Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
File:                     5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft (raw, json)
Hash identifier:          7IHNSUJyAZLVUsMxVU1+FkWmy6TpTL8ScXUMHU+Y0+4=
Subject key identifier:   C4:E3:67:D2:FA:60:12:15:E5:B5:76:DE:62:05:90:0B:47:33:36:71
Authority key identifier: E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94
Certificate issuer:       /CN=e5a6794b91b81406412a137870bfde3b170de094
Certificate serial:       019E1CB4D2FA61F74D6DD9884895A432DAA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
Manifest number:          13EB
Signing time:             Tue 12 May 2026 15:01:12 +0000
Manifest this update:     Tue 12 May 2026 15:01:12 +0000
Manifest next update:     Wed 13 May 2026 15:01:12 +0000
Files and hashes:         1: 5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl (hash: Fax9WDqDgKyZ/VsxnMunAdCxvCS9i7T/13Sa0yeZvvI=)
                          2: 9wxon_jSPGs29d0oz5cGIJC4nyg.roa (hash: Xz4cE3NQ80mMRNxOjLbkBn+IL5J1nET+/jUfxtIVjP8=)
                          3: GR0moaidu9mIStt-zm-cvuX-WDg.roa (hash: RV/X/dbPCJTmst6CLCu9ZvlvMnLGaT8HGpULXJtWGI0=)
                          4: KbTR7aHwwLpZYX34f5JnyinWFjs.roa (hash: SB5fokkBufwe+kAeEHnmUVt4YkIfxrCsr/69Y8UsTR8=)
                          5: mO6Fb7S41xAj_RDQIm69ljJKwSs.roa (hash: mzwHry2L+FiTcVlvwHZhbyETQYyjQEIEkkpwQQwfOpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:b4:d2:fa:61:f7:4d:6d:d9:88:48:95:a4:32:da:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5a6794b91b81406412a137870bfde3b170de094
        Validity
            Not Before: May 12 15:01:12 2026 GMT
            Not After : May 13 15:01:12 2026 GMT
        Subject: CN=c4e367d2fa601215e5b576de6205900b47333671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d5:83:88:1e:a0:eb:b7:06:c4:30:d5:97:51:
                    c0:1c:b0:dc:5e:9c:84:a8:e3:65:b6:61:be:55:43:
                    0c:4a:fb:ad:ac:ea:8a:15:c1:3d:0c:2f:73:d9:a0:
                    2b:39:11:e1:e2:fd:0f:2f:5d:51:6e:6d:5c:43:e0:
                    b2:d5:b5:2c:b0:c9:c0:05:82:47:2a:7d:b5:cf:df:
                    31:be:66:15:0d:79:f8:96:b3:c8:3b:15:f7:8d:46:
                    c8:8c:9a:7f:81:03:42:ca:ee:d8:09:60:3f:27:fe:
                    5a:e4:b0:12:ce:ce:d5:fd:6b:5d:7c:0d:52:bb:8b:
                    76:3c:44:f8:44:d4:6c:bc:2a:66:a2:d9:4e:c7:cc:
                    3a:b3:f9:b5:04:a9:e8:8b:6c:76:d5:0d:0d:aa:97:
                    3a:6c:d1:da:45:91:ca:a1:af:8e:0b:e9:84:d3:31:
                    c0:08:09:af:a7:43:b9:1f:ee:6d:20:ec:70:b1:2f:
                    a0:33:96:e8:6a:ff:7b:11:5a:81:8f:be:a8:54:a0:
                    43:4f:78:c8:44:31:ff:67:f1:b9:ef:15:9e:ba:18:
                    0d:80:e7:1a:19:6a:a2:8a:63:90:60:17:28:07:49:
                    b3:e3:ee:c7:94:f6:b8:ef:65:50:e4:de:b2:3b:1e:
                    bd:0d:47:41:be:fc:bd:6d:e4:fd:39:43:da:22:13:
                    10:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E3:67:D2:FA:60:12:15:E5:B5:76:DE:62:05:90:0B:47:33:36:71
            X509v3 Authority Key Identifier:
                keyid:E5:A6:79:4B:91:B8:14:06:41:2A:13:78:70:BF:DE:3B:17:0D:E0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ca34eb-8e20-4bf1-b1b2-5872109b67a8/1/5aZ5S5G4FAZBKhN4cL_eOxcN4JQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:7c:8b:a0:73:4f:73:21:36:20:aa:71:59:2d:81:dc:73:51:
         ec:3c:04:77:65:9b:7c:fa:77:e8:45:92:1e:6c:96:7e:1d:d0:
         7a:f2:3a:9e:3d:24:61:1a:84:91:0e:d9:7e:4c:e2:c6:f1:4e:
         e3:e1:ea:65:fd:60:0f:72:19:e7:de:6d:8c:a2:be:91:88:4b:
         00:e0:4d:6d:ec:7a:ea:2c:f8:da:c9:3b:8b:33:74:9b:c1:19:
         4f:e7:61:34:4c:d8:cc:99:93:d6:e6:e7:10:dd:64:d5:d9:a8:
         e0:c1:88:2e:bb:6b:aa:57:0e:7d:0e:a4:7c:aa:4f:cd:1d:0b:
         e6:4c:15:84:9a:54:b4:37:52:54:f1:61:31:fc:8f:77:86:b0:
         9a:bd:b0:40:01:8d:2d:56:3a:2a:4b:38:20:82:26:6b:11:79:
         c2:80:84:cd:9a:21:be:f3:0d:60:89:30:15:5c:81:9e:58:d3:
         d0:4d:1b:9a:58:88:f5:9a:d8:c7:aa:cc:7c:37:41:c0:6b:d9:
         78:61:5d:1e:fd:ea:e5:f8:a5:5b:c9:db:95:58:23:fa:2e:94:
         29:e2:69:37:86:49:38:c5:96:1e:94:29:60:02:41:d5:69:3a:
         c2:f6:58:77:36:3d:d0:b8:24:3c:b5:13:ef:cc:ef:94:33:ce:
         9d:44:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:39 2026 by rpki-client