Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
File:                     5S2LXLp8LSuK8EbrfzEBBawMCaw.mft (raw, json)
Hash identifier:          Mu+/jt5TMBe/KLUAnhbrSuUSI5Yfi+AenkNlsGT0Kn0=
Subject key identifier:   D5:FB:72:AB:51:D9:A0:3B:B2:45:33:34:2B:9A:FD:2B:31:D2:FD:FB
Authority key identifier: E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC
Certificate issuer:       /CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
Certificate serial:       019E1CB5502D38501AAF77EDCE9DCE089644
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
Manifest number:          0702
Signing time:             Tue 12 May 2026 15:01:44 +0000
Manifest this update:     Tue 12 May 2026 15:01:44 +0000
Manifest next update:     Wed 13 May 2026 15:01:44 +0000
Files and hashes:         1: 5S2LXLp8LSuK8EbrfzEBBawMCaw.crl (hash: lwrt7f5K616XdUVWqBhwhNRqOcxEosgJClC+w72ou/g=)
                          2: FAvhW8sWKAscHGAU3zgxhLTugZQ.roa (hash: X1WXq/o7P8HF12gEZBw3GGE/Mbe7dHMWJeZRsRBeNTQ=)
                          3: MIF8N-KpLT760HK_96OqYdm8Sr8.roa (hash: i6ivYqrYWRkrcljfnaVnu2kE1lYrM4nCwRHvHmb1hvA=)
                          4: qcFtPoETurA1PkvXMkugUfoiKGU.roa (hash: m5xsMcWMBwTe7Bg6C7QmtOlyUFNHQEv2lA3sKFUAMJI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b5:50:2d:38:50:1a:af:77:ed:ce:9d:ce:08:96:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e52d8b5cba7c2d2b8af046eb7f310105ac0c09ac
        Validity
            Not Before: May 12 15:01:44 2026 GMT
            Not After : May 13 15:01:44 2026 GMT
        Subject: CN=d5fb72ab51d9a03bb24533342b9afd2b31d2fdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f3:cf:92:47:a4:86:6b:87:1a:e2:80:7d:86:
                    d3:b9:c5:51:70:fe:d0:80:39:47:c5:40:25:4e:d5:
                    59:2d:c9:61:0f:1e:36:6a:f6:4f:8e:44:29:f5:2e:
                    cd:5c:f0:54:64:08:08:68:bc:f2:bb:0e:17:ee:0c:
                    6c:3d:0a:72:cf:c9:48:32:05:07:30:09:99:d6:f3:
                    8a:f5:14:25:55:83:0e:92:63:90:e0:96:35:0f:48:
                    6f:ff:b4:6b:d3:67:c5:ae:e9:c8:9b:af:a6:40:a2:
                    36:52:2a:b5:69:f8:db:c7:c0:fa:02:a2:e3:2a:4c:
                    1b:ab:39:ee:0d:73:e5:db:27:c7:eb:f2:94:71:ec:
                    b7:70:33:36:c4:cc:9a:43:2d:bc:8b:4d:20:5e:02:
                    2c:93:8d:aa:7b:7d:72:70:93:44:f4:73:83:00:96:
                    e1:f8:8f:3a:ff:87:aa:0a:d7:c0:59:dc:d0:4d:4c:
                    e2:07:c0:ff:08:2b:ce:5b:74:06:a3:b1:db:37:26:
                    13:a7:65:07:26:35:64:8f:81:88:a8:fc:8f:5b:33:
                    77:ae:ae:40:8d:22:a9:2a:8b:30:f4:c9:a0:33:85:
                    1a:92:00:d2:fd:7f:31:ac:20:5f:7b:25:9e:3d:de:
                    a5:3c:84:e6:b5:7d:bd:a4:ca:ec:30:5d:3e:6f:54:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FB:72:AB:51:D9:A0:3B:B2:45:33:34:2B:9A:FD:2B:31:D2:FD:FB
