Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
File:                     5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft (raw, json)
Hash identifier:          10lXG9oGUJGLUevgOctUCMKyXWet/y1EmRLoTzeFyMY=
Subject key identifier:   9A:D6:A7:C2:81:37:B3:66:65:37:A5:10:68:99:BB:EC:B2:60:11:B4
Authority key identifier: E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE
Certificate issuer:       /CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
Certificate serial:       019E1CB48DE2DD4B6F9C5B14F8F1F59E158A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
Manifest number:          08F3
Signing time:             Tue 12 May 2026 15:00:55 +0000
Manifest this update:     Tue 12 May 2026 15:00:55 +0000
Manifest next update:     Wed 13 May 2026 15:00:55 +0000
Files and hashes:         1: 5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl (hash: D1o6Rmo8CzlExj1ZNebaw9NawQKOnbh7EnXGTNFoC2E=)
                          2: FImc6744QQwEQQovKDqizeaFC7c.roa (hash: sUbtOcLGidbBgbl2zkqKhUn8p3q1zKed/eARiNS1qdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:8d:e2:dd:4b:6f:9c:5b:14:f8:f1:f5:9e:15:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54ab89d33bd8aa9438a1dd0b4c59edbeb0c64ee
        Validity
            Not Before: May 12 15:00:55 2026 GMT
            Not After : May 13 15:00:55 2026 GMT
        Subject: CN=9ad6a7c28137b3666537a5106899bbecb26011b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b8:77:04:1d:09:87:7e:a1:1c:a3:cc:74:36:
                    4c:50:48:cf:58:0b:09:ac:c3:b6:e6:ba:18:eb:bc:
                    2b:6e:d2:d3:cc:da:ca:2c:28:db:37:3f:6e:08:8e:
                    bb:0d:a8:9e:8a:09:49:f3:bd:06:99:49:fc:a9:9f:
                    1b:1d:9e:17:5e:5d:71:c0:7f:66:18:96:50:61:ab:
                    a5:55:23:05:73:f3:4c:73:6d:5c:5b:d1:54:80:7a:
                    52:f0:b0:ea:a3:e7:7f:d6:72:88:fe:05:b7:0a:7d:
                    33:a3:5a:49:f3:cd:ee:4b:7d:cb:96:98:14:e9:6b:
                    6f:ca:31:ad:80:a0:0f:c3:9e:10:12:3c:c4:5b:b6:
                    cd:dd:ba:26:c5:76:31:9b:1b:15:1e:b0:a0:b1:65:
                    ce:60:f7:da:af:83:a1:58:29:9f:85:f1:42:c3:19:
                    11:ae:84:61:df:22:3e:5e:ab:26:81:d0:d0:ec:bb:
                    d5:49:19:a3:55:61:c6:14:c7:0a:de:bb:7d:95:c7:
                    ca:4c:98:54:86:e7:d6:23:00:fd:ed:a8:9d:5d:53:
                    51:7c:3e:0a:e0:6a:67:2a:13:b5:08:96:9d:cb:f4:
                    22:a0:02:fd:e4:ea:b9:cc:68:b9:23:ff:47:e0:08:
                    18:1b:31:7c:06:d2:29:82:7e:4f:0a:b6:19:af:7f:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D6:A7:C2:81:37:B3:66:65:37:A5:10:68:99:BB:EC:B2:60:11:B4
            X509v3 Authority Key Identifier:
                keyid:E5:4A:B8:9D:33:BD:8A:A9:43:8A:1D:D0:B4:C5:9E:DB:EB:0C:64:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Uq4nTO9iqlDih3QtMWe2-sMZO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c316b6-72e3-4bce-bbe2-1b432872bcff/1/5Uq4nTO9iqlDih3QtMWe2-sMZO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ab:ba:67:d7:a4:d5:56:6f:9c:e7:15:7c:2c:20:b1:9d:3c:
         37:f8:db:b2:37:a5:f5:75:e4:a5:69:6a:22:d0:a2:a0:d6:c8:
         3b:18:16:a9:f8:0a:38:5b:10:ce:f2:af:6e:d2:45:c0:4b:e6:
         cc:1f:4c:80:b3:f9:3b:67:f0:de:78:e9:8a:a3:8e:71:be:16:
         b6:8d:56:6e:ef:44:e2:85:32:9c:49:32:f7:f5:13:a9:21:a8:
         47:3b:7a:f8:e2:e5:b8:b7:34:60:d4:16:2c:0b:b3:e2:29:1d:
         e7:1d:ea:74:b4:05:44:98:6f:d1:3b:b4:ee:ae:4e:0f:01:cd:
         ca:3d:d8:73:c8:d6:48:9f:46:f1:14:4a:15:2a:3c:26:b2:5d:
         f2:c6:13:78:ac:1c:2a:d2:39:54:58:43:a3:f0:53:b9:18:8c:
         01:64:4a:17:07:8e:da:13:73:63:aa:cb:5d:49:b2:91:38:df:
         1f:e8:c6:23:16:da:c0:2b:fc:d3:99:ee:0c:0e:c3:d2:96:eb:
         c0:72:12:47:a4:fb:e3:78:de:02:95:a6:14:c5:0f:3b:da:c3:
         0a:3f:46:62:5c:fe:eb:28:21:98:70:ea:c1:4e:49:0b:2a:a7:
         73:58:ab:3b:92:40:8e:a5:b9:97:04:a3:b9:3b:82:55:dd:af:
         9e:f5:5c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:29:58 2026 by rpki-client