Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
File:                     5KpTP0dfB59zX-sZRoTBjVrqYy8.mft (raw, json)
Hash identifier:          pUlZ7fkQOxWtN8QXD9eFc4usVtaa2Djcy3/HXTaMCpE=
Subject key identifier:   7B:2B:46:17:B0:D9:71:B8:DE:B5:33:57:E8:29:C9:0A:24:64:61:1F
Authority key identifier: E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F
Certificate issuer:       /CN=e4aa533f475f079f735feb194684c18d5aea632f
Certificate serial:       019E1CB48A9A1093578309E7D12502CC64A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
Manifest number:          011E
Signing time:             Tue 12 May 2026 15:00:54 +0000
Manifest this update:     Tue 12 May 2026 15:00:54 +0000
Manifest next update:     Wed 13 May 2026 15:00:54 +0000
Files and hashes:         1: 5KpTP0dfB59zX-sZRoTBjVrqYy8.crl (hash: 2pJ8A2TF/TvEwV6cf/lackc2pRoWUnZd5QYK0CzHHgk=)
                          2: a2gamHaBwEzpT1CSDGHEmtwoaQA.roa (hash: Bd+1bTMu0PVOG6jw2K3AGQhoYyVntE65fkDtSywP1hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:8a:9a:10:93:57:83:09:e7:d1:25:02:cc:64:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4aa533f475f079f735feb194684c18d5aea632f
        Validity
            Not Before: May 12 15:00:54 2026 GMT
            Not After : May 13 15:00:54 2026 GMT
        Subject: CN=7b2b4617b0d971b8deb53357e829c90a2464611f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:2c:09:3d:bd:ed:81:ff:73:66:91:2b:22:eb:
                    f6:f7:d7:8d:b2:2c:93:52:31:1e:09:91:3b:6d:1e:
                    5c:32:67:30:15:5b:63:f8:03:3e:95:3c:a4:46:54:
                    d4:1a:90:a4:e6:04:d7:89:cd:3d:0a:77:3a:d9:d8:
                    8c:b5:aa:56:6b:8f:fd:83:26:2e:33:35:77:ce:75:
                    60:08:52:9a:5c:87:8b:d3:8b:c3:bd:7d:de:2c:43:
                    b0:e7:f1:b8:12:9d:fe:07:c6:0a:fb:da:20:ee:bf:
                    fe:57:27:9e:c3:7f:cd:b3:1e:35:5e:ea:82:aa:6b:
                    57:bd:3b:62:07:b3:f8:78:dc:c6:4f:1a:2d:43:9e:
                    09:83:7a:a8:97:db:42:8d:e1:0d:27:08:bd:06:ca:
                    af:ca:7f:65:6f:86:c8:d9:0e:6d:f6:a7:24:06:c5:
                    5f:37:af:6b:6b:b9:95:26:b3:29:5a:38:56:ea:e7:
                    f5:17:42:ab:89:47:4b:cc:c0:c4:f3:f9:50:44:d7:
                    f1:10:d2:17:cc:d1:23:52:46:3d:d9:db:92:5b:4c:
                    7b:a8:4e:da:31:09:d3:ff:a1:fd:af:60:b6:5c:cb:
                    c0:36:ab:0e:c2:91:c7:eb:ed:db:50:12:51:b0:92:
                    6d:ff:a6:1f:e0:b2:47:1c:9e:95:8c:1d:b9:fa:62:
                    ca:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2B:46:17:B0:D9:71:B8:DE:B5:33:57:E8:29:C9:0A:24:64:61:1F
            X509v3 Authority Key Identifier:
                keyid:E4:AA:53:3F:47:5F:07:9F:73:5F:EB:19:46:84:C1:8D:5A:EA:63:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KpTP0dfB59zX-sZRoTBjVrqYy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e7b70d-6001-428b-add0-37c210bab7a0/1/5KpTP0dfB59zX-sZRoTBjVrqYy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:30:e5:56:29:33:28:ce:08:1a:da:2f:e3:08:ac:52:0f:46:
         2a:cd:b6:bb:4c:6a:29:ec:05:90:8d:30:5f:bf:bf:00:46:f5:
         87:e9:94:d9:bd:7e:f1:28:11:b8:e4:f0:2b:c7:a0:14:c7:00:
         39:d5:4b:1f:8a:08:46:e4:c7:89:32:fa:ba:07:09:7b:17:e1:
         e8:50:4d:d3:0a:36:f1:20:10:27:6a:ee:d6:35:70:32:4b:04:
         76:39:99:ca:bd:f4:78:21:c5:f6:6e:59:a3:25:5e:38:04:b5:
         56:ff:f4:b9:33:c4:f0:83:f4:b6:5d:9a:31:11:9e:64:35:96:
         88:f5:08:76:df:fc:67:fb:c1:1d:0c:5e:e1:e2:64:14:44:66:
         50:93:3e:d7:c8:9c:d9:5a:b9:e8:9d:8c:9e:8a:e0:77:f9:44:
         3d:0e:10:03:02:a7:c4:5f:57:ca:c8:7b:cd:9a:df:a1:d8:1d:
         d4:61:3c:c0:c3:ed:75:b1:c8:01:a0:e9:46:c2:ea:8c:4b:98:
         c4:e4:63:c0:6d:70:a2:37:69:cc:89:87:5d:cf:0c:5d:17:68:
         63:65:f3:c3:99:67:a6:c0:2a:dd:75:5b:78:44:16:48:b5:a3:
         96:00:ff:fe:20:38:d4:bb:fb:64:35:1a:ac:41:98:49:27:d1:
         dc:18:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:12:48 2026 by rpki-client