            X509v3 Authority Key Identifier:
                keyid:E5:2D:8B:5C:BA:7C:2D:2B:8A:F0:46:EB:7F:31:01:05:AC:0C:09:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5S2LXLp8LSuK8EbrfzEBBawMCaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d4f83d-fb53-424f-851d-c0d062a75354/1/5S2LXLp8LSuK8EbrfzEBBawMCaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:96:eb:e2:90:c9:25:59:5a:04:f5:9c:c2:8c:a6:ca:2b:b3:
         ba:97:cd:5b:73:ec:2e:68:05:d2:90:e4:85:d1:00:89:19:87:
         ee:c9:dc:62:46:a5:98:7b:99:2c:4e:c9:2a:68:74:95:25:0b:
         c4:5b:1a:8e:80:9a:cb:58:fd:57:cd:0b:5b:29:f0:ee:71:a9:
         91:72:5f:ba:35:6f:9a:cc:ff:e4:9d:7a:00:71:25:17:f9:54:
         3a:e6:06:02:90:de:63:08:a0:8a:f0:da:c6:70:36:d7:14:32:
         28:95:50:92:89:16:01:b9:73:10:4d:64:ef:94:cf:c6:04:f7:
         1e:ed:90:fd:1a:2b:05:36:c0:ca:08:e0:e8:19:71:87:79:ba:
         f3:74:da:30:ab:44:94:08:36:7f:76:5e:47:06:8b:72:dd:65:
         96:c6:9b:e9:95:c7:60:90:15:5b:f6:b7:42:d6:7c:74:a2:9d:
         a9:eb:37:1b:00:be:e9:b7:71:08:78:ed:e8:8a:be:c0:1d:e6:
         40:6b:16:37:76:03:1d:0d:a4:74:40:07:38:6a:da:b2:28:44:
         c3:53:c8:62:10:8f:ff:62:c4:a9:1e:ec:12:3c:6f:5c:fa:35:
         59:1e:82:0f:43:b2:b8:50:1a:4d:0d:9b:76:a6:41:6b:e4:36:
         1b:5c:d8:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ctVAtOFAar3ftzp3OCJZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MmQ4YjVjYmE3YzJkMmI4YWYwNDZlYjdmMzEwMTA1YWMw
YzA5YWMwHhcNMjYwNTEyMTUwMTQ0WhcNMjYwNTEzMTUwMTQ0WjAzMTEwLwYDVQQD
EyhkNWZiNzJhYjUxZDlhMDNiYjI0NTMzMzQyYjlhZmQyYjMxZDJmZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/PPkkekhmuHGuKAfYbTucVRcP7Q
gDlHxUAlTtVZLclhDx42avZPjkQp9S7NXPBUZAgIaLzyuw4X7gxsPQpyz8lIMgUH
MAmZ1vOK9RQlVYMOkmOQ4JY1D0hv/7Rr02fFrunIm6+mQKI2Uiq1afjbx8D6AqLj
KkwbqznuDXPl2yfH6/KUcey3cDM2xMyaQy28i00gXgIsk42qe31ycJNE9HODAJbh
+I86/4eqCtfAWdzQTUziB8D/CCvOW3QGo7HbNyYTp2UHJjVkj4GIqPyPWzN3rq5A
jSKpKosw9MmgM4UakgDS/X8xrCBfeyWePd6lPITmtX29pMrsMF0+b1QyJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNX7cqtR2aA7skUzNCua/Ssx0v37MB8GA1UdIwQY
MBaAFOUti1y6fC0rivBG638xAQWsDAmsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQt
YzBkMDYyYTc1MzU0LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kNGY4M2QtZmI1My00MjRmLTg1MWQtYzBkMDYyYTc1MzU0
LzEvNVMyTFhMcDhMU3VLOEVicmZ6RUJCYXdNQ2F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5br4pDJ
JVlaBPWcwoymyiuzupfNW3PsLmgF0pDkhdEAiRmH7sncYkalmHuZLE7JKmh0lSUL
xFsajoCay1j9V80LWynw7nGpkXJfujVvmsz/5J16AHElF/lUOuYGApDeYwigivDa
xnA21xQyKJVQkokWAblzEE1k75TPxgT3Hu2Q/RorBTbAygjg6Blxh3m683TaMKtE
lAg2f3ZeRwaLct1llsab6ZXHYJAVW/a3QtZ8dKKdqes3GwC+6bdxCHjt6Iq+wB3m
QGsWN3YDHQ2kdEAHOGrasihEw1PIYhCP/2LEqR7sEjxvXPo1WR6CD0OyuFAaTQ2b
dqZBa+Q2G1zYuw==
-----END CERTIFICATE-----
Generated at Tue May 12 21:29:24 2026 by rpki-client