Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
File:                     5Mx247VHf_1CoP5LjHg6rS-W_nA.mft (raw, json)
Hash identifier:          e4iDavbarWMdnSoy3th05UdzFyEzf6Og6Y8CjNGNnXE=
Subject key identifier:   B1:CC:37:BB:87:D3:FD:70:33:ED:5B:21:BA:E8:39:70:AA:34:30:5D
Authority key identifier: E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70
Certificate issuer:       /CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
Certificate serial:       019E1D904269B244663D33EC6D89346AABC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
Manifest number:          0C28
Signing time:             Tue 12 May 2026 19:00:53 +0000
Manifest this update:     Tue 12 May 2026 19:00:53 +0000
Manifest next update:     Wed 13 May 2026 19:00:53 +0000
Files and hashes:         1: 5Mx247VHf_1CoP5LjHg6rS-W_nA.crl (hash: 38AonU8GqqvSxZp8GdsqJUFM/qSTX+MfmA/rZUNJx9c=)
                          2: BSGPWmtsgwbJGnKFG5brSPXj4hk.roa (hash: KGxIkg0MS8XaKz2jRrsvog2q0vQwaAcswUFzEf/VLTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:42:69:b2:44:66:3d:33:ec:6d:89:34:6a:ab:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4cc76e3b5477ffd42a0fe4b8c783aad2f96fe70
        Validity
            Not Before: May 12 19:00:53 2026 GMT
            Not After : May 13 19:00:53 2026 GMT
        Subject: CN=b1cc37bb87d3fd7033ed5b21bae83970aa34305d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:11:eb:d3:5d:a7:82:2e:35:87:78:73:87:
                    22:dc:6e:60:46:56:dc:5b:a2:42:9f:da:68:5a:19:
                    32:10:44:88:ca:6b:14:36:ea:8a:d9:94:76:58:47:
                    e9:b0:f5:6f:04:c9:88:d2:eb:98:73:1e:b1:3f:b5:
                    50:d5:4c:8f:e2:10:73:1f:5c:dc:b4:06:33:cd:f5:
                    27:02:3e:8d:45:8c:22:93:12:40:ee:11:34:28:6c:
                    96:72:19:db:59:65:a1:3c:96:20:96:e7:1f:0e:ba:
                    9b:7c:25:1f:29:98:45:c5:73:f2:df:e5:4b:ca:9d:
                    80:e6:8f:9b:a1:7f:cc:6d:b7:16:d4:03:99:52:30:
                    e0:66:45:f6:57:a4:02:8e:a8:5f:6d:65:7c:2d:cf:
                    0a:de:d4:f5:1a:8d:df:78:88:c7:d4:e2:ad:fe:7f:
                    31:c9:8c:e2:dd:10:c1:b9:8a:56:1d:40:e1:dc:a4:
                    4a:c6:b2:b2:4d:64:0d:f0:d5:53:b7:7a:52:81:8f:
                    25:2e:97:40:8f:16:f8:83:03:6c:ef:94:2b:38:90:
                    3f:80:34:d2:a9:1b:16:92:76:4b:fc:97:38:e8:5d:
                    e5:75:17:a8:34:ea:ea:76:ea:d4:d8:8e:ed:4f:1e:
                    57:84:0b:42:a2:5c:af:a7:c2:fb:30:7e:be:3c:3f:
                    a1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CC:37:BB:87:D3:FD:70:33:ED:5B:21:BA:E8:39:70:AA:34:30:5D
            X509v3 Authority Key Identifier:
                keyid:E4:CC:76:E3:B5:47:7F:FD:42:A0:FE:4B:8C:78:3A:AD:2F:96:FE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Mx247VHf_1CoP5LjHg6rS-W_nA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/5f8881-8a44-4842-8009-1165d1d1564f/1/5Mx247VHf_1CoP5LjHg6rS-W_nA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d9:35:4e:a0:e6:a1:e9:c3:39:e2:83:b3:48:97:ab:85:db:
         64:21:a5:77:91:8f:48:65:ce:56:9e:2e:8e:6b:97:95:24:16:
         68:e8:1d:4b:7a:e5:d6:f2:7c:9e:a7:7d:a3:c5:55:7d:39:4e:
         53:eb:78:4a:34:7c:0d:99:82:f9:6a:56:51:9c:bc:46:e6:32:
         7e:81:8a:59:17:df:5c:fb:f9:66:a5:a2:9a:6d:3e:03:ee:7a:
         17:1c:5d:e8:a5:27:ce:3b:b3:88:66:98:2b:b9:65:5b:0f:93:
         a7:b5:5a:c8:68:95:5e:78:aa:2a:62:a3:41:f6:a4:8c:da:7d:
         0e:8e:10:94:72:9e:64:85:6e:7e:eb:e5:c3:20:f7:15:2b:3c:
         92:21:c2:fb:7f:ce:26:7f:ad:ae:3e:9d:54:49:95:c8:f3:59:
         b7:1f:36:10:2e:a1:8c:0c:29:e7:b3:b2:15:87:d2:04:08:bd:
         c0:7f:3d:cd:51:a2:2d:bd:ac:04:43:27:93:c4:54:90:85:c7:
         35:d9:c1:18:92:77:59:a4:de:a0:fa:09:09:a9:61:6a:52:e0:
         fe:a9:a8:ac:48:a0:5a:45:b8:d9:1c:5c:14:2a:1e:47:4d:db:
         95:7b:9d:d8:be:a9:e0:81:d4:2c:38:f6:a9:ca:36:df:f9:43:
         79:b7:98:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:26 2026 by rpki-client