Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
File:                     5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft (raw, json)
Hash identifier:          nhqrO8jl+2AtcPB5txgr8CDBPUEBcVdyBj6NFNnytkY=
Subject key identifier:   C5:28:ED:98:CA:8D:38:FA:29:A9:CD:B9:EE:BD:FD:FB:1D:35:8D:6D
Authority key identifier: E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02
Certificate issuer:       /CN=e47e92bf41a5a774511fb723af94aff0d3512602
Certificate serial:       019E1D59C1147321082B38307A3BCFEE0F16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
Manifest number:          073D
Signing time:             Tue 12 May 2026 18:01:21 +0000
Manifest this update:     Tue 12 May 2026 18:01:21 +0000
Manifest next update:     Wed 13 May 2026 18:01:21 +0000
Files and hashes:         1: 5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl (hash: S8PWXlGirxhMPnxNug3ZcwiqPZr/YktcCH+MJQDUfUw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 18:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:c1:14:73:21:08:2b:38:30:7a:3b:cf:ee:0f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47e92bf41a5a774511fb723af94aff0d3512602
        Validity
            Not Before: May 12 18:01:21 2026 GMT
            Not After : May 13 18:01:21 2026 GMT
        Subject: CN=c528ed98ca8d38fa29a9cdb9eebdfdfb1d358d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ef:69:36:d6:b2:95:aa:6e:ff:c8:66:f8:58:
                    14:b2:d6:df:75:28:bf:59:ca:37:1b:22:24:ce:99:
                    6d:ee:64:da:21:55:92:53:33:8b:a2:7e:87:58:52:
                    3a:b8:53:25:59:ff:75:ed:ea:6c:82:e8:c7:6e:65:
                    2b:2b:84:b7:5c:57:98:83:27:db:32:c4:63:e4:e6:
                    1a:9f:fe:d4:12:a4:40:08:b2:0b:40:eb:a4:06:57:
                    b0:42:44:58:7b:d5:fb:a7:dc:84:06:0f:2d:fe:97:
                    7a:83:bb:ad:b2:a3:07:04:95:ea:36:2e:76:a6:6e:
                    81:ef:f5:81:3e:10:e4:8d:00:78:87:97:ff:a3:6e:
                    5c:ce:f9:6d:fb:cd:0e:6e:d9:46:9b:fc:73:83:83:
                    00:f1:28:74:20:a0:4f:59:72:f0:a9:4d:1b:84:8b:
                    88:58:53:10:70:c4:7c:cc:90:e9:ea:1f:b0:56:9a:
                    3b:b7:62:ef:b4:3c:ba:b9:55:cb:75:e3:73:db:fc:
                    1e:36:99:71:37:c5:f1:6d:35:1f:a9:89:1a:60:e0:
                    23:0e:26:52:32:2e:09:f5:da:b9:08:56:e6:22:b9:
                    d1:70:cf:ac:ff:da:9f:0e:9f:85:d4:6f:cb:65:7c:
                    88:01:d3:9a:39:4f:31:85:00:e0:e9:f6:e7:7d:de:
                    0e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:28:ED:98:CA:8D:38:FA:29:A9:CD:B9:EE:BD:FD:FB:1D:35:8D:6D
            X509v3 Authority Key Identifier:
                keyid:E4:7E:92:BF:41:A5:A7:74:51:1F:B7:23:AF:94:AF:F0:D3:51:26:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f3e344-e506-4cd9-941b-944d88109841/1/5H6Sv0Glp3RRH7cjr5Sv8NNRJgI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:0c:bb:ec:b7:2b:52:07:76:94:ed:ba:2f:a4:81:14:5d:
         73:ef:2d:a6:ed:8c:25:51:c9:c5:e1:ac:fe:c7:f3:2d:c8:4b:
         9b:09:c8:4e:b2:96:28:5c:80:16:f5:09:c9:fa:c7:7a:a9:c8:
         11:08:0f:1f:91:4e:6b:a4:d2:1b:eb:ad:2a:d3:53:25:da:98:
         17:9a:20:07:91:6f:26:22:18:4a:09:cb:d9:7f:51:cf:41:df:
         88:8e:b1:f9:b8:71:f8:5c:68:4f:c6:37:61:f6:7a:82:b3:5e:
         2a:65:fc:f7:dd:5f:2e:3e:2d:35:35:18:2a:0e:21:23:27:46:
         fc:79:48:31:22:ef:a3:cd:53:8e:7c:7f:e8:b5:ef:42:8c:56:
         8c:1c:49:5c:ce:20:3a:c0:f2:e2:48:e9:a5:44:1e:ec:5c:3e:
         67:2e:ad:f6:54:af:c5:b3:56:0f:cb:82:4d:66:64:96:56:d8:
         e2:f6:76:4d:78:eb:7c:2b:bd:38:8f:bd:58:86:13:a8:cc:56:
         d6:c2:86:94:86:2d:f5:fc:96:4b:98:a7:20:20:94:af:d5:5b:
         a5:01:08:66:e0:f3:06:00:cb:0d:ae:e6:0e:e0:ff:3d:a4:05:
         a2:ca:1f:ce:a7:2a:ab:74:63:07:31:e5:cd:2d:5e:e7:7f:ba:
         6f:68:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----