Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
File:                     5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft (raw, json)
Hash identifier:          uzTjOO5l424+ekLkSPj3L7/0ZsRWowEmqCvAu3r9rGI=
Subject key identifier:   09:3B:D5:73:AC:F8:67:2E:92:13:1D:AC:46:34:56:1A:04:69:1A:FD
Authority key identifier: E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42
Certificate issuer:       /CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
Certificate serial:       019E1D597FCEE14BFD653152C1E108BD8079
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
Manifest number:          1377
Signing time:             Tue 12 May 2026 18:01:05 +0000
Manifest this update:     Tue 12 May 2026 18:01:05 +0000
Manifest next update:     Wed 13 May 2026 18:01:05 +0000
Files and hashes:         1: 5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl (hash: ufs75vJyINio814n7mTpjt7S24LRM2MPnoXqmeuZje0=)
                          2: 7_L8NcVLRTz2RYybJHlGYVjuobc.roa (hash: JorE4629r9nl2sDA/mjIQPSANIbO1m6LYD+3jl05Tds=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:7f:ce:e1:4b:fd:65:31:52:c1:e1:08:bd:80:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66e7726ff53a13c80ccbca4d5d394e4e8aef542
        Validity
            Not Before: May 12 18:01:05 2026 GMT
            Not After : May 13 18:01:05 2026 GMT
        Subject: CN=093bd573acf8672e92131dac4634561a04691afd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:4f:b0:05:b0:7f:53:d8:e6:db:1e:8a:87:
                    4a:e3:01:66:ff:a8:2a:a6:3b:00:d6:2e:f6:21:c7:
                    d5:c8:46:ca:20:35:b0:ed:9b:8b:72:0e:f0:88:42:
                    30:52:95:04:ec:f3:c9:12:84:11:c1:a0:64:98:21:
                    d2:d7:c5:83:8e:61:3b:a2:a1:45:91:cb:79:7d:60:
                    fc:f1:3b:2e:a7:4c:26:4e:66:f1:b0:50:3f:9d:84:
                    58:ea:bd:12:f1:26:79:db:6d:ca:3c:70:2c:50:9c:
                    f4:f2:18:59:b3:fa:a4:28:cd:41:ae:57:2d:6c:dd:
                    b3:7f:fc:97:8e:99:5e:fc:80:9c:33:7b:b1:67:e9:
                    5d:a6:43:ec:72:d5:75:f5:39:db:2e:14:7d:7b:32:
                    01:c7:82:18:00:1e:41:07:83:05:2f:47:1d:dc:49:
                    90:4c:7e:7f:d6:68:b7:4d:cf:36:35:6d:a1:fa:f9:
                    cf:83:d4:bd:a1:d0:96:5b:f2:ae:f0:87:05:70:3d:
                    99:fb:ac:54:11:6c:bb:21:f0:97:f7:7c:e9:a4:ed:
                    f0:fc:3d:97:10:e0:91:cc:46:ec:8c:d8:60:4d:61:
                    93:27:60:bd:a9:db:1d:41:f2:a9:d1:77:1f:b9:0f:
                    b1:d2:b0:7e:6e:c7:3d:3d:7b:4c:39:a6:2c:97:95:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3B:D5:73:AC:F8:67:2E:92:13:1D:AC:46:34:56:1A:04:69:1A:FD
            X509v3 Authority Key Identifier:
                keyid:E6:6E:77:26:FF:53:A1:3C:80:CC:BC:A4:D5:D3:94:E4:E8:AE:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31b11f-2b6b-4252-990b-516ca84fe5fe/1/5m53Jv9ToTyAzLyk1dOU5Oiu9UI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:19:8b:93:0b:cc:26:b6:8c:01:7f:59:55:a1:f1:31:3c:18:
         08:6b:fb:cb:9c:d5:66:79:ba:cf:97:51:f8:ea:f7:b5:e2:12:
         74:72:0b:1b:c7:8d:89:00:06:46:bd:05:f7:f8:1c:76:67:58:
         15:67:c4:d6:05:6c:4a:e7:2a:f3:54:98:ad:c1:e5:86:12:e2:
         72:9e:23:d7:d0:93:3b:3a:18:96:0e:6d:52:5f:9a:98:b9:2c:
         b9:ea:37:bb:95:19:4c:d9:0b:34:b8:33:6b:20:97:71:30:09:
         9d:42:29:fb:f8:5c:a5:f0:30:ca:07:d8:4b:ba:75:60:43:45:
         ef:4e:26:cb:c9:89:51:14:81:cc:f4:fc:05:e3:ea:36:b2:0c:
         4e:2d:93:a8:4e:5d:8c:a3:81:22:49:0b:2c:94:f0:36:b2:8f:
         30:64:30:b6:85:cf:bc:da:5c:7a:a0:c0:85:e1:34:f9:c9:cf:
         1b:9b:75:39:fd:5a:c1:aa:23:20:32:c0:e6:7a:22:e7:31:da:
         df:21:fa:0e:c5:19:08:6e:6c:54:43:6f:9b:68:cf:da:1f:76:
         74:1c:2e:a1:42:df:9f:2b:fe:79:73:56:b9:ef:02:e0:e4:e9:
         92:b4:83:51:6b:ab:83:b5:f8:36:26:6b:1b:5f:73:2c:2f:8b:
         50:cb:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:08:30 2026 by rpki-client