Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
File:                     5q1QzkYdtcs3pYPnKbcVSZjssRc.mft (raw, json)
Hash identifier:          BzYlxbVpmSozexr1zP6p0ekuqf6NmO7T3MJLZHwxct4=
Subject key identifier:   0B:30:F5:AD:3A:7A:2C:80:EA:FE:0B:E7:3C:14:FE:96:2A:16:07:B1
Authority key identifier: E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17
Certificate issuer:       /CN=e6ad50ce461db5cb37a583e729b7154998ecb117
Certificate serial:       019E1C7DB8C5FAAE5D608BEB88E16B5FC6C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
Manifest number:          06BA
Signing time:             Tue 12 May 2026 14:01:01 +0000
Manifest this update:     Tue 12 May 2026 14:01:01 +0000
Manifest next update:     Wed 13 May 2026 14:01:01 +0000
Files and hashes:         1: 5q1QzkYdtcs3pYPnKbcVSZjssRc.crl (hash: g+m8UYOvBHpora+WK20HxOKAyLYoajBSS72zOCXzIMY=)
                          2: yOjcC_v9jLEMw3DzVhlmsqmU6Yk.roa (hash: xoF0GSXbpt7M9bWTlnPF/z3jkbpV3tEKSL94Epm3XBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:7d:b8:c5:fa:ae:5d:60:8b:eb:88:e1:6b:5f:c6:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6ad50ce461db5cb37a583e729b7154998ecb117
        Validity
            Not Before: May 12 14:01:01 2026 GMT
            Not After : May 13 14:01:01 2026 GMT
        Subject: CN=0b30f5ad3a7a2c80eafe0be73c14fe962a1607b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:de:dd:42:34:6f:bf:44:43:9e:2c:21:5a:
                    dc:b3:4c:f6:ed:46:71:48:2b:93:cd:fa:1c:ac:d7:
                    d4:57:56:3a:59:af:da:a4:7b:b1:10:35:3c:25:47:
                    a1:7c:b5:1c:4b:e0:97:2a:24:0d:64:82:c4:3b:af:
                    37:75:cc:18:42:1b:06:0c:88:d5:f5:54:b9:45:80:
                    af:da:f4:69:33:0e:0f:10:70:a7:40:e0:27:14:a1:
                    74:60:7f:1d:82:55:d0:8e:b0:60:a6:1a:19:f9:21:
                    8a:2a:5d:c3:5b:9a:ba:4c:7f:41:57:a0:79:81:88:
                    33:ab:aa:bc:1b:55:26:15:70:9d:dc:50:72:5d:cc:
                    79:c0:22:e7:f0:60:8f:48:46:7b:f8:6c:0d:02:af:
                    77:50:b5:7b:47:67:84:5b:2d:a1:32:9c:73:f6:83:
                    7e:dc:21:19:81:49:73:cd:84:c5:c2:dd:20:74:fa:
                    a1:dd:96:74:e4:1c:f4:ab:7f:e5:50:c0:c0:c5:81:
                    45:0c:02:eb:86:3c:dd:35:0a:8f:c4:7a:cf:06:21:
                    00:62:da:09:0a:4b:d5:61:a6:03:c9:15:62:97:8e:
                    15:ce:84:96:05:48:b5:11:6f:de:0f:7b:a8:05:bf:
                    e8:89:27:d5:20:71:ac:5c:1b:ab:5c:38:22:ba:8f:
                    f8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:30:F5:AD:3A:7A:2C:80:EA:FE:0B:E7:3C:14:FE:96:2A:16:07:B1
            X509v3 Authority Key Identifier:
                keyid:E6:AD:50:CE:46:1D:B5:CB:37:A5:83:E7:29:B7:15:49:98:EC:B1:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5q1QzkYdtcs3pYPnKbcVSZjssRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ea1725-dcd5-4990-9448-0eb3ba51374c/1/5q1QzkYdtcs3pYPnKbcVSZjssRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:f3:00:4a:2f:e7:d1:61:4c:78:62:26:21:60:e3:79:4f:ec:
         21:04:fa:73:c9:cd:cc:47:53:ee:f1:86:fa:90:b0:bd:d2:28:
         76:34:15:55:37:39:04:a2:3d:d6:81:31:3b:c6:fb:ee:22:9e:
         c6:99:40:64:0a:49:08:31:6c:db:76:cd:10:e9:a5:f4:28:6b:
         17:b1:9a:77:d9:21:68:22:a4:7a:a1:eb:03:c9:95:da:80:7c:
         2c:28:3f:23:ee:75:46:37:02:54:42:d3:fe:d7:72:45:53:93:
         2a:b1:d2:cd:a6:41:16:99:80:b0:5e:11:11:cf:0d:23:40:0e:
         81:ad:14:44:21:91:b5:6d:4f:08:e3:d4:63:fc:1c:bf:4c:92:
         f6:74:14:e9:6f:ee:be:b7:61:23:1e:31:d8:72:6a:a4:72:22:
         05:aa:8f:17:3e:f7:f8:a3:b3:2a:17:6c:e8:22:98:e4:1c:28:
         fc:31:8d:41:22:85:b6:9d:2f:39:c5:05:3c:bc:17:09:9e:4a:
         65:fb:25:c1:b7:45:77:30:6e:cc:de:07:cc:65:20:f0:ef:97:
         c9:c9:4a:71:3a:b7:53:b7:83:bd:be:33:8c:d1:11:4a:47:2d:
         75:9f:54:e2:1d:78:88:fe:38:2e:0c:8a:8c:24:07:82:c9:65:
         88:5b:96:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:46 2026 by rpki-client