Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
File:                     5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft (raw, json)
Hash identifier:          VXZa75/vUwrsJUqI8VYz+9IHca9BwWF3XI+UTcEQqs8=
Subject key identifier:   4B:ED:E7:AF:91:DB:62:B2:C6:F1:2A:55:58:54:0B:CF:9F:4B:DB:AF
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Certificate issuer:       /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial:       019E1D22676B8803C5FB861DE537159A5A73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 17:00:54 +0000
Manifest this update:     Tue 12 May 2026 17:00:54 +0000
Manifest next update:     Wed 13 May 2026 17:00:54 +0000
Files and hashes:         1: 5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl (hash: ki0xv5Nsyp+kQXcNbxHb+1ROTnNTQxa8x/ADt1Y58l4=)
                          2: MAlnrHBz52J4iUPlxj8tl8-oXOc.roa (hash: qXa+yTbuD7XjS6lZ9mqEs9hBbfiC68PWzv3F50Vgf2c=)
                          3: iNp0w88Ua-7UUDn8DRM4nU_0UtQ.roa (hash: 8nZ078lYm/30a7R5VvQz7RJG29EEwSHHijartjEwTJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:22:67:6b:88:03:c5:fb:86:1d:e5:37:15:9a:5a:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
        Validity
            Not Before: May 12 17:00:54 2026 GMT
            Not After : May 13 17:00:54 2026 GMT
        Subject: CN=4bede7af91db62b2c6f12a5558540bcf9f4bdbaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:53:e0:8f:d3:e4:e8:3e:65:2c:7b:a6:d5:04:
                    b1:b6:fc:38:f1:1a:d2:7b:98:d7:58:a9:09:27:46:
                    9f:51:f2:a4:49:7e:9b:8d:96:a1:10:09:ee:a2:85:
                    b6:9f:f8:89:4e:2e:50:1b:05:6e:ad:1e:96:e1:f3:
                    ab:63:64:1d:75:bd:2d:a3:d0:de:bd:5b:fc:cc:f4:
                    42:43:99:9b:e4:7b:8e:b6:a1:3d:29:63:96:31:99:
                    64:8d:f0:39:60:63:2c:b2:0a:c2:ec:17:7f:9d:d8:
                    5b:2f:fe:9b:c2:02:2a:4c:3f:1f:8a:2c:65:a0:7c:
                    d9:7a:d8:c0:b6:b0:b8:de:7b:14:62:a1:86:02:84:
                    ef:4a:a4:97:21:bf:d5:42:3d:22:09:fb:7c:9e:4e:
                    7b:4a:db:70:83:15:dc:57:2d:40:db:fd:4d:97:5d:
                    43:57:d3:f2:92:a3:c4:17:c9:60:8c:8c:40:61:31:
                    99:55:5b:4f:b7:56:4c:4c:a2:c6:84:ad:62:32:31:
                    e2:da:6b:da:6c:c5:0b:8c:ae:e3:9c:d7:b7:32:ae:
                    87:50:9d:62:f2:79:f5:ff:82:8b:ef:81:64:7c:fb:
                    81:30:58:45:67:43:a6:9a:77:9b:4a:62:12:cb:d4:
                    2c:4e:e8:06:fb:75:9c:d9:4e:2b:d8:c3:de:4f:24:
                    52:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:ED:E7:AF:91:DB:62:B2:C6:F1:2A:55:58:54:0B:CF:9F:4B:DB:AF
            X509v3 Authority Key Identifier:
                keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:78:2e:6e:6b:d4:6e:85:a4:d8:33:66:fb:11:fe:ac:89:79:
         c8:0e:58:78:9d:46:94:d4:13:57:d9:0a:a2:e9:a4:6e:f6:6d:
         62:9e:20:37:17:02:ed:c4:1a:d4:73:53:04:78:5b:f4:fb:2b:
         84:95:a6:cd:a4:d9:a1:f4:98:fc:ac:9a:dd:e8:85:3b:92:ea:
         3a:82:cf:4d:5e:18:93:30:41:09:20:90:05:a4:0f:9a:6d:37:
         d6:24:31:d2:b5:6f:65:d0:ea:84:b2:65:a8:2a:fb:e6:24:77:
         a1:51:74:72:1e:64:47:60:8c:e5:57:51:43:96:7b:be:60:8c:
         a4:42:ca:1c:5e:1c:e2:59:49:94:17:9f:b8:51:16:ab:fa:84:
         74:94:0f:4f:f4:af:50:e2:d2:87:b8:4f:0e:1e:d1:ed:73:b4:
         8b:a8:f2:1f:89:0a:6c:01:5a:0d:0b:0a:9e:74:96:be:a7:e7:
         1a:cf:77:78:75:87:db:cf:07:f1:63:a8:54:f3:68:bc:26:ac:
         e2:bc:75:cd:4f:67:6e:bc:70:3e:f4:ee:9b:26:bc:f9:79:55:
         cf:ae:8e:77:cd:5a:21:a1:29:e4:4a:a4:df:cd:a6:9b:0e:07:
         e5:af:65:1b:92:55:70:f1:72:58:0a:b6:ed:f1:d6:2b:9f:24:
         2f:ae:db:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:29:45 2026 by rpki-client