Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
File:                     9cNx86NKvxlX0Yld-AY_TWIH7AI.mft (raw, json)
Hash identifier:          Y5PpOMZLRCbDGlEWHQKi7GoBvmwJCFD/pzLmFZ13QVg=
Subject key identifier:   5D:81:5D:0F:AA:51:49:16:36:43:96:38:96:97:E0:FB:2F:9F:E9:5F
Authority key identifier: F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02
Certificate issuer:       /CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
Certificate serial:       019E1BD88B069DAC6F9FAF12B16D77E925A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
Manifest number:          1947
Signing time:             Tue 12 May 2026 11:00:36 +0000
Manifest this update:     Tue 12 May 2026 11:00:36 +0000
Manifest next update:     Wed 13 May 2026 11:00:36 +0000
Files and hashes:         1: 02rcOu2oVgYvFKogVTUuhoAU_Z8.roa (hash: t1BzKV6mreRxe6P7rrGXRTjA+HpmupGRMNWHhpbny/Y=)
                          2: 9cNx86NKvxlX0Yld-AY_TWIH7AI.crl (hash: HzK1I/KMoGUGEIoi0O5W+iB6h0aySBIVQg05isfpPls=)
                          3: Ja_i6Nl_QEf84Cv0hTASmUfByDk.roa (hash: PR6zLbEuwP/MFZVDvzI0MjSOqX30Bqi1dOI8MRuCOng=)
                          4: Sgl0Z64OhrO11r88F-vekHDTFUg.roa (hash: wpZ6eRiAcwvnj+jMwp2huDtJevtVDAQPpwMPlgkG8Ek=)
                          5: VN6p_bTihNH_MdXcvCva6umc71w.roa (hash: hHXGikrxhpHM6seBQ0Nc82OHE5FrPo4aFTc47ssGOfQ=)
                          6: q0a8yaRXZHqDgW6t40wuVuwZGqY.roa (hash: yQdCTPHRdYGgRQtv3qZWl01v8W1TNo2W0QOatwpBfUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1b:d8:8b:06:9d:ac:6f:9f:af:12:b1:6d:77:e9:25:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5c371f3a34abf1957d1895df8063f4d6207ec02
        Validity
            Not Before: May 12 11:00:36 2026 GMT
            Not After : May 13 11:00:36 2026 GMT
        Subject: CN=5d815d0faa514916364396389697e0fb2f9fe95f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:75:95:46:e6:b9:e3:c8:20:eb:d1:ee:92:
                    59:ff:43:f0:98:10:aa:8c:fa:5c:48:dc:76:54:e1:
                    d8:13:7b:ff:da:b0:f4:1e:82:01:44:3f:52:09:32:
                    34:f8:82:2b:23:35:ac:1e:f1:1c:2b:10:30:cd:03:
                    73:0e:59:f6:47:30:0b:12:34:2e:8c:55:86:95:f0:
                    9c:19:e7:de:a8:22:26:6c:15:02:6d:13:fe:a9:3b:
                    1a:1a:38:e4:0d:17:2a:a7:69:e6:95:4b:40:1d:c3:
                    bd:ac:ed:e1:76:d7:2e:d5:0c:79:6a:22:5a:f7:22:
                    aa:5a:ce:a2:3c:5a:99:c0:27:a2:ba:04:33:f9:fa:
                    17:49:69:cb:5c:b8:32:08:87:07:56:28:79:13:79:
                    fc:5b:9e:95:c8:f8:23:1e:63:23:22:f9:af:bd:c1:
                    e6:22:68:7e:93:2c:31:35:bd:b4:ca:d6:4d:42:80:
                    8e:52:30:9e:ce:92:e9:14:5a:21:29:d3:49:40:ec:
                    fe:1e:51:57:8c:81:83:23:f2:e0:75:e4:d1:32:18:
                    49:81:dc:74:1f:6c:ff:db:43:60:da:58:5b:8e:f6:
                    0d:10:57:d1:b9:83:c5:cf:90:16:10:72:07:37:69:
                    26:29:db:9d:b7:d7:31:aa:4f:79:2b:73:b8:7b:1c:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:81:5D:0F:AA:51:49:16:36:43:96:38:96:97:E0:FB:2F:9F:E9:5F
            X509v3 Authority Key Identifier:
                keyid:F5:C3:71:F3:A3:4A:BF:19:57:D1:89:5D:F8:06:3F:4D:62:07:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9cNx86NKvxlX0Yld-AY_TWIH7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5b0cd9-e279-46aa-81da-1bb17a8b26fe/1/9cNx86NKvxlX0Yld-AY_TWIH7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:da:ce:1f:16:a2:9e:47:ea:5b:0b:a5:a9:99:e1:1e:1d:e7:
         a9:6a:07:32:4c:86:ea:66:b6:2e:83:e9:f4:02:b0:4e:c3:e7:
         97:30:5d:45:f9:76:ec:a8:f4:cc:6f:36:74:c1:1e:96:2d:56:
         7b:b8:65:1e:dd:19:86:b3:e1:e1:d1:ac:4a:28:85:93:f9:69:
         50:1b:46:4f:3b:ff:fa:a4:f3:5e:84:fc:ae:78:7f:61:74:83:
         14:50:d0:e5:ce:6a:59:6e:0b:fc:e4:fd:bb:1c:1e:87:08:99:
         a1:a9:0a:67:8c:11:4a:22:46:1d:bf:d2:be:af:46:c2:a6:8e:
         93:ac:fb:e1:82:ac:41:17:66:cf:2b:fd:0d:24:69:b7:18:07:
         37:ca:e4:6f:94:6a:91:eb:80:e1:51:6d:65:99:26:bc:01:2a:
         5a:73:ab:54:bc:f1:82:86:7e:5e:59:7f:ae:52:20:42:9a:06:
         c6:01:1b:7d:6f:02:89:ca:d3:24:8f:fd:24:f6:5d:b2:5d:e8:
         de:80:e4:ab:bc:a6:10:d5:9d:ac:dd:d8:33:4f:e1:a3:3d:3d:
         c4:86:96:09:aa:05:f3:ed:c6:ef:36:54:49:c3:84:91:10:43:
         4d:c5:59:c6:fc:ab:72:1f:a5:5f:69:99:c1:bd:d5:41:a9:a8:
         6d:e7:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:49:14 2026 by rpki-client