Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
File:                     5eaQaKix-3-geVuvm7OrhslORvw.mft (raw, json)
Hash identifier:          cDhjOX1JVgy0NASoharJ3+WWvk1OXreMUYMSIU5psyU=
Subject key identifier:   EB:CC:7D:6E:F2:4D:1F:9C:74:8A:A5:84:D7:90:26:3D:05:79:5C:D5
Authority key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Certificate issuer:       /CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Certificate serial:       019E1EA2B5C2D530617CBFD4DE299EDE2947
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
Manifest number:          15B8
Signing time:             Wed 13 May 2026 00:00:40 +0000
Manifest this update:     Wed 13 May 2026 00:00:40 +0000
Manifest next update:     Thu 14 May 2026 00:00:40 +0000
Files and hashes:         1: 5eaQaKix-3-geVuvm7OrhslORvw.crl (hash: StqijpvRUVGay12icnm0SCILAm9Cv6XJIWtzw9OeIic=)
                          2: CBtJzFMoigMYechG5k_lhWICkAA.roa (hash: 6qcOp5zAWvjz4mUxBNJFQHjpgjjuwwz7xV3uMQfNfLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:b5:c2:d5:30:61:7c:bf:d4:de:29:9e:de:29:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
        Validity
            Not Before: May 13 00:00:40 2026 GMT
            Not After : May 14 00:00:40 2026 GMT
        Subject: CN=ebcc7d6ef24d1f9c748aa584d790263d05795cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:79:d2:2b:72:6d:35:5e:ed:79:13:bd:fb:
                    49:2f:d8:8a:e9:7b:0b:a8:37:db:b6:57:a3:4e:3c:
                    a3:d7:bd:e2:1e:22:04:95:0c:a7:35:7c:7e:f5:d2:
                    58:58:dc:21:a3:07:72:e0:fb:bf:d9:d7:8f:fc:05:
                    65:ff:9a:fb:fb:63:51:31:f1:86:15:b6:13:7e:2e:
                    92:60:a9:e9:7e:c5:38:b8:b1:ed:1a:06:dc:ee:69:
                    31:d3:df:a0:a0:5d:8b:18:13:22:36:e2:9e:10:25:
                    1b:36:da:83:80:d0:98:92:b6:5e:db:29:65:0f:64:
                    88:4c:c5:71:36:c2:e5:a7:d1:26:d0:28:fa:c7:c0:
                    e2:96:27:80:32:8f:be:90:78:87:df:87:49:71:c2:
                    e8:98:8a:d6:7c:dc:d5:77:e9:70:2a:37:d5:59:a9:
                    98:a7:dc:a2:3d:56:ae:fe:d0:16:3f:77:ab:6b:8c:
                    61:09:92:49:ee:6b:8a:12:7b:0f:08:6c:a5:45:51:
                    43:07:eb:ad:4d:a0:dc:b1:f9:cb:e4:6c:0c:9c:26:
                    a6:f2:2a:c2:5e:67:c9:cd:e1:a5:a7:89:32:a6:dc:
                    c0:90:05:87:20:0f:4a:f1:4b:4d:0e:fc:c3:6f:a3:
                    3e:c9:52:b8:f9:b1:71:c1:e8:3a:25:01:37:98:59:
                    8a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CC:7D:6E:F2:4D:1F:9C:74:8A:A5:84:D7:90:26:3D:05:79:5C:D5
            X509v3 Authority Key Identifier:
                keyid:E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:22:0d:84:c7:24:ce:c6:2b:c8:aa:be:0a:ce:f2:06:13:97:
         b6:1d:da:7b:e3:fe:37:e0:75:8a:d5:00:db:a5:53:4d:16:dd:
         15:7b:a5:fa:34:9f:e8:5f:7c:54:fe:79:f5:29:e2:a6:69:92:
         83:01:b9:04:e8:1d:fd:98:ba:21:89:0f:18:8a:7b:c3:0d:60:
         83:0c:7e:d5:99:4d:70:93:fb:4e:34:91:b1:0b:d9:c3:aa:a3:
         10:43:27:f2:00:39:14:d2:a6:e5:2a:97:dc:de:1c:98:c6:4c:
         fa:97:6e:19:02:50:8c:a1:99:e1:df:99:f3:4b:f8:57:2e:dd:
         fe:2f:47:e2:d0:d8:6b:f6:fa:89:6a:83:8e:d7:6d:11:16:55:
         ca:08:24:30:22:20:dd:1c:87:c3:de:85:cb:0f:cd:9d:c3:12:
         c4:10:cc:ba:dc:ae:a5:27:04:ed:f5:53:86:e5:f5:31:cb:1c:
         b6:ab:90:43:d2:39:54:24:ca:59:41:ae:79:1f:73:ee:9e:fd:
         1b:0c:cc:1b:68:8e:1a:cb:34:0f:55:ff:f4:52:55:60:c9:dd:
         d1:c4:f8:fb:ff:ca:06:cb:4e:74:05:88:f0:f0:35:0e:2b:e8:
         0c:c5:b0:a5:05:3a:77:ab:1a:0e:84:22:de:79:88:5b:e6:e5:
         23:39:fa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:05 2026 by rpki-client