Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
File:                     5NJxw_qQOlkP31SJlEnmmPLpxjI.mft (raw, json)
Hash identifier:          H51XItqzj1zvcyma0V350k8CDpcLCfa427jRSYdN79c=
Subject key identifier:   C9:C8:69:CF:9B:BC:17:FD:88:69:A1:C1:2B:81:CA:91:3C:F7:26:3C
Authority key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Certificate issuer:       /CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Certificate serial:       019E1F116E2C5CCA85BBBA3AAD7D05BC84F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 02:01:36 +0000
Manifest this update:     Wed 13 May 2026 02:01:36 +0000
Manifest next update:     Thu 14 May 2026 02:01:36 +0000
Files and hashes:         1: 5NJxw_qQOlkP31SJlEnmmPLpxjI.crl (hash: ygrrHsQFRACT41Y/+Ie6p8XEktIbe7ctF+yTKD57z3w=)
                          2: 9ODgGDzFJ29sZbO5Y0-xsyNjK4c.roa (hash: OkUtbla+KQC+6tAPqsg9uxnsiQTpUI77ifjU89ybPE0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:6e:2c:5c:ca:85:bb:ba:3a:ad:7d:05:bc:84:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
        Validity
            Not Before: May 13 02:01:36 2026 GMT
            Not After : May 14 02:01:36 2026 GMT
        Subject: CN=c9c869cf9bbc17fd8869a1c12b81ca913cf7263c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:23:a7:d7:1a:99:12:f5:ac:1b:26:01:bd:
                    8f:cd:6c:b0:f1:d6:f7:46:a0:a1:82:80:98:4b:fa:
                    0f:74:d4:47:7b:6b:6f:06:97:9a:20:af:1b:fa:23:
                    c7:53:48:51:25:84:04:dc:0a:c5:05:dc:7d:85:f1:
                    46:61:69:f0:d9:93:ee:db:6c:fb:c3:fb:a8:6c:81:
                    84:58:2d:cf:4c:dc:07:10:19:50:40:b2:3c:f0:66:
                    8d:17:01:ec:d4:f4:a5:f0:20:6f:1a:fc:cf:4c:f3:
                    ab:da:dc:b1:81:81:45:a9:a5:e7:e5:6b:e1:62:88:
                    54:4b:19:a8:db:0a:77:c7:80:08:46:36:9a:9a:32:
                    b4:d2:84:ec:a1:97:b9:0d:c9:7c:f2:6e:8f:cd:73:
                    cd:66:0b:5e:75:fc:f8:d2:f4:e7:d2:f8:28:bb:4d:
                    d4:e8:e8:b0:11:3d:d1:af:5b:1b:f3:cf:c7:2b:b7:
                    0d:89:3f:1e:bc:bc:09:c3:a5:5a:83:17:5b:4a:78:
                    e8:51:0c:d9:5e:7d:91:f0:42:57:00:2d:3a:76:c2:
                    83:77:34:c0:83:c3:13:a9:b4:07:47:5f:a6:91:c2:
                    b4:b3:f3:6a:76:75:00:18:7b:1f:51:ed:33:a3:e8:
                    31:e3:fe:1b:99:64:74:34:89:11:d2:ff:f5:d4:e7:
                    fa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C8:69:CF:9B:BC:17:FD:88:69:A1:C1:2B:81:CA:91:3C:F7:26:3C
