Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
File:                     5pXPs2_lofOEzHeK4pmsq4HCe_o.mft (raw, json)
Hash identifier:          Zf9+dM+qzRCARXNTyoZ5exddudFEj9vs9dLPz32va6g=
Subject key identifier:   61:C4:45:BE:A8:13:ED:8F:90:8D:1E:C6:55:96:AA:A9:58:07:83:19
Authority key identifier: E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA
Certificate issuer:       /CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
Certificate serial:       019E1CB4F63875EF58757CF0E5A7E5A9AE1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
Manifest number:          1907
Signing time:             Tue 12 May 2026 15:01:21 +0000
Manifest this update:     Tue 12 May 2026 15:01:21 +0000
Manifest next update:     Wed 13 May 2026 15:01:21 +0000
Files and hashes:         1: 5pXPs2_lofOEzHeK4pmsq4HCe_o.crl (hash: Yw7aGy7I+SMCv166O2Kr/8bJ4SOqVnXwpDRUj41j79E=)
                          2: 9qcdE1YL_0C1S_ezPi6pVwjYL6k.roa (hash: 80AxotVMmTswcUF86l52EV4BdZQ++5u2AKVAcyeWhsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:f6:38:75:ef:58:75:7c:f0:e5:a7:e5:a9:ae:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e695cfb36fe5a1f384cc778ae299acab81c27bfa
        Validity
            Not Before: May 12 15:01:21 2026 GMT
            Not After : May 13 15:01:21 2026 GMT
        Subject: CN=61c445bea813ed8f908d1ec65596aaa958078319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a8:c1:bb:24:08:99:5f:a0:fb:3d:42:2a:66:
                    6d:02:d1:c5:f6:3d:2c:90:a9:d1:79:9d:f4:9b:ae:
                    44:ee:5b:8f:b8:c6:fc:2d:3a:57:2a:91:ec:46:ba:
                    fe:57:5b:72:81:74:73:9f:73:18:35:16:65:7e:d6:
                    c7:b1:9a:f7:49:c0:29:2d:ed:b1:93:50:b4:54:21:
                    f2:c6:35:42:2d:08:f1:cd:29:90:6d:e5:4e:f8:42:
                    fd:a8:fe:73:53:96:27:3d:5e:4e:7c:2a:fc:5c:e4:
                    04:00:50:94:c0:62:45:90:65:6d:eb:8c:49:93:b0:
                    fd:6d:95:a6:a1:55:e0:59:33:db:7e:31:17:27:00:
                    82:db:7f:c1:bb:83:4e:c8:9f:ab:b9:ef:a3:9b:f1:
                    2f:9e:02:f2:5a:91:b4:75:4b:47:89:03:58:27:9e:
                    7a:b3:40:5c:2c:bc:cb:7c:39:c3:1e:46:aa:0d:55:
                    4d:df:3f:c6:06:ae:7f:bd:bd:44:a9:33:5a:1c:4a:
                    3e:b0:31:55:a2:82:d0:ae:e6:cd:33:c2:1d:3b:8e:
                    9a:84:d6:b4:a5:77:c8:c5:82:9d:00:df:e3:32:43:
                    34:1e:e6:3c:cf:99:81:7a:22:60:21:dd:ae:7e:74:
                    1b:b1:94:a1:47:e3:98:c3:6a:fd:43:72:4c:3b:75:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C4:45:BE:A8:13:ED:8F:90:8D:1E:C6:55:96:AA:A9:58:07:83:19
            X509v3 Authority Key Identifier:
                keyid:E6:95:CF:B3:6F:E5:A1:F3:84:CC:77:8A:E2:99:AC:AB:81:C2:7B:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5pXPs2_lofOEzHeK4pmsq4HCe_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/48a8ba-dc61-42bd-943a-c31fa71e2635/1/5pXPs2_lofOEzHeK4pmsq4HCe_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:52:19:f9:bc:0c:26:0f:e3:6d:3a:a0:b2:6b:81:b6:2f:83:
         a1:b3:b1:fe:13:12:bb:0f:7f:9d:ce:a7:41:0d:08:76:b4:62:
         23:64:67:27:6d:69:46:73:1d:f2:43:3d:df:53:c1:08:80:ff:
         83:ac:4a:29:9e:62:61:90:71:1a:20:a8:f6:5e:fb:b6:1d:eb:
         ed:58:fb:42:85:db:d2:51:b9:d3:49:cf:2f:c1:4b:04:8c:f3:
         1d:58:1f:b3:2a:52:05:e8:1e:d1:e6:03:72:fb:fb:19:1c:e6:
         2b:f1:37:49:60:fe:4b:cd:5f:a7:16:80:4f:90:fa:23:51:83:
         a2:1e:67:52:ff:53:c9:ad:15:ae:e7:d5:d9:81:bf:26:7b:c1:
         44:cb:ea:cc:fd:87:58:fa:c9:c1:e3:b3:d1:dd:ad:d0:71:1e:
         a6:07:9a:fb:fb:43:09:89:58:f3:17:31:31:50:d0:1f:12:1f:
         34:f7:20:c4:8b:be:bc:ea:08:d7:48:9e:25:96:1c:14:ef:13:
         be:e8:dd:d3:ee:e5:f6:01:28:f6:fb:c7:d2:cf:4c:5e:2a:95:
         be:bb:2b:1a:76:7d:9a:9f:d4:f6:00:8f:b9:d9:e7:d9:8a:21:
         8c:7b:1c:5f:ba:97:98:7d:ac:72:b5:e7:20:57:24:6f:a9:38:
         11:72:1c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:37:12 2026 by rpki-client