not Before: May 12 21:01:24 2026 GMT
            Not After : May 13 21:01:24 2026 GMT
        Subject: CN=784db5befa7fe22facb9a4dee27724287371cfb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:d8:08:a8:dd:55:6c:3e:d9:8a:6b:b9:b2:
                    11:32:ba:2b:f9:0f:6b:02:5c:64:b0:e3:bb:07:cc:
                    8b:87:d3:7a:81:09:2a:40:bb:85:4e:73:11:36:7b:
                    2b:31:a3:06:bd:69:22:48:81:a4:ed:08:f4:38:bc:
                    a0:2f:6e:9e:e8:6d:05:d9:6d:80:fd:2d:68:3e:b8:
                    f3:00:05:65:d7:82:d5:1e:21:06:57:5d:b8:fd:15:
                    f2:cb:92:f5:e2:21:58:3e:48:d3:a3:dd:49:c0:42:
                    cc:62:d5:31:60:aa:d7:66:98:af:f4:01:91:c5:86:
                    5b:6c:86:30:d5:8e:cf:d8:9a:a2:28:f8:24:5b:17:
                    94:02:b3:82:1d:7e:4d:27:34:e9:31:d1:e8:0f:04:
                    3a:54:a3:78:80:4f:f4:46:14:78:47:be:15:1f:d9:
                    1e:dc:97:b0:19:0e:4d:5e:8c:b5:10:a9:ae:52:47:
                    95:5f:42:ce:41:a2:a3:9a:b3:2f:0b:74:80:79:2c:
                    1e:15:bf:f5:5d:b2:e6:66:97:db:67:07:18:21:eb:
                    b3:1f:6a:71:83:a9:0e:b4:93:b8:70:b2:ec:20:11:
                    e5:65:7e:bc:4f:28:9f:52:f7:80:94:13:cb:4d:9a:
                    ac:7d:12:a7:a8:32:2a:a7:2b:2c:72:e6:fa:09:e1:
                    33:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4D:B5:BE:FA:7F:E2:2F:AC:B9:A4:DE:E2:77:24:28:73:71:CF:B9
            X509v3 Authority Key Identifier:
                keyid:E4:67:3E:6D:6E:1C:F6:F6:01:15:E3:05:08:BE:15:BB:BF:E5:EA:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1b5301-e807-4795-b98c-c1594f60968e/1/5Gc-bW4c9vYBFeMFCL4Vu7_l6q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:44:96:d7:2e:43:4f:13:31:71:76:f4:57:96:85:9a:f5:2c:
         99:a9:ad:91:ed:12:f9:26:90:a8:39:b5:af:93:0a:d4:20:9b:
         96:c9:41:a4:3b:51:b2:96:10:06:6e:e7:1c:7c:fc:21:d9:2d:
         a6:1c:04:14:8d:b5:19:43:7c:9d:97:e9:d3:48:7d:5b:4f:68:
         3d:c5:44:18:cc:62:23:64:fa:93:3a:0b:94:a2:a9:9a:f3:92:
         ee:12:b6:97:98:37:b6:45:be:06:a8:57:ba:b1:01:77:a8:31:
         76:bc:3e:34:cf:d2:3c:a2:52:84:34:3f:b5:42:d4:fb:e3:a8:
         db:e4:7d:86:ca:14:ea:84:c6:27:7c:2f:07:2d:17:0f:8d:52:
         ad:c4:e9:5a:de:d7:7f:15:87:0b:ea:19:7a:71:26:f0:f6:d5:
         77:9c:40:56:3c:af:2e:9c:f3:e8:41:73:cf:19:8c:2a:3a:07:
         aa:fe:6d:47:cf:55:70:c1:41:b5:96:15:48:5a:11:27:33:80:
         05:ae:bd:fd:ae:3c:41:a8:e7:28:13:f3:e3:0e:18:37:38:8b:
         e5:d9:8d:36:99:10:1f:31:ad:b8:73:ac:8c:ce:9f:5c:94:ee:
         e1:97:a3:73:8b:e4:a2:c2:12:a6:1f:37:27:95:fe:fc:9a:b9:
         69:37:cb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:18 2026 by rpki-client