Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
File:                     5v-BaTR_UwcrLRGtGNmiU8r--uc.mft (raw, json)
Hash identifier:          PcaIRQSr+NbpiAYFxum6yPBvQnuRolyNMy6xsYTRTJ0=
Subject key identifier:   DF:35:6D:C0:57:78:46:77:74:AD:17:56:F2:C5:F2:16:DE:BF:EE:3B
Authority key identifier: E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7
Certificate issuer:       /CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
Certificate serial:       019E1E358763104D63DE8E41EE1EB52CCF86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
Manifest number:          07DC
Signing time:             Tue 12 May 2026 22:01:24 +0000
Manifest this update:     Tue 12 May 2026 22:01:24 +0000
Manifest next update:     Wed 13 May 2026 22:01:24 +0000
Files and hashes:         1: 1Qs37r34k81KYJIyGVHAnjZqyoo.roa (hash: E4HDJvMUxumoC1LuWAWx/oNNp8JpntDfq7oaedRHLUs=)
                          2: 5v-BaTR_UwcrLRGtGNmiU8r--uc.crl (hash: lkOPUKfDnVI9RXxJieQ1Yt6fkD1GUrIqpxwqv3D16Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:35:87:63:10:4d:63:de:8e:41:ee:1e:b5:2c:cf:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ff8169347f53072b2d11ad18d9a253cafefae7
        Validity
            Not Before: May 12 22:01:24 2026 GMT
            Not After : May 13 22:01:24 2026 GMT
        Subject: CN=df356dc05778467774ad1756f2c5f216debfee3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:65:e1:02:ec:fe:7f:99:ce:0d:3f:75:70:90:
                    98:a9:c5:4a:2f:47:28:ca:f3:01:2e:29:48:d2:f5:
                    14:00:6c:67:7e:5d:64:b5:63:9a:60:82:06:bb:40:
                    33:2d:46:46:eb:5d:82:ae:c3:cd:94:e4:75:d3:55:
                    74:cb:1e:fe:5b:e2:eb:3e:7b:f3:1a:44:b4:90:8c:
                    9a:d4:ab:f8:15:8d:65:4f:6c:31:2b:6d:5c:43:6b:
                    de:33:cb:24:97:2c:fe:08:29:3f:5f:aa:e4:99:b5:
                    bf:55:15:0a:2f:45:17:84:0c:60:07:75:d0:f8:77:
                    60:4e:22:47:6c:b0:de:71:4f:a3:b6:67:3d:83:62:
                    fd:9c:b8:f4:ad:8c:60:bc:c2:c7:21:32:f0:f7:24:
                    51:33:2f:c0:d5:1f:a8:72:7e:3e:d2:96:68:c8:e6:
                    07:6f:ac:88:34:99:0d:0c:46:5a:6b:e2:ae:e5:9e:
                    1e:1e:c9:8d:6d:ea:d5:08:8c:16:76:6a:4d:93:c6:
                    48:69:bd:28:24:d2:21:f4:69:95:84:e1:13:20:23:
                    46:5c:d8:4a:f5:87:09:d0:75:87:a7:62:7b:d0:fa:
                    a5:b4:19:0e:31:d9:27:ec:db:30:2a:09:a9:a1:2c:
                    f9:4f:f0:71:3c:57:e8:5d:06:41:74:66:a8:b5:06:
                    0a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:35:6D:C0:57:78:46:77:74:AD:17:56:F2:C5:F2:16:DE:BF:EE:3B
            X509v3 Authority Key Identifier:
                keyid:E6:FF:81:69:34:7F:53:07:2B:2D:11:AD:18:D9:A2:53:CA:FE:FA:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5v-BaTR_UwcrLRGtGNmiU8r--uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/50f749-5581-4601-ae41-9fb03d03eff9/1/5v-BaTR_UwcrLRGtGNmiU8r--uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:11:aa:aa:44:22:15:15:b1:0e:11:ba:13:ba:fc:54:07:7e:
         c0:e1:b4:cc:d2:15:56:83:fe:6f:e0:3c:ec:8d:74:5a:c0:72:
         17:4d:2b:34:81:07:fd:d8:d2:be:f1:1f:20:30:27:10:73:e5:
         81:4a:6a:d0:4c:a8:42:39:6c:39:a8:db:33:80:0e:32:0e:8a:
         cc:5e:b8:65:50:be:3c:0b:de:cb:05:ab:22:0a:f7:b4:07:a4:
         84:dc:67:46:14:5d:da:47:f1:73:93:ac:23:c4:17:40:f1:70:
         f2:33:9b:68:c1:52:b8:ec:75:26:97:09:08:e6:a4:0b:c7:13:
         60:06:f3:4a:82:70:52:ea:80:95:6b:08:e9:3c:3b:91:69:fe:
         da:d3:a1:12:ce:f8:98:f6:ed:a6:ff:4d:6b:7d:cf:6c:50:1d:
         5b:ea:40:79:e9:c4:46:72:ee:0e:43:eb:92:e3:d1:3b:93:d8:
         ff:7c:7b:61:a7:2d:52:2f:90:2d:4b:22:37:2b:35:10:a2:cb:
         24:6b:b6:38:9f:03:96:29:49:eb:09:7a:07:62:b7:b7:0b:8e:
         67:cf:77:90:95:41:5d:50:5d:45:d8:83:4d:f0:41:07:10:8f:
         f8:9e:2b:03:d1:bc:5b:7c:0f:2c:fc:8e:0e:1b:6f:bb:19:12:
         7d:ee:1e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:53:50 2026 by rpki-client