Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
File:                     5HZ7Uea0grnnp0g2YqXb7huNhaA.mft (raw, json)
Hash identifier:          JDiXpAsUPPqH93AB2UADPGmyn1S6V6wC7pX5eHb3TZ8=
Subject key identifier:   E3:6B:81:51:CA:15:D4:A3:EF:4A:90:D7:C5:5E:EA:41:74:D1:9D:AA
Authority key identifier: E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0
Certificate issuer:       /CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
Certificate serial:       019E1D91050D8B35C5BDFF143C1FA04B5A76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
Manifest number:          1905
Signing time:             Tue 12 May 2026 19:01:43 +0000
Manifest this update:     Tue 12 May 2026 19:01:43 +0000
Manifest next update:     Wed 13 May 2026 19:01:43 +0000
Files and hashes:         1: 5HZ7Uea0grnnp0g2YqXb7huNhaA.crl (hash: 47qWgkm2+CkRDfgrtzNQ+Vx7ngTG3ZZSDRoihf9/tvo=)
                          2: op_F057a4GgIgBhETNDsjlr7XoU.roa (hash: J2RVYSCsLv7kStzpmuTCfYMuX/qExeLiQyP61uEzXyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:05:0d:8b:35:c5:bd:ff:14:3c:1f:a0:4b:5a:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4767b51e6b482b9e7a7483662a5dbee1b8d85a0
        Validity
            Not Before: May 12 19:01:43 2026 GMT
            Not After : May 13 19:01:43 2026 GMT
        Subject: CN=e36b8151ca15d4a3ef4a90d7c55eea4174d19daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:11:61:f1:78:90:55:cb:9a:2b:c9:3d:64:
                    8d:e4:6d:df:87:86:40:d5:b4:c4:af:53:59:a5:7c:
                    09:3a:8b:d9:af:34:9a:fa:17:5d:dc:92:68:15:b1:
                    10:ca:e3:15:c1:2f:7d:9e:a3:b5:49:4d:6a:d7:4e:
                    64:fa:eb:e0:39:b1:3a:c0:0f:61:b3:5e:37:61:a4:
                    29:3f:ba:dc:61:5d:d6:1e:64:47:ff:0b:d2:30:06:
                    da:d7:22:36:1d:48:3e:73:2a:d6:85:d6:40:73:1e:
                    13:ca:d1:3a:7c:70:5a:2e:bf:ce:8a:90:c1:01:27:
                    36:7e:35:2f:6c:84:a1:7e:7e:6b:b7:91:cb:29:8f:
                    47:f6:74:72:5d:6e:08:fc:55:e4:ee:69:3a:e4:fe:
                    c0:5d:4e:91:bf:a0:20:2b:e0:d8:b7:92:58:b4:59:
                    55:a1:46:62:c5:ca:62:d8:bd:17:84:f0:c4:72:f5:
                    58:ff:c1:35:9a:2d:aa:aa:94:9c:ff:aa:b8:ba:ee:
                    fb:6c:c6:7b:0e:29:8a:92:35:76:a3:3b:f0:b9:c7:
                    eb:fa:d3:0c:fd:f6:3b:74:66:77:b5:e5:06:43:ce:
                    b3:65:b2:cc:d6:3b:9d:78:74:ec:13:8b:73:29:69:
                    f9:d9:96:46:50:ed:8e:a3:23:0f:ff:78:36:e2:8f:
                    fc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6B:81:51:CA:15:D4:A3:EF:4A:90:D7:C5:5E:EA:41:74:D1:9D:AA
            X509v3 Authority Key Identifier:
                keyid:E4:76:7B:51:E6:B4:82:B9:E7:A7:48:36:62:A5:DB:EE:1B:8D:85:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HZ7Uea0grnnp0g2YqXb7huNhaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/745768-ba80-4e76-a1d8-bdbe16806616/1/5HZ7Uea0grnnp0g2YqXb7huNhaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:8f:1c:44:2b:fc:50:57:11:eb:0a:5d:2a:15:a7:9d:e9:62:
         b1:9c:b0:b0:dc:ee:36:5e:bc:9e:22:81:94:45:04:d9:52:b5:
         6e:cd:52:97:1e:9d:06:a3:97:68:e9:3d:a7:25:8c:7e:d7:c1:
         b8:0d:59:0e:42:16:a6:01:19:bc:e3:af:fd:fb:ff:3a:ec:31:
         c8:0e:87:19:62:0f:af:b7:e9:d2:63:bb:3c:5f:ca:7f:7a:fe:
         ee:12:b1:0d:b0:f8:35:11:49:c4:56:55:8c:42:70:20:6b:3d:
         36:c8:48:78:b7:bd:16:f1:6d:6e:c4:63:5b:29:de:7f:5a:e2:
         7a:30:04:29:07:80:56:11:b5:b6:01:ba:5d:87:01:53:0a:e9:
         18:d6:ca:0e:54:3b:88:62:17:cb:b3:78:b0:0b:35:a6:5d:e2:
         1d:b5:35:cb:73:0b:bb:1f:5a:01:eb:47:b4:61:ef:dd:c5:78:
         fa:94:2c:18:3b:1b:b3:15:c9:4c:48:71:3f:d9:d5:f5:3a:9c:
         64:ed:fb:c8:24:b1:9c:8d:89:58:4c:e6:45:95:a4:f2:40:33:
         b1:53:a5:6c:5b:7b:7c:29:97:86:53:32:3d:2e:2c:10:1e:1c:
         f4:00:f5:87:99:57:56:81:08:15:8d:89:cd:59:df:63:a9:e8:
         13:25:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:29 2026 by rpki-client