Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
File:                     5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft (raw, json)
Hash identifier:          FdlgdhYjD4mRLpNkx6l01Z8ez+dwduCiQnEaKk7r/vw=
Subject key identifier:   BC:B1:FC:E9:35:C3:10:FF:82:85:71:06:5E:0B:D0:62:22:EC:4C:0E
Authority key identifier: E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9
Certificate issuer:       /CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
Certificate serial:       019E1EA3395682E677BFB2CFD6467B05A113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
Manifest number:          1755
Signing time:             Wed 13 May 2026 00:01:13 +0000
Manifest this update:     Wed 13 May 2026 00:01:13 +0000
Manifest next update:     Thu 14 May 2026 00:01:13 +0000
Files and hashes:         1: 5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl (hash: VTe6ft+0pWeCLS+z3nOl75PQO1o9lcw6R/9omPFRCqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:39:56:82:e6:77:bf:b2:cf:d6:46:7b:05:a1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4767b13d99079ca70fc297988dd79eac43a9fa9
        Validity
            Not Before: May 13 00:01:13 2026 GMT
            Not After : May 14 00:01:13 2026 GMT
        Subject: CN=bcb1fce935c310ff828571065e0bd06222ec4c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:35:57:1e:c7:3d:75:a8:c5:36:10:e4:58:3d:
                    fd:ae:04:b9:12:4b:9e:f2:55:b2:bb:5d:82:9f:4c:
                    4b:ee:a5:d6:db:f9:1e:81:2a:28:41:3a:09:b1:06:
                    00:f7:16:80:56:20:b0:b5:6a:fc:71:e7:e4:f5:19:
                    48:b8:e2:72:56:ab:8d:f3:8e:ea:f2:85:ee:df:8f:
                    70:b9:b4:9f:00:15:f9:37:88:33:ca:b3:52:a7:48:
                    fc:3c:01:38:5b:0c:61:5d:33:fb:ff:13:cc:21:75:
                    77:36:97:05:c2:10:c8:29:92:9a:7c:1e:16:42:fd:
                    82:2c:c7:5f:7a:72:19:16:5b:5d:d1:21:00:df:92:
                    17:69:62:14:48:8d:46:a3:1b:30:9c:7b:e1:3b:32:
                    13:b4:ed:f9:95:17:0d:3b:7f:f7:41:4a:e1:c0:ce:
                    22:89:85:ba:9a:ba:f9:8d:ce:e1:58:cc:86:d9:78:
                    47:68:66:76:77:c2:ca:76:8e:fd:74:9b:c7:0e:30:
                    e9:fa:47:3a:c6:73:47:0b:90:55:b5:47:70:d9:5e:
                    9e:b5:82:52:e9:4c:0d:ff:50:4f:e4:27:24:c7:d8:
                    f2:13:22:69:e5:1c:9d:0d:33:6d:71:7c:68:5e:67:
                    3c:b7:57:68:76:3b:5a:51:07:f8:dd:33:57:7d:30:
                    00:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B1:FC:E9:35:C3:10:FF:82:85:71:06:5E:0B:D0:62:22:EC:4C:0E
            X509v3 Authority Key Identifier:
                keyid:E4:76:7B:13:D9:90:79:CA:70:FC:29:79:88:DD:79:EA:C4:3A:9F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7E9mQecpw_Cl5iN156sQ6n6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ae30b0-5e88-4fb8-b208-4b1d97dfeccf/1/5HZ7E9mQecpw_Cl5iN156sQ6n6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:64:c4:ff:91:c7:df:7c:27:09:d1:df:f2:fe:a3:f7:95:15:
         69:b4:19:83:96:53:b4:cb:be:44:7a:a1:67:67:e3:bb:77:0e:
         5e:ac:81:96:07:f8:3f:d9:e1:d4:59:d2:94:cb:db:9c:79:d0:
         30:02:f5:f0:b3:22:cd:20:e5:da:4b:82:b6:44:09:db:a7:74:
         b9:5e:c1:8f:03:ab:a3:61:be:28:c8:12:ad:5c:1f:e0:95:57:
         1c:76:f9:bf:26:27:3d:e9:64:a9:44:da:14:a5:0b:27:e1:c8:
         fa:af:65:6d:a1:8c:c1:c1:f8:82:b0:5c:42:66:4a:f7:30:81:
         9c:22:f9:c5:90:c5:ca:59:32:12:75:6b:f3:3d:e7:0a:63:45:
         8d:57:6e:6a:1c:12:d9:a8:b9:5f:1d:ce:0d:80:d2:1a:f3:53:
         e9:60:a1:49:19:31:15:f3:b5:74:dd:c1:ef:8b:c1:4a:d5:25:
         9e:ef:5c:e0:f2:f2:ee:8d:dc:df:04:83:04:2c:53:93:6c:77:
         69:b2:13:fd:b6:9e:ef:a8:1e:89:96:d2:15:f6:f6:91:8c:a3:
         80:58:d2:1d:7d:d4:22:d3:86:78:cd:5f:86:6a:6e:06:50:5e:
         c5:04:63:4b:77:c4:2f:de:19:7d:e7:a7:dd:39:04:3a:d5:78:
         22:48:15:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:20 2026 by rpki-client