Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
File:                     5wn3YuCC6tPW1-TK4p77tNEvV14.mft (raw, json)
Hash identifier:          rl6/7WnJ9K+gID9jxxnAHQ59Ibuh9R3Q1RbvL0dxVCI=
Subject key identifier:   53:3A:CB:8E:5F:CC:C8:F7:F7:15:86:86:2F:1D:82:67:FC:3B:11:9C
Authority key identifier: E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E
Certificate issuer:       /CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
Certificate serial:       019E1D5967C3B2FCA73ACB23BC1A9FB6E6CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
Manifest number:          0F5D
Signing time:             Tue 12 May 2026 18:00:58 +0000
Manifest this update:     Tue 12 May 2026 18:00:58 +0000
Manifest next update:     Wed 13 May 2026 18:00:58 +0000
Files and hashes:         1: 5wn3YuCC6tPW1-TK4p77tNEvV14.crl (hash: C9HCXuAyb4u4z+6QnvHXt+SQvv3o6supREFPsv2fZ4o=)
                          2: WYQDjBxDm_OoBGcgcgmE7OCjFt0.roa (hash: eECr25yVYsujT6+QLvSz9j18MPQkn37aHPMM7Z3Jdzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:67:c3:b2:fc:a7:3a:cb:23:bc:1a:9f:b6:e6:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e709f762e082ead3d6d7e4cae29efbb4d12f575e
        Validity
            Not Before: May 12 18:00:58 2026 GMT
            Not After : May 13 18:00:58 2026 GMT
        Subject: CN=533acb8e5fccc8f7f71586862f1d8267fc3b119c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ae:59:16:f6:e7:b3:dc:55:a5:d9:06:d9:f2:
                    99:85:94:c7:90:ec:95:c3:ae:0c:21:ff:27:3f:10:
                    60:f4:d5:c7:5c:a7:bc:b1:a2:e9:48:18:62:e8:c0:
                    c7:95:df:fc:e4:63:7a:fb:b2:59:f9:64:48:2f:03:
                    47:a3:0f:9d:2c:e7:bf:9b:04:cd:8c:42:48:57:de:
                    af:20:b3:52:1f:d3:95:20:b3:0d:53:c9:24:6d:04:
                    d0:66:82:5e:2a:88:a3:22:6b:09:06:9b:7b:68:1b:
                    ed:cc:b4:6e:0f:05:22:99:c8:30:39:17:e0:1e:d8:
                    30:99:97:17:31:84:dd:ea:13:8f:fd:37:eb:1c:fb:
                    22:81:37:d1:40:a8:14:c7:69:7b:a0:59:f0:d3:10:
                    06:e2:f9:86:5b:48:f9:46:4b:fe:28:aa:48:60:34:
                    05:3e:f9:1b:bd:70:76:d4:e1:1a:7a:e3:ca:a8:f9:
                    c4:12:b5:89:79:bf:79:b0:3b:1b:fa:17:7e:5c:a3:
                    29:59:7d:a4:91:f0:a2:fc:ba:2c:f1:33:88:05:cc:
                    27:89:f1:21:4e:63:92:f7:0e:ce:3d:6a:a1:ff:19:
                    97:59:41:95:f1:a5:c7:97:42:09:13:66:6b:11:5f:
                    82:07:25:00:0c:fe:36:6e:89:ba:47:d9:d9:7f:84:
                    98:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3A:CB:8E:5F:CC:C8:F7:F7:15:86:86:2F:1D:82:67:FC:3B:11:9C
            X509v3 Authority Key Identifier:
                keyid:E7:09:F7:62:E0:82:EA:D3:D6:D7:E4:CA:E2:9E:FB:B4:D1:2F:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wn3YuCC6tPW1-TK4p77tNEvV14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0bda4a-5c10-44db-8f62-ae4fa7f17f9c/1/5wn3YuCC6tPW1-TK4p77tNEvV14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:bc:02:05:c3:80:ea:93:43:98:1f:c1:b1:a9:aa:64:2b:91:
         27:8f:7d:53:8c:e7:2f:3e:3b:ad:69:4a:b3:ea:7b:98:f2:45:
         d3:14:e6:a1:04:da:d2:b5:59:86:3e:f4:84:54:89:f6:ed:a1:
         02:7c:d3:8d:2e:7f:18:54:f8:89:e2:18:82:72:1b:5e:96:0c:
         05:07:64:58:44:53:b6:aa:0c:ae:d6:62:27:07:3b:f9:7a:bd:
         35:d2:78:ae:23:10:77:59:5c:dc:5b:74:62:05:df:df:b5:8e:
         01:4e:7f:b7:d5:df:17:e6:0f:c6:09:d0:2b:d6:65:80:8f:ec:
         ee:1a:3b:3a:e1:2e:a7:7a:ea:0f:2b:3e:01:e7:e3:5a:b1:51:
         5c:0b:84:39:84:a4:69:ba:62:8d:8c:38:39:2e:11:40:2e:e9:
         a5:d0:68:ee:8c:1a:23:5b:e0:aa:97:50:c3:2a:e2:bd:f0:82:
         a9:4a:8c:0b:72:80:e2:80:c2:e7:93:aa:da:9a:3c:f8:b6:24:
         7a:5d:15:8d:fd:5b:33:1e:00:f7:8d:94:6d:95:e6:21:f9:c9:
         e3:12:36:ad:f3:98:6f:94:11:78:e3:b0:5e:d7:7b:1b:28:63:
         e4:d9:ef:7f:60:c9:e4:70:81:73:00:d1:41:f6:5b:01:b3:c5:
         13:5b:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:48 2026 by rpki-client