Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
File:                     00_-5-di-aBv4vR-eh5S2eun-v0.mft (raw, json)
Hash identifier:          alIsoGFvfS7KCDPNZGRUrvlhuxUGKfz/LioS5fsqOHM=
Subject key identifier:   16:E4:65:4E:ED:C2:90:E6:10:70:51:6B:A3:01:6B:16:14:2D:EE:DC
Authority key identifier: D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD
Certificate issuer:       /CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
Certificate serial:       019E1D9050963D2008A170E00A9776C12A34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
Manifest number:          1353
Signing time:             Tue 12 May 2026 19:00:57 +0000
Manifest this update:     Tue 12 May 2026 19:00:57 +0000
Manifest next update:     Wed 13 May 2026 19:00:57 +0000
Files and hashes:         1: 00_-5-di-aBv4vR-eh5S2eun-v0.crl (hash: CBhvLsuN3a3zT/Lc0qhwFu8xYZc1694jON8dDYaOvgY=)
                          2: NaC2EXhqguVissfFb8R9GK-pfWk.roa (hash: /tVqb/8j9ibKJcyJbXGCxzBW5/AN/dkNicwbisF6Ij8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:50:96:3d:20:08:a1:70:e0:0a:97:76:c1:2a:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34ffee7e762f9a06fe2f47e7a1e52d9eba7fafd
        Validity
            Not Before: May 12 19:00:57 2026 GMT
            Not After : May 13 19:00:57 2026 GMT
        Subject: CN=16e4654eedc290e61070516ba3016b16142deedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:71:c3:d9:82:1f:50:c0:e8:ee:fd:22:5c:51:
                    f8:6f:e0:4c:88:a7:9c:67:e6:43:ba:63:38:73:fd:
                    ee:62:68:45:c4:27:de:1e:75:70:bf:09:87:fa:09:
                    d3:27:58:d0:8e:57:aa:0a:56:fd:73:ee:fa:e8:39:
                    5b:c7:03:f2:4e:69:80:81:91:f9:2e:06:16:2d:13:
                    9d:91:01:55:a7:70:9b:0b:a5:e1:20:43:8d:0f:33:
                    24:9f:7c:31:33:78:10:ee:77:1e:d2:67:73:80:1f:
                    fb:92:2f:92:88:f5:97:26:75:67:d4:da:18:24:79:
                    94:d8:7f:f5:a0:89:77:41:a2:0f:84:48:e6:af:f6:
                    7f:7d:ac:fc:e3:6b:20:c5:58:f6:b0:c1:12:e2:9b:
                    86:f4:23:08:65:9f:49:a9:99:ea:88:89:7b:26:14:
                    43:2b:27:2c:a2:20:01:cb:50:f6:45:32:73:d4:d2:
                    99:98:91:38:96:0e:3c:65:3c:98:b9:36:57:70:4d:
                    5f:56:4a:03:9d:b0:1d:54:71:e7:bc:a3:62:8d:44:
                    73:a2:0c:44:a1:23:58:24:fd:82:02:c0:ef:1b:52:
                    ce:15:21:5c:e5:7c:85:64:15:df:ba:52:36:32:73:
                    17:ab:40:4d:5f:11:06:ad:81:df:77:5f:f3:20:73:
                    89:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E4:65:4E:ED:C2:90:E6:10:70:51:6B:A3:01:6B:16:14:2D:EE:DC
            X509v3 Authority Key Identifier:
                keyid:D3:4F:FE:E7:E7:62:F9:A0:6F:E2:F4:7E:7A:1E:52:D9:EB:A7:FA:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00_-5-di-aBv4vR-eh5S2eun-v0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1b8d92-e157-4141-82c9-87e1f3866362/1/00_-5-di-aBv4vR-eh5S2eun-v0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:9f:5f:c3:7e:87:29:84:d3:46:a2:64:cd:41:b8:0e:3b:4b:
         eb:c0:e9:e9:d4:fd:23:75:8a:39:cb:71:c6:86:f6:d2:df:33:
         e2:76:ef:0c:c7:95:be:42:50:05:2f:07:d3:52:25:f1:2f:38:
         83:1a:7c:1b:2b:56:69:b0:0d:0e:e9:d3:4f:de:6c:f6:96:6b:
         13:c5:a4:65:c7:86:bd:1b:6d:55:6c:e7:1b:79:6c:44:b8:ce:
         0b:3a:30:c2:a9:f8:a0:a9:4a:a7:7e:39:76:cd:6b:09:1d:bb:
         c0:d2:78:93:93:5c:29:49:c7:8f:f3:f7:24:e3:f7:b7:c3:70:
         bd:d8:50:c9:85:0d:a2:87:78:8f:e7:15:d4:9b:47:e2:51:41:
         f9:11:57:a6:89:54:30:ab:47:8a:85:61:98:58:ce:ec:c8:cc:
         64:53:48:80:00:bb:fd:87:9d:5c:76:a7:68:6f:2a:75:4d:e5:
         da:77:ee:26:b9:cb:a2:96:34:d6:a6:3b:e9:b5:82:27:e5:4a:
         f4:5a:34:af:87:e9:36:47:b2:66:75:9f:bb:cf:59:9b:43:32:
         0f:56:27:d7:c5:35:6b:7f:37:cd:7d:de:5e:60:ed:e5:42:85:
         5a:63:11:74:1a:e9:c2:92:6d:90:dd:65:01:cc:a8:26:27:2c:
         3b:c4:ff:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:32 2026 by rpki-client