Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
File:                     5wVXsySVkhfZJZvs0aBUm2_6n2U.mft (raw, json)
Hash identifier:          zrmJzyZmrnAfmEyv76bffvu4vGTIVPGI/JAVYDfr3v4=
Subject key identifier:   D3:71:19:9B:DD:76:D1:93:07:D9:CC:22:93:0C:B7:C7:65:5E:A2:24
Authority key identifier: E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65
Certificate issuer:       /CN=e70557b324959217d9259becd1a0549b6ffa9f65
Certificate serial:       019E1C47852EC72EB183F688D82F39AEE6D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
Manifest number:          0664
Signing time:             Tue 12 May 2026 13:01:49 +0000
Manifest this update:     Tue 12 May 2026 13:01:49 +0000
Manifest next update:     Wed 13 May 2026 13:01:49 +0000
Files and hashes:         1: 2CZKBFEsZCe6lSafiYydtgtq4EY.roa (hash: oypEzykd6+OgmxX4a99oGmsyNnqfPV2lT0fMBwXCOM4=)
                          2: 5wVXsySVkhfZJZvs0aBUm2_6n2U.crl (hash: uIq8R6LV8Uzu5sZNT9EVCiYYG2NlAJoRGxI4mXEQ/OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:85:2e:c7:2e:b1:83:f6:88:d8:2f:39:ae:e6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e70557b324959217d9259becd1a0549b6ffa9f65
        Validity
            Not Before: May 12 13:01:49 2026 GMT
            Not After : May 13 13:01:49 2026 GMT
        Subject: CN=d371199bdd76d19307d9cc22930cb7c7655ea224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:01:82:c5:6c:9e:63:5f:b3:9c:1c:16:f6:29:
                    90:e6:17:2e:3c:ad:fa:2c:c3:d7:a9:c3:e9:c0:15:
                    97:49:6f:6a:08:86:c4:c9:df:cb:b5:41:31:63:f8:
                    a4:7d:34:06:db:77:04:7f:d2:07:96:2e:ad:9d:77:
                    91:92:01:28:23:63:ba:e0:54:a3:6d:29:81:ad:6c:
                    e3:99:fa:7f:e8:51:4d:9d:68:9d:17:17:e2:28:ea:
                    a9:e9:3c:2e:0b:9a:e4:41:7a:80:6b:97:f2:1b:79:
                    54:bf:9b:da:3c:b3:bc:7d:f5:6f:40:79:4f:43:3b:
                    3b:48:1f:9f:ad:b9:a8:3d:c8:28:c1:16:9c:a7:86:
                    00:cc:40:4f:97:67:b0:2d:0e:ba:a9:51:8d:b5:9b:
                    6e:2a:70:94:18:ba:5f:a0:38:9c:da:bb:47:c8:93:
                    95:09:ec:ef:e2:aa:5a:3f:07:ff:03:e2:26:92:30:
                    ef:d7:67:5e:f3:d7:5d:32:05:85:49:5c:b3:08:c3:
                    92:fd:f5:f7:1d:ec:cf:cc:be:96:ad:0b:b5:14:64:
                    ee:87:d1:bf:60:9e:e3:a3:88:2a:8e:2e:a5:4b:78:
                    b5:f2:b8:d7:ae:5a:f3:e1:4f:1f:5a:b6:16:60:32:
                    ab:78:0c:e8:fa:a9:fd:13:2a:70:9d:89:f4:3c:9c:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:71:19:9B:DD:76:D1:93:07:D9:CC:22:93:0C:B7:C7:65:5E:A2:24
            X509v3 Authority Key Identifier:
                keyid:E7:05:57:B3:24:95:92:17:D9:25:9B:EC:D1:A0:54:9B:6F:FA:9F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wVXsySVkhfZJZvs0aBUm2_6n2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecd14b-d2a9-40f9-b631-d5c208ea7e7e/1/5wVXsySVkhfZJZvs0aBUm2_6n2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:40:7f:22:4f:44:ba:e2:4f:ef:16:dd:8f:7d:53:a8:a4:26:
         7e:ea:e2:86:ae:b7:71:4e:8f:aa:cf:ef:ea:de:c7:81:79:59:
         7e:14:ba:35:29:42:35:d8:2d:e0:be:a9:12:68:54:84:0b:37:
         dc:0d:cc:69:b7:5b:47:0c:91:8e:1f:1c:36:21:4d:e8:12:5c:
         ba:38:7e:c8:fd:ee:99:aa:39:cd:c4:e8:7e:d2:a6:7b:42:da:
         42:59:fd:1f:1b:4a:44:c7:3e:6b:9d:7f:df:cf:91:0a:75:ae:
         f4:cd:08:f3:a2:28:41:ad:c0:6e:27:74:2d:91:a9:0b:07:ac:
         ab:90:4d:17:f9:99:15:be:75:58:a9:57:52:d4:15:f2:51:df:
         64:3f:8d:d5:2d:0f:db:98:64:e9:c7:70:37:9b:70:17:f5:88:
         6d:c6:37:d9:dd:a8:58:2b:c8:bb:46:fb:f7:c5:b6:ca:0b:c2:
         07:bf:25:31:d3:37:a6:0b:ce:38:ff:05:44:62:e9:cc:3e:3c:
         84:6d:cc:ec:29:1e:af:31:5d:9c:bd:12:62:50:05:90:1a:a3:
         fa:55:b1:e7:89:ae:18:6c:42:b4:d7:06:62:ad:2e:ab:4f:3e:
         f4:51:fe:6c:48:9d:cc:59:26:d9:8d:40:a4:0b:cb:94:4d:fd:
         c9:36:57:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:25:44 2026 by rpki-client