            X509v3 Authority Key Identifier:
                keyid:E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:74:ce:2e:49:b4:1c:d6:ca:8f:a5:6b:ea:42:d2:ae:ee:ae:
         bd:33:0a:18:d5:fd:94:74:d0:dc:6a:cc:7f:34:24:b5:92:4c:
         29:10:5b:34:a8:14:e3:8b:42:9f:08:9f:97:63:3f:c9:5c:1d:
         ce:62:ab:f8:13:e9:68:e1:29:36:6e:5b:f8:f7:88:ae:1f:bb:
         9b:dc:4d:5a:b9:27:80:b3:0a:d6:f0:84:78:de:c7:a9:b9:7f:
         0e:90:91:b6:78:b5:cd:36:3e:0f:79:21:d2:3a:1f:3d:48:cf:
         21:aa:ff:67:4f:b4:f4:c4:4c:c4:6a:1e:0e:cc:7a:7b:a1:1f:
         bc:80:52:1a:d2:5d:dd:1a:c0:3b:f1:88:df:ca:b5:6b:3d:9d:
         4c:e5:ef:8b:ac:3b:ef:f2:af:15:0d:a9:3e:24:ff:26:61:8b:
         c5:b3:04:d1:e7:fc:e1:a8:66:49:ab:55:f9:78:e8:f7:66:0b:
         26:02:28:a2:93:df:3d:28:46:20:52:5c:13:97:9c:cf:0b:44:
         35:28:5d:01:88:cb:fc:7f:07:cc:67:87:4e:95:5c:42:12:34:
         b9:ae:38:89:fe:84:fa:57:c8:aa:17:95:a6:ff:ba:5d:a4:9b:
         d2:3f:29:d7:ff:dc:70:94:5b:48:83:ee:2b:f3:22:64:40:cb:
         16:86:39:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEW4sXMqFu7o6rX0FvIT2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZDI3MWMzZmE5MDNhNTkwZmRmNTQ4OTk0NDllNjk4ZjJl
OWM2MzIwHhcNMjYwNTEzMDIwMTM2WhcNMjYwNTE0MDIwMTM2WjAzMTEwLwYDVQQD
EyhjOWM4NjljZjliYmMxN2ZkODg2OWExYzEyYjgxY2E5MTNjZjcyNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLsjp9camRL1rBsmAb2PzWyw8db3
RqChgoCYS/oPdNRHe2tvBpeaIK8b+iPHU0hRJYQE3ArFBdx9hfFGYWnw2ZPu22z7
w/uobIGEWC3PTNwHEBlQQLI88GaNFwHs1PSl8CBvGvzPTPOr2tyxgYFFqaXn5Wvh
YohUSxmo2wp3x4AIRjaamjK00oTsoZe5Dcl88m6PzXPNZgtedfz40vTn0vgou03U
6OiwET3Rr1sb88/HK7cNiT8evLwJw6VagxdbSnjoUQzZXn2R8EJXAC06dsKDdzTA
g8MTqbQHR1+mkcK0s/NqdnUAGHsfUe0zo+gx4/4bmWR0NIkR0v/11Of6YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnIac+bvBf9iGmhwSuBypE89yY8MB8GA1UdIwQY
MBaAFOTSccP6kDpZD99UiZRJ5pjy6cYyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYt
NWYyMDUyMzZkZTFmLzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC84OTcwOTItMDc1MC00ZDk2LWIzMmYtNWYyMDUyMzZkZTFm
LzEvNU5KeHdfcVFPbGtQMzFTSmxFbm1tUExweGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhnTOLkm0
HNbKj6Vr6kLSru6uvTMKGNX9lHTQ3GrMfzQktZJMKRBbNKgU44tCnwifl2M/yVwd
zmKr+BPpaOEpNm5b+PeIrh+7m9xNWrkngLMK1vCEeN7Hqbl/DpCRtni1zTY+D3kh
0jofPUjPIar/Z0+09MRMxGoeDsx6e6EfvIBSGtJd3RrAO/GI38q1az2dTOXvi6w7
7/KvFQ2pPiT/JmGLxbME0ef84ahmSatV+Xjo92YLJgIoopPfPShGIFJcE5eczwtE
NShdAYjL/H8HzGeHTpVcQhI0ua44if6E+lfIqheVpv+6XaSb0j8p1//ccJRbSIPu
K/MiZEDLFoY5NA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:38:47 2026 by rpki-client