Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
File:                     5qr3mKBsFXlcb-xweYOYvrD01m4.mft (raw, json)
Hash identifier:          7+tVdAwH2jbp4MgmipK0OjsDXHIMl38OGwfqMoF4neM=
Subject key identifier:   2A:64:D4:37:90:98:CD:92:50:EE:ED:72:CE:F3:35:21:DB:96:15:5D
Authority key identifier: E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E
Certificate issuer:       /CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
Certificate serial:       019E1EA3261DB7C96DD69A5875AE1943B1C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
Manifest number:          06EF
Signing time:             Wed 13 May 2026 00:01:08 +0000
Manifest this update:     Wed 13 May 2026 00:01:08 +0000
Manifest next update:     Thu 14 May 2026 00:01:08 +0000
Files and hashes:         1: 1-kDUYI7kuVmqQlf1mvxZtUR-Mpg.asa (hash: sXvSLo124AUM8vV6Hyy9bXbz/uQqmbFGdfAl+2Zq9Js=)
                          2: 5qr3mKBsFXlcb-xweYOYvrD01m4.crl (hash: kB4c1tOQ5x976UywcqBrH4tPcm0up4mtZR9I81HLGY4=)
                          3: febei7ElndSA55KLJAxPmYsaSA8.roa (hash: 3rk22KTNdwadb2vDfYhZFH+AJY/gYjCaDrWeCZ+y2x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:26:1d:b7:c9:6d:d6:9a:58:75:ae:19:43:b1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6aaf798a06c15795c6fec70798398beb0f4d66e
        Validity
            Not Before: May 13 00:01:08 2026 GMT
            Not After : May 14 00:01:08 2026 GMT
        Subject: CN=2a64d4379098cd9250eeed72cef33521db96155d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4e:1b:a5:ff:4a:26:23:e4:60:68:f6:9e:44:
                    21:67:53:b8:ca:98:ca:9e:c7:c0:4e:a1:1e:b2:28:
                    e3:4f:ea:5a:4b:8a:4c:86:21:90:f7:54:3c:7c:21:
                    bf:3f:71:2e:98:c3:d6:bc:c8:84:85:f8:01:19:5d:
                    95:9a:d8:29:e3:39:51:62:f2:34:b4:b9:2f:24:e5:
                    ed:6b:0b:95:7e:6f:7c:ee:0b:ee:a5:68:68:b8:a3:
                    fb:19:2d:eb:68:e7:01:3d:d6:5c:82:f7:e4:72:f6:
                    09:7b:4a:43:37:7c:06:ae:f8:cf:5d:22:80:36:c9:
                    25:d9:53:a7:42:e3:07:40:70:47:eb:f9:f3:32:ff:
                    84:0b:4e:c3:74:76:d0:e9:1f:1a:1d:34:53:5f:10:
                    b3:e4:f5:92:91:e9:34:2e:d0:19:3a:33:36:73:8b:
                    51:94:dc:d5:6c:a1:27:1b:2c:c0:bc:3c:86:88:93:
                    a1:93:da:b3:c1:e2:fd:20:18:cd:26:eb:fd:34:27:
                    bb:7a:14:60:a8:35:ef:dd:9a:21:55:7f:4c:81:0c:
                    04:d7:a8:80:d5:46:f6:e0:bf:b6:8a:5c:89:07:c8:
                    e7:03:78:44:4b:73:5b:6b:e5:70:5f:8a:d2:8d:47:
                    21:46:81:75:49:70:fb:bc:11:57:a8:58:a2:22:f4:
                    fe:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:64:D4:37:90:98:CD:92:50:EE:ED:72:CE:F3:35:21:DB:96:15:5D
            X509v3 Authority Key Identifier:
                keyid:E6:AA:F7:98:A0:6C:15:79:5C:6F:EC:70:79:83:98:BE:B0:F4:D6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5qr3mKBsFXlcb-xweYOYvrD01m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/516946-d5b6-4f0e-965c-5378de430377/1/5qr3mKBsFXlcb-xweYOYvrD01m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:61:54:ca:bf:41:55:c2:e9:da:8f:a4:81:16:fa:97:d2:
         ab:cb:d4:04:38:1e:c3:8e:b8:ab:85:72:d9:fe:19:1a:04:a3:
         e3:c3:28:11:48:cd:82:5b:91:4d:fe:fa:4c:91:ce:e4:2e:6d:
         ab:65:3c:cc:3a:87:c0:8d:db:b4:9a:57:f1:f0:f2:2c:c0:ac:
         5c:07:91:18:5a:4f:e2:89:16:40:ed:f8:31:ad:b2:ed:50:2b:
         c3:1a:7d:da:ab:38:eb:a6:e7:f3:39:17:46:59:0e:c3:97:54:
         be:c7:5b:85:dc:8f:d2:d4:91:8d:43:b3:5b:ab:5e:cc:e9:2b:
         fd:87:8b:13:a9:24:36:13:8c:3e:cd:e1:94:2b:74:4f:9a:0e:
         6d:a9:47:b5:99:75:df:32:e8:80:d5:5d:23:e9:24:e5:ea:58:
         40:04:b4:26:7e:a3:b2:4e:ea:1b:57:ed:8b:b2:63:bd:a2:c4:
         89:12:18:cd:4e:84:cc:6f:ff:f3:72:11:85:88:3c:f8:15:28:
         4e:ac:f7:0a:bc:dc:96:26:ca:2b:79:05:64:23:bf:ae:7e:82:
         12:36:19:bc:ba:94:8d:2c:14:51:9b:fe:1d:81:f7:b5:a5:d1:
         38:91:c2:46:2f:28:d0:26:cd:89:3f:bb:6d:a8:65:73:e0:a8:
         d3:59:d0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:35:48 2026 by rpki-client