Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
File:                     5gBvGrt1cn57wwwXnml00tGPjzg.mft (raw, json)
Hash identifier:          3TwuDOJhnDiL09nDhIl8JDNlAFycWGKqKEHau5uAUOo=
Subject key identifier:   87:1A:06:D8:58:40:08:41:A5:6A:4C:36:12:72:9A:5B:18:11:3B:7A
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Certificate issuer:       /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial:       019E1D596E67DEC70324C553DA49A29BDE74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
Manifest number:          145B
Signing time:             Tue 12 May 2026 18:01:00 +0000
Manifest this update:     Tue 12 May 2026 18:01:00 +0000
Manifest next update:     Wed 13 May 2026 18:01:00 +0000
Files and hashes:         1: 5gBvGrt1cn57wwwXnml00tGPjzg.crl (hash: nAlEbHJNHl1xbs9UR1RASFkRNSwRcX9aT+ianh1mSVA=)
                          2: MWO6M6MJ4bPprYC1GxT7fwTCMB4.roa (hash: ANyTmu/82kqGvMyK/QfVvJiysGdLYGce9RuoYKBpHjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:6e:67:de:c7:03:24:c5:53:da:49:a2:9b:de:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
        Validity
            Not Before: May 12 18:01:00 2026 GMT
            Not After : May 13 18:01:00 2026 GMT
        Subject: CN=871a06d858400841a56a4c3612729a5b18113b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:44:36:88:1a:b4:07:3f:ef:a3:94:f5:e7:d4:
                    2f:14:c1:dc:7c:9b:06:ca:29:23:9a:de:8e:1f:bf:
                    d1:79:6e:58:88:08:66:e1:a9:60:bf:f0:b4:fd:58:
                    29:e1:38:1f:49:5c:55:a6:d1:42:d4:04:50:a2:fd:
                    ae:2f:84:5d:6b:d6:a7:b5:51:21:f0:20:a5:ce:af:
                    0c:3e:64:12:a0:20:8d:c3:ab:d6:67:61:16:c4:ca:
                    b4:4d:78:ca:57:4c:a0:6f:80:7c:83:f9:44:80:98:
                    84:e9:b4:68:69:d4:75:c0:2c:4e:ac:6f:c3:09:fa:
                    98:be:3b:6c:46:83:a8:2d:1a:90:e0:3c:fc:9a:4b:
                    9c:1d:e7:21:a3:9d:37:a0:d8:97:d9:6a:b5:e9:d7:
                    16:3e:8e:d4:a5:c9:68:2f:fa:e8:c6:61:f2:7a:20:
                    a9:55:6e:d3:89:c4:78:dc:90:9e:0e:88:12:8d:c8:
                    f4:2c:e0:72:df:93:1a:1c:ca:2a:39:30:a2:4b:91:
                    32:10:3c:01:78:d6:45:f1:f6:52:4d:a5:da:35:ab:
                    ef:32:99:a3:45:47:a6:8e:93:88:c2:a2:d1:22:4f:
                    3a:ee:a9:70:d9:d5:4b:98:f8:d1:c0:64:38:2d:21:
                    36:de:a0:30:05:48:e2:34:ea:17:f8:91:ee:29:43:
                    11:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1A:06:D8:58:40:08:41:A5:6A:4C:36:12:72:9A:5B:18:11:3B:7A
            X509v3 Authority Key Identifier:
                keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3b:f8:37:17:24:37:c8:54:a8:fd:08:90:db:3c:4b:4d:11:
         4b:71:32:c9:b6:2c:36:b2:ae:d7:85:e3:d3:27:dc:d9:31:89:
         a6:b4:e8:45:4d:ff:4d:d8:60:4b:67:b5:aa:82:b5:9c:d0:ee:
         aa:86:3e:cd:b9:8e:2c:f9:c3:18:41:44:fc:0f:bd:ea:9c:e7:
         9e:19:b6:4b:0b:1f:3d:7f:aa:f6:ed:c8:03:a1:72:87:09:73:
         20:9b:0d:6f:ae:e4:8c:6d:98:6a:4c:85:55:5c:41:25:13:10:
         fc:17:50:b9:9e:53:a3:39:8e:28:2c:ee:18:68:ff:89:bf:c8:
         a6:84:dd:8c:59:a1:49:35:f5:37:3f:6f:a0:0c:48:41:65:e6:
         21:29:43:17:88:56:67:3a:2a:ce:2e:84:6c:4a:db:49:04:8f:
         1a:41:54:3a:ff:bd:54:98:37:c3:0e:e0:55:2c:32:f8:8b:ed:
         24:1d:1a:7a:f2:16:59:5e:7f:7e:32:6b:ee:fe:34:5c:48:21:
         3d:27:34:45:0a:08:ab:22:ae:1f:ea:3f:51:24:18:77:5b:de:
         3a:14:1e:9e:ce:97:ac:85:9a:d6:75:9f:1f:41:85:41:a0:d0:
         06:0a:ed:d6:f8:89:1b:a4:75:2b:47:7c:7c:76:3f:32:02:38:
         cd:e8:61:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:18 2026 by rpki-client