Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
File:                     5lAiAKbmP3Y5etuU39g0wRaAm58.mft (raw, json)
Hash identifier:          p1aAb2poCX2iZBDKGbGcZABYeiBVYsJQjHeOSiEF/sk=
Subject key identifier:   8B:AD:99:53:B4:F5:25:D3:EF:7E:F5:4C:2A:DC:7D:13:8F:15:C9:B6
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Certificate issuer:       /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial:       019E1C1020A705FF8135CA0E2714DC999D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
Manifest number:          0F92
Signing time:             Tue 12 May 2026 12:01:19 +0000
Manifest this update:     Tue 12 May 2026 12:01:19 +0000
Manifest next update:     Wed 13 May 2026 12:01:19 +0000
Files and hashes:         1: 5lAiAKbmP3Y5etuU39g0wRaAm58.crl (hash: rJtCs08AF4qtXhqRRK4pqtfTVnAZBF3/C2JDOW+RCpQ=)
                          2: VbpHqTm4InVPfeEhfG1houFen0s.roa (hash: mGh4WVGrOaH38U0K8XkAxbYr95lc2nJQTlFAMtTdwzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:20:a7:05:ff:81:35:ca:0e:27:14:dc:99:9d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
        Validity
            Not Before: May 12 12:01:19 2026 GMT
            Not After : May 13 12:01:19 2026 GMT
        Subject: CN=8bad9953b4f525d3ef7ef54c2adc7d138f15c9b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:b3:55:7d:7d:41:9d:d1:61:b3:18:00:ac:
                    1c:39:31:46:d3:ee:e4:55:fc:43:cd:64:96:44:33:
                    cc:72:8b:1f:d8:c7:45:8e:20:be:06:8b:c9:40:11:
                    3c:67:aa:bb:b9:0b:a7:62:96:ef:a1:46:e9:32:74:
                    70:a2:fc:9a:9e:cb:a2:4d:46:b9:1a:f9:da:8d:3d:
                    92:52:81:10:8d:e1:10:e0:91:5d:8b:13:93:92:53:
                    d6:64:50:a3:67:f5:8c:d1:a7:81:02:7a:0c:b8:77:
                    53:91:b7:5d:cf:7d:6b:78:6b:0e:f9:ee:72:bf:48:
                    a2:99:fd:ad:1e:48:ea:37:7c:49:7d:dc:9b:31:5c:
                    cb:3c:5e:f9:8c:f4:ed:b4:39:a5:cd:10:03:e8:bd:
                    3f:6a:7c:bf:39:7c:2a:e4:1f:82:f3:0d:59:11:9e:
                    7c:d1:84:9f:e8:d0:d3:5f:c4:97:e2:04:26:f8:1f:
                    01:1a:db:68:41:95:75:9b:22:01:08:fa:d0:f0:77:
                    6b:f3:00:86:e0:b9:0c:86:a8:73:f3:12:f9:f1:9b:
                    d3:8a:04:4d:f0:9a:d9:f5:5d:05:02:cb:39:5e:ad:
                    e4:d1:5e:fd:81:3f:10:32:16:aa:19:8a:af:6d:1e:
                    85:59:fc:c1:41:cc:a2:cf:38:ad:ab:e1:ca:dd:2a:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:AD:99:53:B4:F5:25:D3:EF:7E:F5:4C:2A:DC:7D:13:8F:15:C9:B6
            X509v3 Authority Key Identifier:
                keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d9:1b:37:a7:44:93:a0:a8:55:fb:38:ae:2f:f7:13:fe:c8:
         b6:c0:a9:c2:92:ce:ea:de:78:65:a1:8f:34:e6:66:15:f1:3d:
         bc:4f:1f:64:c1:9d:65:6b:62:0a:ba:05:55:17:6b:b6:0e:a6:
         53:a2:69:c7:73:c2:8d:22:93:62:83:00:6f:34:ee:59:25:88:
         65:db:c4:22:e9:3c:0b:d7:4d:fb:b7:f0:7e:27:03:55:9c:dd:
         f9:9e:fe:de:46:21:c4:d1:14:61:14:2f:31:73:d8:b4:27:1c:
         16:58:db:f3:3a:83:13:2e:b2:26:40:48:16:12:dc:54:b8:29:
         f7:22:ca:d7:9e:bf:32:99:1a:29:e9:66:3f:a2:8c:5c:0d:c3:
         d9:8c:a0:98:17:70:e8:57:1c:94:84:bc:36:3c:55:34:82:3f:
         b8:28:98:b3:fb:82:ba:e1:a6:a4:06:7a:b6:d8:9d:f7:70:cc:
         0d:8e:57:db:01:74:0d:e8:28:b9:32:18:12:e5:d2:5f:e6:0f:
         50:99:16:fd:29:44:16:f4:9f:6c:5b:aa:e8:89:64:2d:82:59:
         7d:6d:04:81:a9:f9:2c:f5:4a:97:aa:10:bf:6f:2f:6d:49:fe:
         a0:d0:b3:8e:94:57:f2:53:72:7e:9b:a3:af:83:83:5e:96:7c:
         2f:fc:96:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:14:56 2026 by rpki-client